last executing test programs: 1m22.875700097s ago: executing program 32 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x64247000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m20.664547736s ago: executing program 3 (id=478): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 1m20.621423666s ago: executing program 3 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) 1m20.548720727s ago: executing program 3 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m20.435710069s ago: executing program 3 (id=486): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1200400, &(0x7f00000005c0)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x8d) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) sendfile(r0, r0, 0x0, 0x7a680000) 1m20.230164041s ago: executing program 3 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1m20.048511654s ago: executing program 3 (id=495): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m19.973056165s ago: executing program 33 (id=495): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m1.511751864s ago: executing program 0 (id=1088): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m1.428227775s ago: executing program 0 (id=1091): r0 = socket(0x10, 0x80003, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.04173702s ago: executing program 0 (id=1110): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m0.823289933s ago: executing program 0 (id=1111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@noblock_validity}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000002b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1m0.668220075s ago: executing program 0 (id=1116): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1m0.445627758s ago: executing program 0 (id=1121): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1m0.428856278s ago: executing program 34 (id=1121): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 48.503199572s ago: executing program 7 (id=1568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 48.447866153s ago: executing program 7 (id=1572): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffff, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 48.421103173s ago: executing program 7 (id=1575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x30, 0xe, 0x2}, {0xd8, 0xdc, 0x1}}}]}}]}]}]}}]}, 0x70}}, 0x200400d4) 48.333407114s ago: executing program 7 (id=1582): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@sysvgroups}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85b63583d9d432ff2d70a8ea6b95965a084c8d9ee47d61244ed498769deef6ce4adfa3ffad724030133fd28811f8308b3ad04f4cacf28506d0a7977af17513c7200a8e1da6d9d5dad4600b614448b176b30b808fc8049c9d5d35cfc60ee47a39", 0x60) 48.031829888s ago: executing program 7 (id=1588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x192}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) 47.776161511s ago: executing program 7 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) 47.747969732s ago: executing program 35 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) 44.384240975s ago: executing program 8 (id=1704): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 44.333092416s ago: executing program 8 (id=1705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x8, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 44.179596618s ago: executing program 8 (id=1710): r0 = io_uring_setup(0x30d8, &(0x7f0000000240)={0x0, 0xf489, 0x400, 0x0, 0x238}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 44.165466578s ago: executing program 8 (id=1722): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 44.111818219s ago: executing program 8 (id=1715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 42.347573452s ago: executing program 8 (id=1751): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x3ff, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 42.332632592s ago: executing program 36 (id=1751): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x3ff, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 36.431468279s ago: executing program 9 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) 36.393331079s ago: executing program 9 (id=1914): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xd, &(0x7f0000000600)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x410ff, 0x4c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40095505, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe58", 0x77, 0x0, 0x0, 0x0) 35.617476419s ago: executing program 9 (id=1947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 35.515686821s ago: executing program 9 (id=1949): lstat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000340)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@sys_immutable}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@rodir}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 35.485176771s ago: executing program 9 (id=1950): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x4}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 35.267201024s ago: executing program 9 (id=1955): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4d5, &(0x7f0000000680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 35.251665954s ago: executing program 37 (id=1955): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4d5, &(0x7f0000000680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.863067506s ago: executing program 6 (id=2940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xf6c447fee59251f4}) close(r3) 1.811847996s ago: executing program 6 (id=2943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000300)=@req={0x3fc}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.811635807s ago: executing program 2 (id=2944): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.811328536s ago: executing program 6 (id=2945): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setns(r1, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.759752837s ago: executing program 2 (id=2946): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4da}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x7fee, 0x0}}], 0x500, 0x0) close(r1) 1.647921729s ago: executing program 6 (id=2947): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0xfeff, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.647354279s ago: executing program 2 (id=2948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r2) 1.55964759s ago: executing program 2 (id=2950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x82, 0x0, 0xa0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1.261610024s ago: executing program 1 (id=2953): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000050) r1 = io_uring_setup(0x7d98, &(0x7f0000000240)={0x0, 0x918a, 0x8, 0x3, 0x24a}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.208455084s ago: executing program 5 (id=2955): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x85, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.207637594s ago: executing program 2 (id=2956): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 1.155563285s ago: executing program 1 (id=2957): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[], 0x4, 0x7d8, &(0x7f0000000a80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x804) 1.155379885s ago: executing program 5 (id=2958): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x5}, 0x1100, 0x5dd8, 0xfff, 0x5, 0x400, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x2e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) 755.8377ms ago: executing program 2 (id=2960): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES16=r0], 0x1, 0x11ef, &(0x7f0000003980)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) 755.53735ms ago: executing program 5 (id=2961): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, 0x0, &(0x7f0000000440)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nodiscard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 751.168491ms ago: executing program 4 (id=2970): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1}}], 0x2, 0x9200000000000000) 750.9373ms ago: executing program 1 (id=2971): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fchdir(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r3, 0x2, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x3, {0x1, 0xff, 0x4}, 0x1}, 0x18) 657.867001ms ago: executing program 6 (id=2962): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 657.310812ms ago: executing program 1 (id=2974): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x200000000000004b, 0x1}}, 0x3c) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r0, 0x0) 543.531023ms ago: executing program 4 (id=2963): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000100)=0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendmmsg(r1, &(0x7f000000aec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="23a4b502", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="bf83", 0x2}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002ec0)="319e871e58a3877f7a6edbfdf31eb6a3ba528ece56607182def85e748bf68bcf3598a23fdc495a68e8112bb68534687231127fb3f684478c27302224587bdbb4caf43c7ef89c72cb9b65427b5e47497c8390d2", 0x53}], 0x1}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)="a897a4b2", 0x4}], 0x1, &(0x7f000000b340)=ANY=[@ANYBLOB="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"], 0x11c0}}], 0x4, 0x28080) 491.907824ms ago: executing program 5 (id=2964): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 485.849124ms ago: executing program 1 (id=2965): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r1) 485.482334ms ago: executing program 4 (id=2966): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 416.364464ms ago: executing program 4 (id=2967): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000640)="1db4d479c5fae3911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff10125d8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b6e77e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f619498b76fd75d31f", 0x6f, 0x8014, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000400)="8c", 0x1, 0x40004, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 411.917385ms ago: executing program 1 (id=2968): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x82, 0x0, 0xa0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 325.671856ms ago: executing program 4 (id=2969): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 296.106346ms ago: executing program 4 (id=2972): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) 257.036357ms ago: executing program 5 (id=2973): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000a00)="10200806", 0x4, 0x4, &(0x7f0000000940)={0x11, 0x8100, r2, 0x1, 0x9, 0x6, @random="34009d0700"}, 0x14) 119.533249ms ago: executing program 5 (id=2975): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 0s ago: executing program 6 (id=2976): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): ate [ 98.072452][ T9293] bridge0: port 1(gretap0) entered forwarding state [ 98.098750][ T9295] loop2: detected capacity change from 0 to 512 [ 98.106482][ T9295] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.115585][ T9295] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 98.124416][ T9295] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 98.133886][ T9295] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 98.142025][ T9295] System zones: 0-2, 18-18, 34-34 [ 98.147574][ T9295] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 98.162454][ T9295] EXT4-fs (loop2): 1 truncate cleaned up [ 98.168497][ T9295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.255925][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.273666][ T9298] loop2: detected capacity change from 0 to 128 [ 98.281339][ T9298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 98.289459][ T9298] System zones: 1-3, 19-19, 35-36 [ 98.295271][ T9298] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.308055][ T9298] ext4 filesystem being mounted at /461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.360374][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.384203][ T9301] loop5: detected capacity change from 0 to 2048 [ 98.392549][ T9303] Falling back ldisc for ttyS3. [ 98.427409][ T9301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.445597][ T9301] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.596607][ T9315] IPVS: Error joining to the multicast group [ 98.609936][ T9317] SELinux: failed to load policy [ 98.669379][ T9321] loop2: detected capacity change from 0 to 1024 [ 98.677740][ T9321] EXT4-fs: Ignoring removed orlov option [ 98.691555][ T9321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.790018][ T9326] loop1: detected capacity change from 0 to 512 [ 98.807781][ T9326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.830833][ T9326] EXT4-fs (loop1): 1 truncate cleaned up [ 98.837178][ T9326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.881010][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.931213][ T9337] loop6: detected capacity change from 0 to 1024 [ 98.938021][ T9337] EXT4-fs: Ignoring removed nobh option [ 98.960536][ T9337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.976147][ T3411] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 99.007794][ T3411] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 99.020501][ T3411] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.020501][ T3411] [ 99.053823][ T3411] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 99.066597][ T3411] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.066597][ T3411] [ 99.076370][ T3411] EXT4-fs (loop5): Total free blocks count 0 [ 99.082401][ T3411] EXT4-fs (loop5): Free/Dirty block details [ 99.088387][ T3411] EXT4-fs (loop5): free_blocks=0 [ 99.093335][ T3411] EXT4-fs (loop5): dirty_blocks=2048 [ 99.098649][ T3411] EXT4-fs (loop5): Block reservation details [ 99.166264][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.284230][ T9355] loop5: detected capacity change from 0 to 512 [ 99.294601][ T9355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.307639][ T9355] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.331320][ T9357] loop6: detected capacity change from 0 to 1024 [ 99.358327][ T9357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.390731][ T5737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.453331][ T9363] loop1: detected capacity change from 0 to 512 [ 99.467844][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.484127][ T9365] smc: net device bond0 applied user defined pnetid SYZ0 [ 99.495218][ T9369] __nla_validate_parse: 2 callbacks suppressed [ 99.495268][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'. [ 99.498269][ T9363] EXT4-fs (loop1): 1 orphan inode deleted [ 99.510014][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 99.528019][ T9365] smc: net device bond0 erased user defined pnetid SYZ0 [ 99.528575][ T9363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.564154][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.566085][ T9363] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.593270][ T9373] ALSA: seq fatal error: cannot create timer (-22) [ 99.602820][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2175'. [ 99.737086][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.758862][ T9381] xt_hashlimit: size too large, truncated to 1048576 [ 99.893730][ T9390] loop6: detected capacity change from 0 to 2048 [ 99.978617][ T9390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.022570][ T9408] loop1: detected capacity change from 0 to 512 [ 100.089892][ T9415] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2181: bg 0: block 234: padding at end of block bitmap is not set [ 100.102595][ T9408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.114014][ T9415] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 20 with error 117 [ 100.126439][ T9415] EXT4-fs (loop6): This should not happen!! Data will be lost [ 100.126439][ T9415] [ 100.138380][ T9408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.152307][ T9408] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.169868][ T8083] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 20 with max blocks 874 with error 28 [ 100.182366][ T8083] EXT4-fs (loop6): This should not happen!! Data will be lost [ 100.182366][ T8083] [ 100.192045][ T8083] EXT4-fs (loop6): Total free blocks count 0 [ 100.198142][ T8083] EXT4-fs (loop6): Free/Dirty block details [ 100.204252][ T8083] EXT4-fs (loop6): free_blocks=0 [ 100.209262][ T8083] EXT4-fs (loop6): dirty_blocks=880 [ 100.214473][ T8083] EXT4-fs (loop6): Block reservation details [ 100.224322][ T9408] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2189: corrupted xattr block 32: bad e_name length [ 100.238971][ T9408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 100.253477][ T9408] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2189: corrupted xattr block 32: bad e_name length [ 100.268203][ T9408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 100.279687][ T9427] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.2189: bit already cleared for inode 16 [ 100.328464][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.340836][ T9431] loop4: detected capacity change from 0 to 512 [ 100.361928][ T9431] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2199: invalid indirect mapped block 256 (level 2) [ 100.377229][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 100.377245][ T29] audit: type=1326 audit(1745959114.525:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.407481][ T29] audit: type=1326 audit(1745959114.525:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.430996][ T29] audit: type=1326 audit(1745959114.525:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.454457][ T29] audit: type=1326 audit(1745959114.525:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.464858][ T9431] EXT4-fs (loop4): 2 truncates cleaned up [ 100.478045][ T29] audit: type=1326 audit(1745959114.525:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.507222][ T29] audit: type=1326 audit(1745959114.525:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.507791][ T9431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.530658][ T29] audit: type=1326 audit(1745959114.525:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.566560][ T29] audit: type=1326 audit(1745959114.525:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.590186][ T29] audit: type=1326 audit(1745959114.525:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.613673][ T29] audit: type=1326 audit(1745959114.525:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9435 comm="syz.1.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 100.621803][ T9431] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.2199: path /39/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 100.696984][ T8835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.796872][ T9457] loop4: detected capacity change from 0 to 128 [ 100.818285][ T9460] vhci_hcd: invalid port number 236 [ 100.823592][ T9460] vhci_hcd: default hub control req: 8014 v0f00 i00ec l0 [ 100.831524][ T9457] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.887498][ T9457] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.018984][ T9483] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.030981][ T9483] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 101.139178][ T9495] loop5: detected capacity change from 0 to 1024 [ 101.163263][ T9495] EXT4-fs: Ignoring removed orlov option [ 101.172967][ T9501] netlink: 12 bytes leftover after parsing attributes in process `'. [ 101.181747][ T9495] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 101.208954][ T9504] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.211562][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2228'. [ 101.229893][ T9495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.242592][ T9507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.250088][ T9507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.259313][ T9507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.260350][ T9495] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.2223: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 101.266821][ T9507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.329351][ T9515] netlink: 'syz.1.2232': attribute type 3 has an invalid length. [ 101.338926][ T5737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.357252][ T9517] loop4: detected capacity change from 0 to 512 [ 101.374082][ T9517] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 101.492222][ T9527] loop6: detected capacity change from 0 to 1024 [ 101.499189][ T9527] EXT4-fs: Ignoring removed nobh option [ 101.504801][ T9527] EXT4-fs: Ignoring removed bh option [ 101.528305][ T9527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.543045][ T9527] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2237: Allocating blocks 385-513 which overlap fs metadata [ 101.557792][ T9527] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2237: Allocating blocks 385-513 which overlap fs metadata [ 101.573267][ T9527] EXT4-fs (loop6): pa ffff888104df54d0: logic 16, phys. 129, len 24 [ 101.581327][ T9527] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 101.602990][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.617973][ T9532] ALSA: seq fatal error: cannot create timer (-22) [ 101.716617][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 101.759600][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 101.792400][ T9549] loop1: detected capacity change from 0 to 164 [ 101.801111][ T9549] syz.1.2245: attempt to access beyond end of device [ 101.801111][ T9549] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 101.815078][ T9549] syz.1.2245: attempt to access beyond end of device [ 101.815078][ T9549] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 101.842998][ T9551] netlink: 'syz.6.2246': attribute type 4 has an invalid length. [ 101.880540][ T9555] loop1: detected capacity change from 0 to 1024 [ 101.888205][ T9555] EXT4-fs: Ignoring removed bh option [ 101.906762][ T9555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.921859][ T9555] EXT4-fs (loop1): shut down requested (0) [ 101.941723][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.967028][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2250'. [ 102.075315][ T9569] loop6: detected capacity change from 0 to 2048 [ 102.088105][ T9569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.112967][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.153043][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'. [ 102.306995][ T9600] loop4: detected capacity change from 0 to 1024 [ 102.333709][ T9603] loop4: detected capacity change from 0 to 1024 [ 102.340439][ T9603] EXT4-fs: Ignoring removed bh option [ 102.346166][ T9603] EXT4-fs: inline encryption not supported [ 102.352115][ T9603] EXT4-fs: Ignoring removed i_version option [ 102.358505][ T9603] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.370341][ T9603] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.2268: lblock 1 mapped to illegal pblock 1 (length 1) [ 102.384477][ T9603] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2268: Failed to acquire dquot type 0 [ 102.396130][ T9603] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.2268: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.418024][ T9603] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2268: Invalid inode bitmap blk 0 in block_group 0 [ 102.430896][ T8083] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 102.447064][ T9603] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 102.454307][ T9607] loop6: detected capacity change from 0 to 512 [ 102.456042][ T8083] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:40: Failed to release dquot type 0 [ 102.466097][ T9603] EXT4-fs (loop4): 1 orphan inode deleted [ 102.475399][ T9607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 102.479679][ T9603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.488139][ T9607] System zones: 1-12 [ 102.505451][ T9607] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #2: comm syz.6.2269: corrupted xattr block 255: invalid header [ 102.518768][ T9607] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 102.519260][ T9603] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 102.528033][ T9607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.547467][ T9607] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #2: comm syz.6.2269: corrupted xattr block 255: invalid header [ 102.561291][ T9607] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 102.569342][ T9607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.580813][ T8835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.625938][ T9612] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.634369][ T9612] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 103.024221][ T9666] bridge: RTM_NEWNEIGH with invalid ether address [ 103.125674][ T9677] loop2: detected capacity change from 0 to 512 [ 103.135616][ T9677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.150599][ T9677] EXT4-fs (loop2): 1 truncate cleaned up [ 103.157028][ T9675] loop1: detected capacity change from 0 to 2048 [ 103.157421][ T9677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.200479][ T9675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.221647][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.243723][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.258242][ T9684] loop5: detected capacity change from 0 to 4096 [ 103.285528][ T9684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.305727][ T9684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.342187][ T9695] loop2: detected capacity change from 0 to 512 [ 103.350894][ T9695] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 103.362380][ T9695] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.369029][ T9695] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.2307: Block bitmap for bg 0 marked uninitialized [ 103.383340][ T9695] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 103.392299][ T9695] EXT4-fs (loop2): 1 orphan inode deleted [ 103.399409][ T9695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.423567][ T9695] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 103.446201][ T9695] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 103.470424][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.475598][ T9702] loop1: detected capacity change from 0 to 8192 [ 103.519275][ T9706] loop2: detected capacity change from 0 to 512 [ 103.541919][ T9708] loop5: detected capacity change from 0 to 2048 [ 103.557104][ T9714] loop1: detected capacity change from 0 to 512 [ 103.563593][ T9706] EXT4-fs (loop2): 1 orphan inode deleted [ 103.570629][ T9706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.583308][ T8055] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 103.585635][ T9706] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.609188][ T9708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.623295][ T9714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.635921][ T9714] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.656567][ T9714] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.2315: corrupted inode contents [ 103.668858][ T9714] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.2315: mark_inode_dirty error [ 103.680612][ T9714] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.2315: corrupted inode contents [ 103.693437][ T9714] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.2315: mark_inode_dirty error [ 103.693899][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.714286][ T8055] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 103.720146][ T9714] EXT4-fs error (device loop1): ext4_lookup:1786: inode #18: comm syz.1.2315: 'file0' linked to parent dir [ 103.744418][ T9724] loop6: detected capacity change from 0 to 512 [ 103.746568][ T5737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.760391][ T9724] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.778529][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.806920][ T9724] EXT4-fs (loop6): 1 truncate cleaned up [ 103.813305][ T9724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.830877][ T9728] bridge0: port 1(gretap0) entered disabled state [ 103.873543][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.906143][ T3382] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 103.913620][ T3382] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 103.921050][ T3382] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 103.931966][ T3382] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.80 Device [syz0] on syz1 [ 103.960061][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 103.967617][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 103.975089][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 103.982610][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 103.990022][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 103.997586][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.005043][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.012517][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.019925][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.027392][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.034831][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.042232][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.049642][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.064022][ T9749] loop6: detected capacity change from 0 to 512 [ 104.069221][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.077758][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.085191][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.092716][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.100103][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.107570][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.114991][ T3382] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 104.123108][ T3382] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.02 Device [syz0] on syz1 [ 104.133038][ T9749] EXT4-fs (loop6): orphan cleanup on readonly fs [ 104.142505][ T9749] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 104.158348][ T9749] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 104.165276][ T9749] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.2327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 104.183912][ T9749] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2327: couldn't read orphan inode 13 (err -117) [ 104.196821][ T9749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.217999][ T9752] loop1: detected capacity change from 0 to 512 [ 104.241909][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.251804][ T9752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.277414][ T9752] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.288708][ T9752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.319714][ T9763] loop2: detected capacity change from 0 to 512 [ 104.348071][ T9770] loop1: detected capacity change from 0 to 512 [ 104.362871][ T9774] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 104.369110][ T9763] EXT4-fs (loop2): 1 orphan inode deleted [ 104.371171][ T9774] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 104.376969][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 104.399681][ T9763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.414437][ T9770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.428011][ T9770] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.448462][ T9763] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.529166][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.624549][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.672247][ T9795] tipc: Enabled bearer , priority 0 [ 104.701737][ T9795] tipc: Disabling bearer [ 104.747732][ T9807] macvlan2: entered promiscuous mode [ 104.753085][ T9807] bridge0: entered promiscuous mode [ 104.768482][ T9807] bridge0: port 3(macvlan2) entered blocking state [ 104.775062][ T9807] bridge0: port 3(macvlan2) entered disabled state [ 104.785758][ T9807] macvlan2: entered allmulticast mode [ 104.793235][ T9807] macvlan2: left allmulticast mode [ 104.801918][ T9813] loop1: detected capacity change from 0 to 128 [ 104.805659][ T9807] bridge0: left promiscuous mode [ 104.809309][ T9813] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 104.830394][ T9813] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 104.838379][ T9813] FAT-fs (loop1): Filesystem has been set read-only [ 104.845028][ T9813] syz.1.2352: attempt to access beyond end of device [ 104.845028][ T9813] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 104.862358][ T9810] ipvlan2: entered promiscuous mode [ 104.870448][ T9810] bridge0: port 2(ipvlan2) entered blocking state [ 104.877053][ T9810] bridge0: port 2(ipvlan2) entered disabled state [ 104.883880][ T9810] ipvlan2: entered allmulticast mode [ 104.890540][ T9810] ipvlan2: left allmulticast mode [ 104.910416][ T9815] netlink: 'syz.4.2353': attribute type 4 has an invalid length. [ 104.930800][ T9819] loop6: detected capacity change from 0 to 164 [ 104.950207][ T9819] Unable to read rock-ridge attributes [ 104.967453][ T9819] Unable to read rock-ridge attributes [ 104.977497][ T9819] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 104.995937][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.003315][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.012689][ T9824] bridge0: entered allmulticast mode [ 105.032583][ T9826] bridge0: port 2(macvlan2) entered blocking state [ 105.039302][ T9826] bridge0: port 2(macvlan2) entered disabled state [ 105.045201][ T9830] loop1: detected capacity change from 0 to 1024 [ 105.046593][ T9826] macvlan2: entered allmulticast mode [ 105.059640][ T9826] macvlan2: left allmulticast mode [ 105.083522][ T9830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.120349][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.178344][ T9849] loop4: detected capacity change from 0 to 512 [ 105.215164][ T9849] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.216992][ T9854] loop6: detected capacity change from 0 to 512 [ 105.234796][ T9849] EXT4-fs (loop4): 1 truncate cleaned up [ 105.261216][ T9854] EXT4-fs (loop6): too many log groups per flexible block group [ 105.269045][ T9854] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 105.277745][ T9854] EXT4-fs (loop6): mount failed [ 105.367691][ T9874] loop1: detected capacity change from 0 to 512 [ 105.374777][ T9874] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 105.392710][ T9874] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.421119][ T9874] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.2378: Block bitmap for bg 0 marked uninitialized [ 105.443532][ T9874] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 105.455479][ T9874] EXT4-fs (loop1): 1 orphan inode deleted [ 105.463845][ T9884] loop6: detected capacity change from 0 to 512 [ 105.487053][ T9884] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 105.495136][ T9884] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 105.510441][ T9884] EXT4-fs (loop6): 1 truncate cleaned up [ 105.524155][ T9884] EXT4-fs: Ignoring removed orlov option [ 105.532765][ T9884] EXT4-fs (loop6): can't enable nombcache during remount [ 105.552529][ T9874] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 105.572219][ T9874] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 105.628050][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 105.628067][ T29] audit: type=1326 audit(1745959119.775:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.674063][ T29] audit: type=1326 audit(1745959119.775:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.697534][ T29] audit: type=1326 audit(1745959119.775:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.721053][ T29] audit: type=1326 audit(1745959119.775:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.744478][ T29] audit: type=1326 audit(1745959119.775:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.767890][ T29] audit: type=1326 audit(1745959119.775:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.791282][ T29] audit: type=1326 audit(1745959119.775:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.814608][ T29] audit: type=1326 audit(1745959119.775:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.838033][ T29] audit: type=1326 audit(1745959119.775:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.861450][ T29] audit: type=1326 audit(1745959119.775:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.5.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 105.931484][ T9905] loop5: detected capacity change from 0 to 512 [ 105.939258][ T9903] loop1: detected capacity change from 0 to 164 [ 105.946077][ T9905] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.958815][ T9910] loop2: detected capacity change from 0 to 128 [ 105.968668][ T9903] syz.1.2390: attempt to access beyond end of device [ 105.968668][ T9903] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 105.982647][ T9910] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 106.005145][ T9910] EXT4-fs: error: could not find journal device path [ 106.008010][ T9903] syz.1.2390: attempt to access beyond end of device [ 106.008010][ T9903] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 106.033551][ T9917] loop6: detected capacity change from 0 to 512 [ 106.042170][ T9905] EXT4-fs (loop5): 1 truncate cleaned up [ 106.074601][ T9919] loop1: detected capacity change from 0 to 512 [ 106.087431][ T9917] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.119334][ T9919] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 106.132944][ T9919] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.139539][ T9919] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.155721][ T9919] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 106.188288][ T9919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2395: bg 0: block 40: padding at end of block bitmap is not set [ 106.203239][ T9933] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 106.209797][ T9933] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.217498][ T9933] vhci_hcd vhci_hcd.0: Device attached [ 106.218538][ T9919] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 106.232485][ T9934] vhci_hcd: connection closed [ 106.235904][ T8083] vhci_hcd: stop threads [ 106.244866][ T8083] vhci_hcd: release socket [ 106.249442][ T8083] vhci_hcd: disconnect device [ 106.257956][ T9919] EXT4-fs (loop1): 1 truncate cleaned up [ 106.274518][ T9939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2404'. [ 106.281827][ T9919] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.2395: corrupted xattr block 31: invalid header [ 106.297713][ T9919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 106.316975][ T9919] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.2395: corrupted xattr block 31: invalid header [ 106.331838][ T9919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 106.343932][ T9951] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 106.352229][ T9951] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 106.367557][ T9919] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.2395: bad symlink. [ 106.432906][ T9968] sd 0:0:1:0: device reset [ 106.479536][ T9974] hub 8-0:1.0: USB hub found [ 106.484290][ T9974] hub 8-0:1.0: 8 ports detected [ 106.792586][T10041] loop5: detected capacity change from 0 to 512 [ 106.819919][T10041] EXT4-fs (loop5): 1 orphan inode deleted [ 106.827521][T10041] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.838751][ T8083] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:40: Failed to release dquot type 1 [ 107.004813][T10076] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 107.013065][T10076] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 107.158071][T10089] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2420'. [ 107.300973][T10063] Set syz1 is full, maxelem 65536 reached [ 107.320621][T10107] loop1: detected capacity change from 0 to 1024 [ 107.360778][T10107] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.369763][T10114] loop6: detected capacity change from 0 to 512 [ 107.386178][T10107] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 107.394334][T10107] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.403692][T10107] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 107.414022][T10107] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.2426: mark_inode_dirty error [ 107.414903][T10114] EXT4-fs (loop6): 1 orphan inode deleted [ 107.425641][ T8097] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:53: Failed to release dquot type 1 [ 107.447250][T10107] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2426: Invalid block bitmap block 3 in block_group 0 [ 107.470879][T10122] loop4: detected capacity change from 0 to 2048 [ 107.473457][T10114] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.488359][T10107] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2426: Invalid block bitmap block 3 in block_group 0 [ 107.505458][T10107] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2426: Invalid block bitmap block 3 in block_group 0 [ 107.520312][T10122] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.543674][T10107] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2426: Invalid block bitmap block 3 in block_group 0 [ 107.558100][T10107] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 107.568172][T10107] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.2426: mark_inode_dirty error [ 107.591737][T10107] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm syz.1.2426: lblock 6 mapped to illegal pblock 1 (length 1) [ 107.625530][T10107] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.2426: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.646312][T10107] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2426: Failed to acquire dquot type 0 [ 107.657733][T10130] loop2: detected capacity change from 0 to 164 [ 107.658130][T10107] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 49: comm syz.1.2426: lblock 1 mapped to illegal pblock 49 (length 1) [ 107.678737][T10107] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2426: Failed to acquire dquot type 0 [ 107.690222][T10130] Unable to read rock-ridge attributes [ 107.691888][T10107] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 107.706205][T10107] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #15: comm syz.1.2426: mark_inode_dirty error [ 107.726008][T10107] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 107.738019][T10130] Unable to read rock-ridge attributes [ 107.740787][T10107] EXT4-fs (loop1): 1 orphan inode deleted [ 107.745775][T10130] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 107.768542][T10107] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 107.780755][T10107] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.2426: Abort forced by user [ 107.791097][T10107] EXT4-fs (loop1): Remounting filesystem read-only [ 107.797716][T10107] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 107.992959][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.007798][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.016702][T10151] loop1: detected capacity change from 0 to 1024 [ 108.023656][T10151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.032623][T10151] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.045731][T10151] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 108.053734][T10151] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.061401][T10151] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 108.071804][T10151] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 108.105361][T10151] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 108.105818][ T8055] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 345: padding at end of block bitmap is not set [ 108.119192][T10151] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 108.133586][ T8055] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 108.148807][T10151] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 108.158768][ T8055] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.158768][ T8055] [ 108.183159][T10151] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 108.198767][ T8061] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 108.211532][ T8061] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.211532][ T8061] [ 108.221267][ T8061] EXT4-fs (loop4): Total free blocks count 0 [ 108.227356][ T8061] EXT4-fs (loop4): Free/Dirty block details [ 108.233275][ T8061] EXT4-fs (loop4): free_blocks=0 [ 108.236590][T10151] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 108.238241][ T8061] EXT4-fs (loop4): dirty_blocks=2048 [ 108.254477][ T8061] EXT4-fs (loop4): Block reservation details [ 108.257887][T10151] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm wÞ£ÿ: lblock 6 mapped to illegal pblock 1 (length 1) [ 108.260545][ T8061] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 108.276603][T10151] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm wÞ£ÿ: lblock 0 mapped to illegal pblock 48 (length 1) [ 108.297774][T10151] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 108.310036][T10151] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 49: comm wÞ£ÿ: lblock 1 mapped to illegal pblock 49 (length 1) [ 108.324380][T10151] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 108.338556][T10151] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 108.348208][T10151] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 108.360161][T10151] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 108.370443][T10151] EXT4-fs (loop1): 1 orphan inode deleted [ 108.392118][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2458'. [ 108.409095][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 108.416912][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 108.424612][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.432328][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.433826][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2458'. [ 108.440021][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.440071][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.464299][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.471956][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.479661][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.488023][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.495830][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.503471][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.511131][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.518783][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.526524][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.534168][ T2969] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 108.542727][ T2969] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 108.593157][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2450'. [ 108.632479][T10173] loop1: detected capacity change from 0 to 128 [ 108.703557][T10185] loop5: detected capacity change from 0 to 2048 [ 108.726886][T10184] hub 8-0:1.0: USB hub found [ 108.735195][T10184] hub 8-0:1.0: 8 ports detected [ 108.741385][T10185] loop5: p1 < > p4 [ 108.745191][T10193] Cannot find del_set index 1 as target [ 108.754914][T10185] loop5: p4 size 8388608 extends beyond EOD, truncated [ 108.777450][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'. [ 108.796307][T10197] loop6: detected capacity change from 0 to 1024 [ 108.804992][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'. [ 108.820528][T10197] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.837114][T10197] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.849408][T10197] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.849408][T10197] [ 108.859112][T10197] EXT4-fs (loop6): Total free blocks count 0 [ 108.865093][T10197] EXT4-fs (loop6): Free/Dirty block details [ 108.871121][T10197] EXT4-fs (loop6): free_blocks=68451041280 [ 108.876961][T10197] EXT4-fs (loop6): dirty_blocks=80 [ 108.882082][T10197] EXT4-fs (loop6): Block reservation details [ 108.888210][T10197] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 108.911565][T10202] loop2: detected capacity change from 0 to 512 [ 108.918967][ T8083] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 108.931405][ T8083] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.931405][ T8083] [ 108.944159][T10204] syz.5.2465: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 108.952038][T10202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.958760][T10204] CPU: 1 UID: 0 PID: 10204 Comm: syz.5.2465 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 108.958788][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 108.958803][T10204] Call Trace: [ 108.958886][T10204] [ 108.958893][T10204] __dump_stack+0x1d/0x30 [ 108.958917][T10204] dump_stack_lvl+0xe8/0x140 [ 108.958980][T10204] dump_stack+0x15/0x1b [ 108.958999][T10204] warn_alloc+0x12b/0x1a0 [ 108.959023][T10204] ? update_curr+0x27f/0x320 [ 108.959055][T10204] ? enqueue_task_fair+0x86b/0x990 [ 108.959083][T10204] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 108.959183][T10204] ? probe_sched_wakeup+0x85/0xa0 [ 108.959282][T10204] ? ttwu_do_activate+0x1cf/0x210 [ 108.959317][T10204] ? __rcu_read_unlock+0x4f/0x70 [ 108.959340][T10204] ? avc_has_perm_noaudit+0x1b1/0x200 [ 108.959377][T10204] ? should_fail_ex+0x30/0x280 [ 108.959463][T10204] ? xskq_create+0x36/0xe0 [ 108.959486][T10204] ? should_failslab+0x8c/0xb0 [ 108.959510][T10204] vmalloc_user_noprof+0x59/0x70 [ 108.959529][T10204] ? xskq_create+0x80/0xe0 [ 108.959609][T10204] xskq_create+0x80/0xe0 [ 108.959646][T10204] xsk_init_queue+0x95/0xf0 [ 108.959725][T10204] xsk_setsockopt+0x3de/0x510 [ 108.959831][T10204] ? __pfx_xsk_setsockopt+0x10/0x10 [ 108.959860][T10204] __sys_setsockopt+0x181/0x200 [ 108.959958][T10204] ? fpregs_restore_userregs+0xbb/0x190 [ 108.959990][T10204] __x64_sys_setsockopt+0x64/0x80 [ 108.960070][T10204] x64_sys_call+0x2bd5/0x2fb0 [ 108.960119][T10204] do_syscall_64+0xd0/0x1a0 [ 108.960145][T10204] ? clear_bhb_loop+0x25/0x80 [ 108.960170][T10204] ? clear_bhb_loop+0x25/0x80 [ 108.960195][T10204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.960295][T10204] RIP: 0033:0x7f62f961e969 [ 108.960364][T10204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.960385][T10204] RSP: 002b:00007f62f7c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.960408][T10204] RAX: ffffffffffffffda RBX: 00007f62f9845fa0 RCX: 00007f62f961e969 [ 108.960422][T10204] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 108.960437][T10204] RBP: 00007f62f96a0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 108.960451][T10204] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 108.960514][T10204] R13: 0000000000000000 R14: 00007f62f9845fa0 R15: 00007fffb2473298 [ 108.960532][T10204] [ 108.960539][T10204] Mem-Info: [ 109.006393][T10202] EXT4-fs (loop2): 1 truncate cleaned up [ 109.010527][T10204] active_anon:21204 inactive_anon:6 isolated_anon:0 [ 109.010527][T10204] active_file:16159 inactive_file:2136 isolated_file:0 [ 109.010527][T10204] unevictable:0 dirty:207 writeback:0 [ 109.010527][T10204] slab_reclaimable:3148 slab_unreclaimable:29539 [ 109.010527][T10204] mapped:28131 shmem:17605 pagetables:1066 [ 109.010527][T10204] sec_pagetables:0 bounce:0 [ 109.010527][T10204] kernel_misc_reclaimable:0 [ 109.010527][T10204] free:1845503 free_pcp:25552 free_cma:0 [ 109.262728][T10204] Node 0 active_anon:84700kB inactive_anon:24kB active_file:64636kB inactive_file:8544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112524kB dirty:828kB writeback:0kB shmem:70420kB writeback_tmp:0kB kernel_stack:3968kB pagetables:4264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 109.291721][T10204] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.318650][T10204] lowmem_reserve[]: 0 2884 7863 7863 [ 109.323965][T10204] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 109.352662][T10204] lowmem_reserve[]: 0 0 4978 4978 [ 109.357754][T10204] Node 0 Normal free:4416684kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:84468kB inactive_anon:24kB active_file:59416kB inactive_file:8544kB unevictable:0kB writepending:828kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:104180kB local_pcp:81048kB free_cma:0kB [ 109.388180][T10204] lowmem_reserve[]: 0 0 0 0 [ 109.391637][T10209] sd 0:0:1:0: device reset [ 109.392796][T10204] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.410149][T10204] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 109.426483][T10204] Node 0 Normal: 12*4kB (UME) 15*8kB (ME) 15*16kB (UME) 4*32kB (ME) 3*64kB (M) 18*128kB (UM) 63*256kB (UM) 93*512kB (UME) 76*1024kB (UME) 26*2048kB (UM) 1030*4096kB (UM) = 4416728kB [ 109.444785][T10204] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 109.454166][T10204] 34583 total pagecache pages [ 109.458875][T10204] 7 pages in swap cache [ 109.463030][T10204] Free swap = 124968kB [ 109.467221][T10204] Total swap = 124996kB [ 109.471436][T10204] 2097051 pages RAM [ 109.475298][T10204] 0 pages HighMem/MovableOnly [ 109.480091][T10204] 80258 pages reserved [ 109.508888][T10215] gretap0: left allmulticast mode [ 109.513975][T10215] gretap0: left promiscuous mode [ 109.519340][T10215] bridge0: port 1(gretap0) entered disabled state [ 109.584849][T10226] loop4: detected capacity change from 0 to 1024 [ 109.591668][T10228] loop6: detected capacity change from 0 to 512 [ 109.592033][T10226] EXT4-fs: Ignoring removed orlov option [ 109.603711][T10215] bond1: (slave gretap1): Releasing active interface [ 109.604120][T10228] EXT4-fs: Ignoring removed nobh option [ 109.643550][T10228] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.683426][T10234] loop2: detected capacity change from 0 to 512 [ 109.709654][T10228] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2476: bg 0: block 224: padding at end of block bitmap is not set [ 109.724086][T10234] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 109.724326][T10234] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.733245][T10228] EXT4-fs (loop6): Remounting filesystem read-only [ 109.770321][T10242] loop1: detected capacity change from 0 to 1024 [ 109.794691][T10234] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.810020][T10234] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 109.820307][T10234] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2478: bg 0: block 40: padding at end of block bitmap is not set [ 109.834762][T10234] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 109.844391][T10234] EXT4-fs (loop2): 1 truncate cleaned up [ 109.879862][T10234] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.2478: corrupted xattr block 31: invalid header [ 109.893807][T10234] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 109.903621][T10234] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.2478: corrupted xattr block 31: invalid header [ 109.939027][T10260] loop1: detected capacity change from 0 to 512 [ 109.945573][T10234] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 109.956478][T10260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.967055][T10234] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.2478: bad symlink. [ 109.979747][T10260] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.980734][T10265] loop5: detected capacity change from 0 to 128 [ 110.029141][T10269] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2492'. [ 110.034184][T10260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 304: padding at end of block bitmap is not set [ 110.070874][T10271] loop6: detected capacity change from 0 to 164 [ 110.072843][T10260] EXT4-fs (loop1): Remounting filesystem read-only [ 110.077583][T10271] /dev/loop6: Can't open blockdev [ 110.105477][T10260] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1597: inode #19: comm +}[@: cleanup dec ref error -117 [ 110.218097][T10285] loop5: detected capacity change from 0 to 512 [ 110.242745][T10285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.289183][T10285] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.317778][T10291] loop2: detected capacity change from 0 to 1024 [ 110.324803][T10291] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.333952][T10291] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.345008][T10291] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.355300][T10291] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.355665][T10285] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2498: corrupted xattr block 32: bad e_name length [ 110.375260][T10301] loop6: detected capacity change from 0 to 512 [ 110.382287][T10291] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 110.392284][T10291] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 110.403514][T10291] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 110.405263][T10301] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 110.421561][T10291] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 110.436901][T10285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 110.440992][T10291] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 110.446783][T10285] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2498: corrupted xattr block 32: bad e_name length [ 110.460299][T10301] EXT4-fs (loop6): orphan cleanup on readonly fs [ 110.485679][T10306] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2498: corrupted xattr block 32: bad e_name length [ 110.500502][T10291] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 110.510421][T10301] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.525083][T10285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 110.526301][T10306] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 110.544502][T10291] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 110.544849][T10306] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2498: corrupted xattr block 32: bad e_name length [ 110.557814][T10307] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2498: corrupted xattr block 32: bad e_name length [ 110.574063][T10306] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 110.591839][T10307] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 110.600823][T10301] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 110.601003][T10291] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm wÞ£ÿ: lblock 6 mapped to illegal pblock 1 (length 1) [ 110.607661][T10307] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2498: corrupted xattr block 32: bad e_name length [ 110.638021][T10301] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2506: bg 0: block 40: padding at end of block bitmap is not set [ 110.652348][T10307] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 110.667945][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 110.667962][ T29] audit: type=1400 audit(1745959124.815:3645): avc: denied { ioctl } for pid=10311 comm="syz.1.2510" path="socket:[29991]" dev="sockfs" ino=29991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.702198][T10291] Quota error (device loop2): write_blk: dquota write failed [ 110.703216][ T29] audit: type=1400 audit(1745959124.845:3646): avc: denied { watch watch_reads } for pid=10284 comm="syz.5.2498" path="/312/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.709630][T10291] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 110.744032][T10301] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 110.754422][T10315] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2509'. [ 110.755165][T10301] EXT4-fs (loop6): 1 truncate cleaned up [ 110.770031][T10304] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.2498: bit already cleared for inode 16 [ 110.789041][T10291] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm wÞ£ÿ: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.825171][ T29] audit: type=1326 audit(1745959124.945:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 110.835473][T10301] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.2506: corrupted xattr block 31: invalid header [ 110.848757][ T29] audit: type=1326 audit(1745959124.945:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 110.862621][T10291] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 110.885391][ T29] audit: type=1326 audit(1745959124.945:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 110.894143][T10291] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 110.928627][ T29] audit: type=1326 audit(1745959124.945:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 110.952173][ T29] audit: type=1326 audit(1745959124.945:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 110.980849][T10301] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 110.990097][T10301] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.2506: corrupted xattr block 31: invalid header [ 111.003334][T10291] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 49: comm wÞ£ÿ: lblock 1 mapped to illegal pblock 49 (length 1) [ 111.004456][T10301] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 111.036372][T10301] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.2506: bad symlink. [ 111.040933][T10291] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 111.102043][T10291] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 111.119498][T10328] netlink: 'syz.5.2514': attribute type 4 has an invalid length. [ 111.133392][T10328] netlink: 'syz.5.2514': attribute type 4 has an invalid length. [ 111.141781][T10291] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 111.160400][T10330] loop4: detected capacity change from 0 to 1024 [ 111.168693][T10330] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.179172][T10291] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 111.203358][T10291] EXT4-fs (loop2): 1 orphan inode deleted [ 111.212256][T10330] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 111.221025][T10330] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.234961][T10330] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 111.252294][T10334] loop5: detected capacity change from 0 to 1024 [ 111.259459][T10330] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.2516: mark_inode_dirty error [ 111.280108][T10330] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2516: Invalid block bitmap block 3 in block_group 0 [ 111.314469][T10334] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.346743][T10334] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 111.367101][T10330] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2516: Invalid block bitmap block 3 in block_group 0 [ 111.380984][T10334] EXT4-fs (loop5): Remounting filesystem read-only [ 111.388954][ T8061] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 111.404200][T10330] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2516: Invalid block bitmap block 3 in block_group 0 [ 111.420791][T10330] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 111.469913][T10330] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.2516: mark_inode_dirty error [ 111.490237][T10344] loop6: detected capacity change from 0 to 2048 [ 111.516449][T10330] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm syz.4.2516: lblock 6 mapped to illegal pblock 1 (length 1) [ 111.531843][T10330] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.2516: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.557857][T10350] loop5: detected capacity change from 0 to 1024 [ 111.564966][T10344] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.572366][T10326] Set syz1 is full, maxelem 65536 reached [ 111.577211][T10330] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2516: Failed to acquire dquot type 0 [ 111.593320][T10330] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 49: comm syz.4.2516: lblock 1 mapped to illegal pblock 49 (length 1) [ 111.595279][T10350] EXT4-fs: Ignoring removed orlov option [ 111.609359][T10330] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2516: Failed to acquire dquot type 0 [ 111.634956][T10330] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 111.643005][T10344] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2521: bg 0: block 345: padding at end of block bitmap is not set [ 111.663525][T10330] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #15: comm syz.4.2516: mark_inode_dirty error [ 111.666201][T10344] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 111.687241][T10344] EXT4-fs (loop6): This should not happen!! Data will be lost [ 111.687241][T10344] [ 111.716660][T10330] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 111.727045][T10330] EXT4-fs (loop4): 1 orphan inode deleted [ 111.761426][T10330] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 111.778447][T10330] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.2516: Abort forced by user [ 111.788695][T10330] EXT4-fs (loop4): Remounting filesystem read-only [ 111.795213][T10330] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 111.873663][T10365] loop1: detected capacity change from 0 to 8192 [ 111.903950][T10369] loop4: detected capacity change from 0 to 512 [ 111.910705][T10369] journal_path: Lookup failure for './file0' [ 111.916741][T10369] EXT4-fs: error: could not find journal device path [ 112.023409][ T3382] Process accounting resumed [ 112.203138][T10394] loop4: detected capacity change from 0 to 764 [ 112.224246][T10394] Symlink component flag not implemented [ 112.230146][T10394] Symlink component flag not implemented (116) [ 112.335567][T10403] loop4: detected capacity change from 0 to 2048 [ 112.342371][T10403] EXT4-fs: Ignoring removed bh option [ 112.398260][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 112.540936][T10433] loop2: detected capacity change from 0 to 512 [ 112.550254][T10433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.570430][T10433] EXT4-fs (loop2): 1 truncate cleaned up [ 112.853321][T10436] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.871016][T10436] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 112.883607][T10436] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.883607][T10436] [ 112.893367][T10436] EXT4-fs (loop4): Total free blocks count 0 [ 112.899408][T10436] EXT4-fs (loop4): Free/Dirty block details [ 112.905427][T10436] EXT4-fs (loop4): free_blocks=2415919104 [ 112.911163][T10436] EXT4-fs (loop4): dirty_blocks=8224 [ 112.916547][T10436] EXT4-fs (loop4): Block reservation details [ 112.922544][T10436] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 112.974878][ T8061] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.987188][ T8061] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.987188][ T8061] [ 113.028843][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.037971][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.050218][T10483] loop2: detected capacity change from 0 to 512 [ 113.057848][T10483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.070143][T10483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2557: bg 0: block 384: padding at end of block bitmap is not set [ 113.091473][T10483] EXT4-fs (loop2): Remounting filesystem read-only [ 113.098581][T10483] EXT4-fs (loop2): 1 truncate cleaned up [ 113.138495][T10510] netlink: 'syz.4.2559': attribute type 11 has an invalid length. [ 113.146884][T10510] netlink: 448 bytes leftover after parsing attributes in process `syz.4.2559'. [ 113.152693][T10508] loop2: detected capacity change from 0 to 512 [ 113.178576][T10508] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.198862][T10519] loop4: detected capacity change from 0 to 2048 [ 113.208923][T10508] EXT4-fs (loop2): shut down requested (2) [ 113.362907][T10550] loop1: detected capacity change from 0 to 2048 [ 113.428086][T10566] loop4: detected capacity change from 0 to 512 [ 113.488693][T10566] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.526914][T10576] loop2: detected capacity change from 0 to 8192 [ 113.633541][T10583] loop6: detected capacity change from 0 to 1024 [ 113.656265][T10583] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.669899][T10583] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.683360][T10583] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 113.691681][T10583] EXT4-fs (loop6): orphan cleanup on readonly fs [ 113.698907][T10583] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 113.709834][T10583] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 113.736076][T10583] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 113.781682][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 113.789920][T10583] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 113.791444][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 113.810890][T10583] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 113.826048][T10583] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 113.837071][T10583] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 113.855268][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 113.861571][T10583] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm wÞ£ÿ: lblock 6 mapped to illegal pblock 1 (length 1) [ 113.866020][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 113.879270][T10583] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 48: comm wÞ£ÿ: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.908575][T10583] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 113.919979][T10583] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 49: comm wÞ£ÿ: lblock 1 mapped to illegal pblock 49 (length 1) [ 113.945173][T10583] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 113.956867][T10583] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 113.968045][T10583] EXT4-fs error (device loop6): ext4_evict_inode:259: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 113.979616][T10583] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 113.992230][T10617] hub 9-0:1.0: USB hub found [ 113.997364][T10583] EXT4-fs (loop6): 1 orphan inode deleted [ 114.003337][T10617] hub 9-0:1.0: 8 ports detected [ 114.012620][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 114.026765][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 114.175650][T10640] Falling back ldisc for ttyS3. [ 114.211726][T10648] loop2: detected capacity change from 0 to 512 [ 114.219327][T10648] EXT4-fs: Ignoring removed oldalloc option [ 114.238545][T10651] loop6: detected capacity change from 0 to 2048 [ 114.247829][T10648] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2604: Parent and EA inode have the same ino 15 [ 114.260693][T10651] EXT4-fs: Ignoring removed bh option [ 114.266153][T10651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.268496][T10653] loop4: detected capacity change from 0 to 1024 [ 114.274305][T10648] EXT4-fs (loop2): Remounting filesystem read-only [ 114.279949][T10653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.285734][T10648] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 114.304848][T10651] EXT4-fs: Ignoring removed nobh option [ 114.310751][T10648] EXT4-fs (loop2): 1 orphan inode deleted [ 114.323962][T10648] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2604'. [ 114.335404][T10653] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.380802][T10653] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.390003][T10653] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.399475][T10653] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 114.439784][T10653] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 114.463820][T10653] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 114.498526][T10653] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 114.512766][T10653] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 3 in block_group 0 [ 114.527254][T10674] loop5: detected capacity change from 0 to 128 [ 114.547663][T10653] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 114.559187][T10653] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 114.574023][T10674] loop5: detected capacity change from 0 to 256 [ 114.581757][T10674] msdos: Unknown parameter '·å5IȧY)Š)sNÔ»þDzìňR7n¥ò1g' [ 114.590041][T10653] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm wÞ£ÿ: lblock 6 mapped to illegal pblock 1 (length 1) [ 114.605112][T10653] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm wÞ£ÿ: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.620004][T10653] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 114.634354][T10653] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 49: comm wÞ£ÿ: lblock 1 mapped to illegal pblock 49 (length 1) [ 114.656214][T10653] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 114.667513][T10653] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 114.713377][T10653] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #15: comm wÞ£ÿ: mark_inode_dirty error [ 114.724675][T10653] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 114.735728][T10653] EXT4-fs (loop4): 1 orphan inode deleted [ 114.775393][T10691] ref_ctr_offset mismatch. inode: 0xaa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 114.791912][T10691] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 114.800387][T10691] ref_ctr decrement failed for inode: 0xaa0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881032d1600 [ 114.814324][T10691] uprobe: syz.1.2619:10691 failed to unregister, leaking uprobe [ 114.871162][T10705] loop1: detected capacity change from 0 to 512 [ 114.879481][T10705] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.898059][T10705] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2625: bg 0: block 248: padding at end of block bitmap is not set [ 114.913568][T10705] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2625: Failed to acquire dquot type 1 [ 114.925688][T10705] EXT4-fs (loop1): 1 truncate cleaned up [ 114.933345][T10705] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 114.948001][T10705] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2625: Failed to acquire dquot type 1 [ 114.959691][T10705] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 115.052988][T10724] netem: change failed [ 115.103808][T10728] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2635'. [ 115.122898][T10726] loop1: detected capacity change from 0 to 8192 [ 115.131964][T10726] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 115.177226][T10731] loop4: detected capacity change from 0 to 2048 [ 115.194965][T10733] loop1: detected capacity change from 0 to 1024 [ 115.202109][T10733] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.206238][T10731] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.2636: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 115.213043][T10733] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.230727][T10731] EXT4-fs (loop4): Remounting filesystem read-only [ 115.247587][T10733] JBD2: no valid journal superblock found [ 115.253425][T10733] EXT4-fs (loop1): Could not load journal inode [ 115.332393][T10742] loop4: detected capacity change from 0 to 2048 [ 115.357030][T10746] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in; [ 115.357030][T10746] program syz.5.2642 not setting count and/or reply_len properly [ 115.368218][T10742] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.390117][T10742] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2639: bg 0: block 345: padding at end of block bitmap is not set [ 115.450433][T10756] loop5: detected capacity change from 0 to 512 [ 115.456563][T10760] loop1: detected capacity change from 0 to 2048 [ 115.464577][T10756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.497775][T10760] loop1: p1 < > p4 [ 115.503069][T10756] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2647: invalid block [ 115.515956][T10760] loop1: p4 size 8388608 extends beyond EOD, truncated [ 115.535416][T10756] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2647: invalid indirect mapped block 4294967295 (level 1) [ 115.572700][T10756] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2647: invalid indirect mapped block 4294967295 (level 1) [ 115.589563][T10756] EXT4-fs (loop5): 2 truncates cleaned up [ 115.610416][T10775] @0ÿ: renamed from bond_slave_0 [ 115.683953][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 115.683971][ T29] audit: type=1326 audit(1745959129.825:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.1.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 115.714340][ T8063] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 115.726029][T10796] syz_tun: entered allmulticast mode [ 115.726132][ T29] audit: type=1326 audit(1745959129.825:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.1.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 115.754919][ T29] audit: type=1326 audit(1745959129.825:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.1.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 115.778459][ T29] audit: type=1326 audit(1745959129.825:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.1.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 115.801950][ T29] audit: type=1326 audit(1745959129.825:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.1.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 115.825485][ T29] audit: type=1326 audit(1745959129.825:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.1.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 115.849007][ T29] audit: type=1326 audit(1745959129.835:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10792 comm="syz.1.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97050ee969 code=0x7ffc0000 [ 115.897575][ T29] audit: type=1326 audit(1745959130.045:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.5.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 115.921125][ T29] audit: type=1326 audit(1745959130.045:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.5.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f961e969 code=0x7ffc0000 [ 115.960025][ T29] audit: type=1326 audit(1745959130.065:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.4.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed4dce969 code=0x7ffc0000 [ 116.003989][T10811] loop5: detected capacity change from 0 to 128 [ 116.012023][T10811] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.024426][T10811] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.059068][T10816] team0 (unregistering): Port device team_slave_0 removed [ 116.067985][T10816] team0 (unregistering): Port device team_slave_1 removed [ 116.148075][T10825] loop5: detected capacity change from 0 to 512 [ 116.169257][T10825] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.185801][T10825] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.2675: corrupted inode contents [ 116.199289][T10825] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.2675: mark_inode_dirty error [ 116.211226][T10825] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.2675: corrupted inode contents [ 116.224556][T10825] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2675: mark_inode_dirty error [ 116.258884][T10837] loop4: detected capacity change from 0 to 128 [ 116.267964][T10837] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.551408][T10857] loop6: detected capacity change from 0 to 2048 [ 116.558196][T10847] bond1: entered promiscuous mode [ 116.563819][T10847] bond1: entered allmulticast mode [ 116.571318][T10847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.602071][T10847] bond1 (unregistering): Released all slaves [ 116.653185][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.660850][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.668419][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.675902][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.683320][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.690750][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.698224][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.704007][T10871] macvlan1: entered promiscuous mode [ 116.705740][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.705767][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.713542][T10871] ipvlan0: entered promiscuous mode [ 116.718493][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.729427][T10871] ipvlan0: left promiscuous mode [ 116.731131][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.751030][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.758459][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.765967][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.773341][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.780786][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.788226][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.795708][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.803088][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.810597][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.818214][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.825628][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.832998][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.840446][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.847880][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.855241][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.862752][T10871] macvlan1: left promiscuous mode [ 116.863209][ T3381] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 117.042563][T10893] loop6: detected capacity change from 0 to 512 [ 117.064624][T10893] EXT4-fs (loop6): orphan cleanup on readonly fs [ 117.071406][T10893] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2703: bad orphan inode 13 [ 117.082181][T10893] ext4_test_bit(bit=12, block=18) = 1 [ 117.087591][T10893] is_bad_inode(inode)=0 [ 117.091792][T10893] NEXT_ORPHAN(inode)=2130706432 [ 117.096823][T10893] max_ino=32 [ 117.100032][T10893] i_nlink=1 [ 117.106368][T10891] loop5: detected capacity change from 0 to 4096 [ 117.144153][T10893] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 117.173143][T10891] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 117.180558][T10891] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 117.226268][T10893] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2703: bg 0: block 248: padding at end of block bitmap is not set [ 117.258864][T10893] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2703: Failed to acquire dquot type 1 [ 117.277551][T10893] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.428534][T10911] vlan2: entered allmulticast mode [ 117.433731][T10911] dummy0: entered allmulticast mode [ 117.457416][T10913] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 117.466229][T10913] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 117.495119][T10917] loop5: detected capacity change from 0 to 512 [ 117.503092][T10917] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.525112][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.532930][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.540852][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.550308][T10917] EXT4-fs (loop5): 1 truncate cleaned up [ 117.554527][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.563825][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.571678][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.579490][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.581327][T10924] loop6: detected capacity change from 0 to 512 [ 117.587239][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.601397][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.609241][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.617172][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.625101][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.632939][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.635253][T10924] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.640692][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.640790][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.666243][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.674037][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.674168][T10917] __nla_validate_parse: 2 callbacks suppressed [ 117.674185][T10917] netlink: 844 bytes leftover after parsing attributes in process `syz.5.2712'. [ 117.681797][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.691135][T10924] EXT4-fs (loop6): 1 truncate cleaned up [ 117.697082][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.718236][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.726103][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.733857][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.741645][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.749419][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.757329][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.765171][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.773021][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.780749][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.788494][ T3382] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 117.806951][ T3382] hid-generic 0000:0000:20000000.000D: hidraw0: HID v0.01 Device [syz0] on syz1 [ 117.820870][T10930] loop4: detected capacity change from 0 to 164 [ 117.829708][T10930] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.901404][T10939] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2721'. [ 117.930307][T10941] loop4: detected capacity change from 0 to 512 [ 117.953458][T10941] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.976326][T10941] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 118.000648][T10941] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.011261][T10941] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.031365][T10941] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 118.039173][T10955] loop2: detected capacity change from 0 to 512 [ 118.045718][T10955] EXT4-fs: Ignoring removed orlov option [ 118.051391][T10955] EXT4-fs: Ignoring removed oldalloc option [ 118.059648][T10955] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 118.074312][T10955] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2727: Parent and EA inode have the same ino 15 [ 118.083099][T10941] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2722: bg 0: block 40: padding at end of block bitmap is not set [ 118.104340][T10955] EXT4-fs (loop2): 1 orphan inode deleted [ 118.104340][T10941] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 118.104640][T10941] EXT4-fs (loop4): 1 truncate cleaned up [ 118.121595][T10962] loop1: detected capacity change from 0 to 512 [ 118.141332][T10941] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.2722: corrupted xattr block 31: invalid header [ 118.155452][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 118.166224][T10941] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.2722: corrupted xattr block 31: invalid header [ 118.186527][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 118.212516][T10941] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.2722: bad symlink. [ 118.226299][T10962] ext4 filesystem being mounted at /543/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.291485][T10976] loop1: detected capacity change from 0 to 2048 [ 118.299015][T10976] EXT4-fs: Ignoring removed bh option [ 118.437700][T10993] netlink: 'syz.5.2741': attribute type 10 has an invalid length. [ 118.447790][T10993] netlink: 'syz.5.2741': attribute type 10 has an invalid length. [ 118.455725][T10993] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2741'. [ 118.662665][T11007] loop4: detected capacity change from 0 to 512 [ 118.670995][T11007] EXT4-fs: Ignoring removed i_version option [ 118.677816][T11007] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.706268][T10991] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.721390][T10991] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 118.734001][T10991] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.734001][T10991] [ 118.736125][T11007] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.743768][T10991] EXT4-fs (loop1): Total free blocks count 0 [ 118.758077][T11007] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.2747: corrupted inode contents [ 118.760073][T10991] EXT4-fs (loop1): Free/Dirty block details [ 118.773042][T11007] EXT4-fs (loop4): Remounting filesystem read-only [ 118.777678][T10991] EXT4-fs (loop1): free_blocks=2415919104 [ 118.777694][T10991] EXT4-fs (loop1): dirty_blocks=8224 [ 118.795425][T10991] EXT4-fs (loop1): Block reservation details [ 118.801484][T10991] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 118.830196][T11011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.842390][ T8055] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 118.855044][ T8055] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.855044][ T8055] [ 118.957352][T11022] loop4: detected capacity change from 0 to 1024 [ 118.976874][T11022] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.992640][T11022] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 119.008400][T11022] EXT4-fs (loop4): Remounting filesystem read-only [ 119.015048][ T8063] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 4: ext4_ext_map_blocks returned -30 [ 119.199224][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.207186][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.215064][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.223042][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.230981][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.238847][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.246610][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.254376][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.262175][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.269956][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.277740][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.285618][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.293407][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.301162][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.309003][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.316825][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.324567][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.332363][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.340129][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.347902][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.355653][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.363532][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.371381][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.379188][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.386911][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.394630][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.402362][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.410094][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.417813][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.425620][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.433332][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.441110][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.448890][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.456734][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.464472][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.472222][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.479946][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.487754][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.495549][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.503292][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.511030][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.518876][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.526614][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.534415][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.542149][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.549903][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.557631][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.565374][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.573087][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.580811][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.588735][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.596491][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.604250][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 119.612859][ T2969] hid-generic 0000:007F:FFFFFFFE.000E: hidraw0: HID v0.08 Device [syz0] on syz0 [ 119.660615][T11051] loop4: detected capacity change from 0 to 1024 [ 119.676978][T11051] EXT4-fs: Ignoring removed nobh option [ 119.682682][T11051] EXT4-fs: Ignoring removed bh option [ 119.704017][T11057] syz_tun: entered allmulticast mode [ 119.718767][T11057] dvmrp1: entered allmulticast mode [ 119.722330][T11051] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2765: Allocating blocks 385-513 which overlap fs metadata [ 119.746760][T11051] EXT4-fs (loop4): pa ffff888104ce5a80: logic 16, phys. 129, len 24 [ 119.748209][T11056] syz_tun: left allmulticast mode [ 119.754816][T11051] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 119.772069][T11051] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 119.784345][T11051] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.784345][T11051] [ 119.794116][T11051] EXT4-fs (loop4): Total free blocks count 0 [ 119.800157][T11051] EXT4-fs (loop4): Free/Dirty block details [ 119.806101][T11051] EXT4-fs (loop4): free_blocks=128 [ 119.811292][T11051] EXT4-fs (loop4): dirty_blocks=0 [ 119.816368][T11051] EXT4-fs (loop4): Block reservation details [ 119.822386][T11051] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 119.875056][T11071] loop6: detected capacity change from 0 to 1024 [ 119.881963][T11071] EXT4-fs: Ignoring removed orlov option [ 119.888174][T11071] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 119.982234][T11079] loop4: detected capacity change from 0 to 8192 [ 119.989301][T11083] pim6reg1: entered promiscuous mode [ 119.994666][T11083] pim6reg1: entered allmulticast mode [ 120.347797][T11109] loop5: detected capacity change from 0 to 256 [ 120.359411][T11109] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2791'. [ 120.387310][T11111] netlink: 'syz.2.2792': attribute type 39 has an invalid length. [ 120.686454][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 120.686470][ T29] audit: type=1400 audit(1745959134.835:4260): avc: denied { setopt } for pid=11124 comm="syz.2.2799" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.713760][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2800'. [ 120.734748][T11127] bridge_slave_1: left allmulticast mode [ 120.740472][T11127] bridge_slave_1: left promiscuous mode [ 120.746176][T11127] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.756672][T11127] bridge_slave_0: left allmulticast mode [ 120.762342][T11127] bridge_slave_0: left promiscuous mode [ 120.768116][T11127] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.801982][ T29] audit: type=1326 audit(1745959134.945:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2a7e969 code=0x7ffc0000 [ 120.829857][ T29] audit: type=1326 audit(1745959134.975:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f2a7e969 code=0x7ffc0000 [ 120.853575][ T29] audit: type=1326 audit(1745959134.975:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2a7e969 code=0x7ffc0000 [ 120.877091][ T29] audit: type=1326 audit(1745959134.975:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc1f2a7e969 code=0x7ffc0000 [ 120.900522][ T29] audit: type=1326 audit(1745959134.975:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2a7e969 code=0x7ffc0000 [ 120.924144][ T29] audit: type=1326 audit(1745959134.975:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11132 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1f2ab1225 code=0x7ffc0000 [ 120.947664][ T29] audit: type=1326 audit(1745959134.975:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fc1f2a7e969 code=0x7ffc0000 [ 120.971133][ T29] audit: type=1326 audit(1745959134.975:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2a7e969 code=0x7ffc0000 [ 120.994674][ T29] audit: type=1326 audit(1745959134.975:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.6.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2a7e969 code=0x7ffc0000 [ 121.037226][T11134] loop6: detected capacity change from 0 to 512 [ 121.043891][T11134] EXT4-fs: Ignoring removed nobh option [ 121.064866][T11134] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2804: invalid indirect mapped block 256 (level 2) [ 121.099337][T11134] EXT4-fs (loop6): 2 truncates cleaned up [ 121.202503][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.222084][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.241942][T11160] dvmrp1: entered allmulticast mode [ 121.275091][ T8097] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:53: bg 0: block 5: invalid block bitmap [ 121.275298][T11164] loop5: detected capacity change from 0 to 512 [ 121.290909][ T8097] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 121.301657][T11162] loop2: detected capacity change from 0 to 2048 [ 121.306703][ T8097] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.306703][ T8097] [ 121.322744][ T8097] EXT4-fs (loop6): Total free blocks count 0 [ 121.324960][T11164] EXT4-fs: Ignoring removed oldalloc option [ 121.328814][ T8097] EXT4-fs (loop6): Free/Dirty block details [ 121.328828][ T8097] EXT4-fs (loop6): free_blocks=0 [ 121.328842][ T8097] EXT4-fs (loop6): dirty_blocks=2680 [ 121.348365][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 121.350913][ T8097] EXT4-fs (loop6): Block reservation details [ 121.359919][T11156] tipc: Cannot configure node identity twice [ 121.372046][ T8097] EXT4-fs (loop6): i_reserved_data_blocks=2680 [ 121.379825][T11164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 121.386892][ T8097] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 624 with error 28 [ 121.400519][ T8097] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.400519][ T8097] [ 121.405418][T11164] System zones: 1-12 [ 121.416429][T11162] loop2: p1 < > p3 [ 121.420281][T11164] EXT4-fs (loop5): 1 truncate cleaned up [ 121.422154][T11162] loop2: p3 size 134217728 extends beyond EOD, truncated [ 121.474538][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2817'. [ 121.502392][T11174] serio: Serial port pts0 [ 121.643118][T11178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.774202][T11192] loop4: detected capacity change from 0 to 2048 [ 121.898417][T11203] loop1: detected capacity change from 0 to 512 [ 121.912178][T11204] loop4: detected capacity change from 0 to 2048 [ 121.920032][T11203] ext4 filesystem being mounted at /562/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.959343][T11208] loop2: detected capacity change from 0 to 1024 [ 121.966420][T11208] EXT4-fs: Ignoring removed nobh option [ 121.972140][T11208] EXT4-fs: Ignoring removed bh option [ 121.977834][T11204] loop4: p1 < > p3 [ 121.982997][T11204] loop4: p3 size 134217728 extends beyond EOD, truncated [ 121.994046][T11210] netlink: 'syz.1.2832': attribute type 39 has an invalid length. [ 122.022316][T11208] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2833: Allocating blocks 385-513 which overlap fs metadata [ 122.038201][T11208] EXT4-fs (loop2): pa ffff888104ce5a80: logic 16, phys. 129, len 24 [ 122.046253][T11208] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 122.057948][T11208] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 122.070186][T11208] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.070186][T11208] [ 122.080054][T11208] EXT4-fs (loop2): Total free blocks count 0 [ 122.086172][T11208] EXT4-fs (loop2): Free/Dirty block details [ 122.089521][T11214] loop4: detected capacity change from 0 to 512 [ 122.092089][T11208] EXT4-fs (loop2): free_blocks=128 [ 122.092105][T11208] EXT4-fs (loop2): dirty_blocks=0 [ 122.108626][T11208] EXT4-fs (loop2): Block reservation details [ 122.114696][T11208] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 122.117618][T11214] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.176704][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'. [ 122.213850][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2838'. [ 122.478780][T11257] loop4: detected capacity change from 0 to 512 [ 122.489438][T11257] EXT4-fs: Ignoring removed nobh option [ 122.497985][T11257] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2852: invalid indirect mapped block 256 (level 2) [ 122.500603][T11255] loop1: detected capacity change from 0 to 8192 [ 122.511736][T11257] EXT4-fs (loop4): 2 truncates cleaned up [ 122.531955][T11260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.647272][ T8092] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:49: bg 0: block 5: invalid block bitmap [ 122.668697][T11268] bridge0: port 3(gretap0) entered blocking state [ 122.670806][T11267] loop5: detected capacity change from 0 to 164 [ 122.675199][T11268] bridge0: port 3(gretap0) entered disabled state [ 122.676454][T11268] gretap0: entered allmulticast mode [ 122.693982][T11268] gretap0: entered promiscuous mode [ 122.694055][ T8092] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 122.707385][T11268] gretap0: left allmulticast mode [ 122.711773][ T8092] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.711773][ T8092] [ 122.716765][T11268] gretap0: left promiscuous mode [ 122.726366][ T8092] EXT4-fs (loop4): Total free blocks count 0 [ 122.731479][T11268] bridge0: port 3(gretap0) entered disabled state [ 122.737310][ T8092] EXT4-fs (loop4): Free/Dirty block details [ 122.749815][ T8092] EXT4-fs (loop4): free_blocks=0 [ 122.754758][ T8092] EXT4-fs (loop4): dirty_blocks=2724 [ 122.760048][ T8092] EXT4-fs (loop4): Block reservation details [ 122.765796][T11267] /dev/loop5: Can't open blockdev [ 122.766036][ T8092] EXT4-fs (loop4): i_reserved_data_blocks=2724 [ 122.808414][ T8055] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 668 with error 28 [ 122.821161][ T8055] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.821161][ T8055] [ 122.876189][T11274] Illegal XDP return value 4286787584 on prog (id 2190) dev N/A, expect packet loss! [ 122.928221][T11277] loop6: detected capacity change from 0 to 512 [ 122.947842][T11277] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.986110][T11283] loop5: detected capacity change from 0 to 512 [ 122.993187][T11283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.016496][T11283] EXT4-fs (loop5): 1 truncate cleaned up [ 123.328534][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2869'. [ 123.337299][T11304] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2880'. [ 123.367539][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2871'. [ 123.430123][T11313] loop1: detected capacity change from 0 to 512 [ 123.449437][T11313] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.493272][T11321] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 123.501504][T11321] tipc: Enabled bearer , priority 10 [ 123.543539][T11329] loop1: detected capacity change from 0 to 1024 [ 123.557181][T11329] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.571192][T11329] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 123.587576][T11329] EXT4-fs (loop1): Remounting filesystem read-only [ 123.594278][ T8092] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 123.626908][T11333] loop2: detected capacity change from 0 to 512 [ 123.633490][T11333] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.640549][T11333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.652222][T11333] EXT4-fs (loop2): 1 truncate cleaned up [ 123.662098][T11333] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 123.724519][T11337] loop5: detected capacity change from 0 to 8192 [ 123.728120][T11344] loop4: detected capacity change from 0 to 512 [ 123.741804][T11343] tipc: Enabled bearer , priority 0 [ 123.749681][T11344] EXT4-fs: Ignoring removed oldalloc option [ 123.757600][T11342] tipc: Disabling bearer [ 123.763872][T11344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 123.771925][T11344] System zones: 1-12 [ 123.776569][T11344] EXT4-fs (loop4): 1 truncate cleaned up [ 123.902259][T11355] loop2: detected capacity change from 0 to 512 [ 123.937677][T11355] ext4 filesystem being mounted at /610/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.098958][T11373] loop1: detected capacity change from 0 to 2048 [ 124.138218][T11373] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.207607][T11373] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2897: bg 0: block 345: padding at end of block bitmap is not set [ 124.255286][T11373] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 124.267864][T11373] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.267864][T11373] [ 124.500004][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2907'. [ 124.614735][T11401] loop4: detected capacity change from 0 to 128 [ 124.621285][ T3381] tipc: Node number set to 2130706433 [ 124.651700][T11403] IPv4: Oversized IP packet from 127.202.26.0 [ 124.889144][T11420] tipc: Enabling of bearer rejected, failed to enable media [ 125.116025][T11427] netlink: 'syz.6.2923': attribute type 39 has an invalid length. [ 125.389941][T11446] loop6: detected capacity change from 0 to 2048 [ 125.719469][T11480] dccp_close: ABORT with 240 bytes unread [ 125.775216][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 125.775233][ T29] audit: type=1400 audit(1745959139.915:4656): avc: denied { bind } for pid=11483 comm="syz.6.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.813343][T11485] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.818742][ T29] audit: type=1400 audit(1745959139.945:4657): avc: denied { setopt } for pid=11483 comm="syz.6.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.948287][T11485] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.029954][T11493] loop1: detected capacity change from 0 to 512 [ 126.037044][T11493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.049480][T11493] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2951: bg 0: block 384: padding at end of block bitmap is not set [ 126.064202][T11493] EXT4-fs (loop1): Remounting filesystem read-only [ 126.072342][T11493] EXT4-fs (loop1): 1 truncate cleaned up [ 126.100755][ T29] audit: type=1400 audit(1745959140.245:4658): avc: denied { cpu } for pid=11496 comm="syz.1.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.170501][T11485] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.243146][T11505] loop1: detected capacity change from 0 to 764 [ 126.250423][ T29] audit: type=1326 audit(1745959140.395:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b614e969 code=0x7ffc0000 [ 126.310725][T11505] Symlink component flag not implemented [ 126.316766][T11505] Symlink component flag not implemented (116) [ 126.318726][ T29] audit: type=1326 audit(1745959140.395:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b614e969 code=0x7ffc0000 [ 126.346652][ T29] audit: type=1326 audit(1745959140.425:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd4b614e969 code=0x7ffc0000 [ 126.370300][ T29] audit: type=1326 audit(1745959140.425:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b614e969 code=0x7ffc0000 [ 126.393802][ T29] audit: type=1326 audit(1745959140.425:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b614e969 code=0x7ffc0000 [ 126.417420][ T29] audit: type=1326 audit(1745959140.425:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b614e969 code=0x7ffc0000 [ 126.440985][ T29] audit: type=1326 audit(1745959140.425:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b614e969 code=0x7ffc0000 [ 126.492050][T11485] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.603202][T11485] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.620186][T11485] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.652299][T11485] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.677917][T11518] loop5: detected capacity change from 0 to 1024 [ 126.699368][T11518] EXT4-fs: Ignoring removed bh option [ 126.716823][T11485] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.725137][T11518] EXT4-fs: inline encryption not supported [ 126.731082][T11518] EXT4-fs: Ignoring removed i_version option [ 126.739030][T11518] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.762306][T11518] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.2961: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.780830][T11518] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2961: Failed to acquire dquot type 0 [ 126.792538][T11518] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.2961: Freeing blocks not in datazone - block = 0, count = 4096 [ 126.808050][T11518] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2961: Invalid inode bitmap blk 0 in block_group 0 [ 126.821039][T11518] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 126.831175][ T8097] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.846830][ T8097] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:53: Failed to release dquot type 0 [ 126.858532][T11518] EXT4-fs (loop5): 1 orphan inode deleted [ 126.871072][T11519] loop2: detected capacity change from 0 to 8192 [ 126.915973][T11530] loop6: detected capacity change from 0 to 2048 [ 126.976724][T11540] loop5: detected capacity change from 0 to 512 [ 127.009490][T11540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.058851][T11540] EXT4-fs (loop5): 1 truncate cleaned up [ 127.101061][T11550] IPv4: Oversized IP packet from 127.202.26.0 [ 127.183550][T11555] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 127.401895][ T8097] ================================================================== [ 127.410018][ T8097] BUG: KCSAN: data-race in copy_page_from_iter_atomic / fat16_ent_put [ 127.418210][ T8097] [ 127.420531][ T8097] write to 0xffff8881462ad79c of 2 bytes by task 11541 on cpu 0: [ 127.428250][ T8097] fat16_ent_put+0x28/0x60 [ 127.432692][ T8097] fat_alloc_clusters+0x4ce/0xa80 [ 127.437731][ T8097] fat_get_block+0x258/0x5e0 [ 127.442343][ T8097] __block_write_begin_int+0x419/0xf70 [ 127.447827][ T8097] cont_write_begin+0x5a3/0x8e0 [ 127.452689][ T8097] fat_write_begin+0x4f/0xe0 [ 127.457299][ T8097] generic_perform_write+0x181/0x490 [ 127.462605][ T8097] __generic_file_write_iter+0x9e/0x120 [ 127.468193][ T8097] generic_file_write_iter+0x8d/0x2f0 [ 127.473597][ T8097] vfs_write+0x49d/0x8d0 [ 127.477872][ T8097] ksys_write+0xda/0x1a0 [ 127.482135][ T8097] __x64_sys_write+0x40/0x50 [ 127.486727][ T8097] x64_sys_call+0x2cdd/0x2fb0 [ 127.491404][ T8097] do_syscall_64+0xd0/0x1a0 [ 127.495930][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.501831][ T8097] [ 127.504154][ T8097] read to 0xffff8881462ad600 of 512 bytes by task 8097 on cpu 1: [ 127.511895][ T8097] copy_page_from_iter_atomic+0x77f/0xff0 [ 127.517628][ T8097] generic_perform_write+0x2c2/0x490 [ 127.522929][ T8097] shmem_file_write_iter+0xc5/0xf0 [ 127.528061][ T8097] lo_rw_aio+0x5f7/0x7c0 [ 127.532324][ T8097] loop_process_work+0x52d/0xa60 [ 127.537269][ T8097] loop_workfn+0x31/0x40 [ 127.541521][ T8097] process_scheduled_works+0x4cb/0x9d0 [ 127.546987][ T8097] worker_thread+0x582/0x770 [ 127.551596][ T8097] kthread+0x486/0x510 [ 127.555663][ T8097] ret_from_fork+0x4b/0x60 [ 127.560094][ T8097] ret_from_fork_asm+0x1a/0x30 [ 127.564860][ T8097] [ 127.567178][ T8097] Reported by Kernel Concurrency Sanitizer on: [ 127.573356][ T8097] CPU: 1 UID: 0 PID: 8097 Comm: kworker/u8:53 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 127.586037][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 127.596094][ T8097] Workqueue: loop2 loop_workfn [ 127.600869][ T8097] ==================================================================