last executing test programs: 1.205721883s ago: executing program 2 (id=711): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x22000a0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000140)='./file2\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0xa6) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a300000000008004100"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x4, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfc, 0xff, 0xff, 0x0, 0xffffffff, 0x0, 0xff, 0x2, 0x45, [0xfffffff0, 0x89ff]}}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16, @ANYRES64, @ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYRES64=r5, @ANYBLOB="02000200", @ANYBLOB="02b5e29b44f7cfdd17f9", @ANYRES8=r5, @ANYRESDEC, @ANYBLOB="4f9c30448838d52fe5b3a295c17cdfc3604daa51ca4172f241d5018466f3c6dbc04045fe35403720b4441248da1987a72875d2fa4b21f77091e9c0bebc49e26dacb4edfec472db86526393d14b568a6191fe0dc25430ae4ead02469f497f14f77e9e167dedeee75e96afd3262c876adfb63361531be3e983a04bf8bdf4f9a9ca04f839e661070690347b09ad195e909d86724153c96ccdd8dd6adbb3cf76071a61251eee8539d46579a29a69f3c83f7b41d4f2fcbff7a5eabd9c128a2ef7fac3cc3b529345b70f730e307bcb99ed11185c7cba6465c8c76ab3c18fd68594b67c", @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r4, @ANYBLOB="080003", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16=r4], 0x94, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', &(0x7f00000003c0), 0x1000) statx(r0, &(0x7f0000000200)='./file2\x00', 0x800, 0x2, &(0x7f0000000440)) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 908.435847ms ago: executing program 1 (id=716): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0xe8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(0xffffffffffffffff, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$eJzs3d9rU+cbAPDnpKm/v99WENnGGAUv5nCmtt0PB7twl2OTCdu9C2ks0tRIk4rthOnFvNnNkMEYE8but3svZf/A/gphCjKkbBe76TjpSW1t0jbamur5fCDyvnlP+p7nvOd5fU9OQgLIrZH0n0LEqxHxXRIxFBFJ1laMrHFkebvFR9cq6SOJpaXP/0pa26X19t9qv+5gVnklIn7/JuJEYX2/jfmF6XKtVp3N6qPNmcujjfmFkxdnylPVqeql8YmJ0+9OjH/w/nvbFutb5/758bO7H5/+9tjiD789OHwriTNxKGtbHcem9nVtub66MhIj2TEZjDNPbDjWy46/AJJ+7wBPZSDL88FI54ChGMiyHnj5fR0RS0BOJfIfcqq9Dmhf2/d0HfwSePjR8gXQ+viLy++NxL7WtdGBxWTNlVF6vTu8Df2nfdy5f/tW+ohe34cAeAbXb0TEqWJx/fyXZPPf0zu1hW2e7MP8B8/P3XT983an9U9hZf0THdY/Bzvk7tPYPP8LD7ahm67S9d+HHde/Kzethgey2v9aa77B5MLFWjWd2/4fEcdjcG9a3+h+zunFe0vd2lav/+6kh/rRtUp7LZjtx4Pi3rWvmSw3y88S82oPb0S81nH9m6yMf9Jh/NPjcW6LfRyt3n6jW9ua+O/fvrW4Lv6dtfRLxJsdx//xHa1k4/uTo63zYbR9Vqz3982jf3Trv9/xp+N/YOP4h5PV92sbvffx875/q93a1sQfneLvfP7vSb5olfdkz10tN5uzYxF7kk/XPz/++LXtenv7NP7jxzae/zqd//sj4sstxn/zyK+vbyn+Po3/ZE/j33vh3idf/dSt/83jT8f/nVbpePZMNv8NbRTXVnfwWY8fAAAAAAAA7CaFiDgUSaG0Ui4USqXlz3cciQOFWr3RPHGhPndpMlrflR2OwUL7TvfQqs9DjGWfh23Xx5+oT0TE4Yj4fmB/q16q1GuT/Q4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/pzoN97B+w4P/kN+bVp/m/HLz0Bu5L//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+rc2bPpY2nx0bVKWp+8Mj83Xb9ycrLamC7NzFVKlfrs5dJUvT5Vq5Yq9ZnN/l6tXr88Nh5zV0eb1UZztDG/cH6mPnepef7iTHmqer46+FyiAgAAAAAAAAAAAAAAAAAAgBdLY35hulyrVWd3qpDsfBcK/SwUd8du5KdQjOfSV79nJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB47L8AAAD//84fMw8=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000000085"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) statx(r0, &(0x7f0000000300)='./file0\x00', 0x2000, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, 0xee01, r5) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) 857.517661ms ago: executing program 3 (id=717): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) 855.358881ms ago: executing program 4 (id=718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}, {0xa, 0x0, 0x0, @empty, 0x3}}, 0x5c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe22, 0x2, @loopback, 0x2}, 0x2d) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4}}], 0x30, 0x800}, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES16=r7, @ANYBLOB="01000000000004dbdf2507000000050013008100000014000800000000000000000000000000000000000500140005000000"], 0x38}}, 0x2) syz_emit_ethernet(0x75, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000ece65fbcee558847000008000000000000000000c7f10e056a8e5c6e18832be5f0610b7fba5229e19406ccf55b116e051e8bbc48a196860ce216a11be7c5afc56b2c9d7c99e865472c4992298dfdf3761e3428cff2e85b0651970f63953c1b0ffe93c99bc760fbaf49607648c8682f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x100a}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000b0018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020400f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11], 0x20}}, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 778.498138ms ago: executing program 1 (id=720): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) 759.114669ms ago: executing program 2 (id=721): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="00000000000009000e3d20c0c4440000850000e2940000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000240)="927b78", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f00000003c0)="529a1bba6aa0844bf21df7334f210641b77188ffa85f3d5f2e56", 0x1a, 0x44, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f00000004c0)) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 712.017383ms ago: executing program 4 (id=722): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff38}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) 699.055474ms ago: executing program 0 (id=723): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r1 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_getevents(r3, 0x4, 0x0, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r7, @ANYBLOB="84e1129a72cdf348c052fa3f63e8c1643bedb8b72246a01314dbe036c7a829ed3a04bfcda97efe862097787a5602c333f606053d1191778c6cf3f6410f4cb0959630085115df5baf96ad3d6a669938901285e36db8dc1352b238fe768bd311f5f11a9204e4348151bec965851b3f2e3f5b74899137"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$char_usb(r2, &(0x7f00000003c0)="1638ed960905d217f5ab342a1a194c82a932b5b3104fa55c1e04cd34f9a9381630d5e6f1063c44f16f29b7b10e354749212d2ffc8db92f85b6c0ad4ccce2a1cfa8b5030bb9cab112cb7c600b5956d39d45b45a441eec6446c2d110799f7d63107554d95f5135225f7eaef8fa2b0b8714aa6d6bf04d6b24461ddba3a3546fcbf50f563c69909416f5c4de", 0x8a) syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x410000) capset(&(0x7f0000000200)={0x19980330, r4}, &(0x7f00000004c0)={0x1ff, 0x1, 0x3, 0x7f, 0x7, 0x2}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f0000000040)) io_pgetevents(r3, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 685.472615ms ago: executing program 2 (id=724): syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) r0 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000002c0)=0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, 0xffffffffffffffff, 0x100000000) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x42, 0x80}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x400}) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80, 0x180000) 648.629028ms ago: executing program 3 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 637.976179ms ago: executing program 1 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}, {0xa, 0x0, 0x0, @empty, 0x3}}, 0x5c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe22, 0x2, @loopback, 0x2}, 0x2d) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4}}], 0x30, 0x800}, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES16=r7, @ANYBLOB="01000000000004dbdf2507000000050013008100000014000800000000000000000000000000000000000500140005000000"], 0x38}}, 0x2) syz_emit_ethernet(0x75, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000ece65fbcee558847000008000000000000000000c7f10e056a8e5c6e18832be5f0610b7fba5229e19406ccf55b116e051e8bbc48a196860ce216a11be7c5afc56b2c9d7c99e865472c4992298dfdf3761e3428cff2e85b0651970f63953c1b0ffe93c99bc760fbaf49607648c8682f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x100a}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000b0018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020400f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 629.13541ms ago: executing program 3 (id=727): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) write$P9_RSTATFS(r2, &(0x7f0000000f80)={0x43, 0x9, 0x2, {0x7, 0x8, 0x8, 0x0, 0x5e, 0x401, 0x5, 0x8001, 0x2}}, 0x43) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x82}, 0x18) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000089, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b0000000005000500020000000500"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000016c0)={&(0x7f00000015c0)="6374bc8dcfed23ca2924b41d81bbb8f6ff0ab25610ee42aed165cd7fca6ec1460eba4d7ee4de623460d4082b", &(0x7f0000001600)=""/77, &(0x7f0000001680)="6c02adf1a8a06e19cc22367a906c9a97a671ef1a94", &(0x7f0000001880)="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", 0x7fffffff, r4}, 0x38) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) recvmsg(r1, &(0x7f0000001400)={&(0x7f0000001000)=@isdn, 0x80, &(0x7f0000001380)=[{&(0x7f0000001080)=""/190, 0xbe}, {&(0x7f0000001140)=""/76, 0x4c}, {&(0x7f00000011c0)=""/54, 0x36}, {&(0x7f0000001200)=""/29, 0x1d}, {&(0x7f0000001240)=""/67, 0x43}, {&(0x7f00000012c0)=""/95, 0x5f}, {&(0x7f0000001340)=""/5, 0x5}], 0x7}, 0x40000040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 596.450122ms ago: executing program 2 (id=728): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = io_uring_setup(0x4d42, &(0x7f00000002c0)={0x0, 0xc368, 0x1500, 0x3, 0x12d}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000cc1200e8cd08497d2714c09bf2f0000000000800ffffff"], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x39, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x11) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) 595.476253ms ago: executing program 0 (id=729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="0000000000000200b70800000419fa432b143a7a3a24a7265cbd3eb00000007b8af8ff00000000bfa2000080000008000000b70400000000000085000000030000009500"/87], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000007bf89db48f49d5cd1fae0ed4e5ddaa34223f5e44499b58727f578bbebe8f6509afcce1499c81a23be94619f16d8788c0131cda07", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000020000002d6fc49cdf0b279d5b7f60feb8", @ANYRES32=r1, @ANYBLOB="000000000000007b8af8feeb000000bf9a00000000000007020000f8ffffffb7030000ffff0000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0x1, 0x4a9, &(0x7f0000000580)="$eJzs3M9rXNUeAPDvnUnS301eX1/fa1+r0SoWfyRNWrULFyoKLhQEXdRlTNJaO22kiWBLsFGkLqXgXlwK/gXu3Ii6EMGtgkspFA1CUxcSub+aZDKZ5menzXw+MJlz5p6Zc773njNz5p7cCaBt9aZ/koidEfFzRHTn2YUFevO7menJ4ZvTk8NJzM6+9nuSlbsxPTlcFi2ft6PIHKlEVD5K4tlkcb3jFy+dHarVRi8U+f6Jc+/0j1+89MSZc0OnR0+Pnh88ceL4sYGnnxp8cl3iTOO6ceD9sYP7X3rj6ivDJ6+++d2XabP2Hcq3z4/jtm42CKiB3nSv/TGbqd/28Arafi/YNS+ddLSwIaxINSLSw9WZjf/uqMbcweuOFz9saeOADZV+Nm1ZevPULLCJJdHqFgCtUX7Qp99/y9sdmnrcFa4/F9EV+fmKmenJ4Zlb8XdEpSjTuYH190bEyam/PktvsdLzEAAAq5DNbR5vNP+rxL7sPl/r2F2sofRExL8iYk9E/Dsi9kbEfyKysv+NiP/lT57tXmb9vXX5xfOfyrWGbV4n6fzvmZib+83Mi7+466kWuV1Z/J3JqTO10aPFPjkSnVvS/ECTOr5+4adPlto2f/6X3tL6y7lg0YBrHXUn6EaGJobWaydc/yDiQEej+JNbKwFpD9gfEQdi8TpWE7vLxJlHvzi4VKHbx9/EOqwzzX4e8Uh+/KeiLv5S0nx9sn9r1EaP9pe9YrHvf7zy6oIHqnPJNcW/DtLjv31h/68r0f1nkq/XdkatNnphfOV1XPnl4yW/06yk/5ddPu3/Xcnr2Zr1D2/lB+q9oYmJCwMRXcnLWZmuomz2+ODcq5X5snwa/5HDjcf/nuI5aQX/j4i0Ex+KiPsi4v6i7Q9ExIMRcbhJ/N8+/9DbTeJPIomWHv+Rhu9/t/p/TzJ/vX4VierZb75aasV8ecf/eExl77W57P3vNpbbwDXuPgAAALgnVCJiZySVvjzduzMqlb6+/H/498b2Sm1sfOKxU2Pvnh/JrxHoic5Keaare9750IFkqnjFPD9YnCsutx8rzht/Wt2W5fuGx2ojLY4d2t2OheM/yvGf+q3a6tYBG871WtC+6sd/pUXtAO685Xz++y4Am1OD8b+tFe0A7jzf/6F9NRr/l+vy5v+wOXUsSvza4CfrgM3I/B/al/EP7cv4h7a0luv6V58oLxZY/etsXfYV/psmcbl5mfIXLzayGdti7pGo3B27pWHi7+LnLe+W9qw5kY6YBY9EJLGhlc79hgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC97J8AAAD//wHu668=") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r6, 0x5, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYRES16=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000d4) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) close(r0) 576.700044ms ago: executing program 4 (id=730): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="00000000000009000e3d20c0c4440000850000e2940000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000240)="927b78", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f00000003c0)="529a1bba6aa0844bf21df7334f210641b77188ffa85f3d5f2e56", 0x1a, 0x44, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f00000004c0)) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 511.840819ms ago: executing program 2 (id=731): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x22000a0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000140)='./file2\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0xa6) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a300000000008004100"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x4, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfc, 0xff, 0xff, 0x0, 0xffffffff, 0x0, 0xff, 0x2, 0x45, [0xfffffff0, 0x89ff]}}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16, @ANYRES64, @ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYRES64=r5, @ANYBLOB="02000200", @ANYBLOB="02b5e29b44f7cfdd17f9", @ANYRES8=r5, @ANYRESDEC, @ANYBLOB="4f9c30448838d52fe5b3a295c17cdfc3604daa51ca4172f241d5018466f3c6dbc04045fe35403720b4441248da1987a72875d2fa4b21f77091e9c0bebc49e26dacb4edfec472db86526393d14b568a6191fe0dc25430ae4ead02469f497f14f77e9e167dedeee75e96afd3262c876adfb63361531be3e983a04bf8bdf4f9a9ca04f839e661070690347b09ad195e909d86724153c96ccdd8dd6adbb3cf76071a61251eee8539d46579a29a69f3c83f7b41d4f2fcbff7a5eabd9c128a2ef7fac3cc3b529345b70f730e307bcb99ed11185c7cba6465c8c76ab3c18fd68594b67c", @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r4, @ANYBLOB="080003", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16=r4], 0x94, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', &(0x7f00000003c0), 0x1000) statx(r0, &(0x7f0000000200)='./file2\x00', 0x800, 0x2, &(0x7f0000000440)) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 478.995342ms ago: executing program 4 (id=732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}, {0xa, 0x0, 0x0, @empty, 0x3}}, 0x5c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe22, 0x2, @loopback, 0x2}, 0x2d) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4}}], 0x30, 0x800}, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES16=r7, @ANYBLOB="01000000000004dbdf2507000000050013008100000014000800000000000000000000000000000000000500140005000000"], 0x38}}, 0x2) syz_emit_ethernet(0x75, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000ece65fbcee558847000008000000000000000000c7f10e056a8e5c6e18832be5f0610b7fba5229e19406ccf55b116e051e8bbc48a196860ce216a11be7c5afc56b2c9d7c99e865472c4992298dfdf3761e3428cff2e85b0651970f63953c1b0ffe93c99bc760fbaf49607648c8682f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x100a}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000b0018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020400f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11], 0x20}}, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 465.005843ms ago: executing program 1 (id=733): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0xe8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(0xffffffffffffffff, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000000085"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) statx(r0, &(0x7f0000000300)='./file0\x00', 0x2000, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, 0xee01, r5) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) 446.292494ms ago: executing program 3 (id=734): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="00000000000009000e3d20c0c4440000850000e2940000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000240)="927b78", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f00000003c0)="529a1bba6aa0844bf21df7334f210641b77188ffa85f3d5f2e56", 0x1a, 0x44, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f00000004c0)) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 382.392169ms ago: executing program 3 (id=735): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff38}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2c080078640101009e1414aa0b0090780324000045fc0000000000000089000000000000ac1414aa862a00000000000d5e000000ff00000000000005054eb8a605129606053d0006ff00800000b61af93a93831300ac1414007f0000017f000001e000000200"/126, @ANYRESDEC=0x0], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB="080003"], 0x44}}, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 278.783338ms ago: executing program 4 (id=736): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) 205.858194ms ago: executing program 1 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 154.519738ms ago: executing program 0 (id=738): syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) r0 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000002c0)=0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, 0xffffffffffffffff, 0x100000000) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x42, 0x80}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x400}) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80, 0x180000) 142.860599ms ago: executing program 4 (id=739): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x4, 0x0) 117.514691ms ago: executing program 1 (id=740): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r1 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_getevents(r3, 0x4, 0x0, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r7, @ANYBLOB="84e1129a72cdf348c052fa3f63e8c1643bedb8b72246a01314dbe036c7a829ed3a04bfcda97efe862097787a5602c333f606053d1191778c6cf3f6410f4cb0959630085115df5baf96ad3d6a669938901285e36db8dc1352b238fe768bd311f5f11a9204e4348151bec965851b3f2e3f5b74899137"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$char_usb(r2, &(0x7f00000003c0)="1638ed960905d217f5ab342a1a194c82a932b5b3104fa55c1e04cd34f9a9381630d5e6f1063c44f16f29b7b10e354749212d2ffc8db92f85b6c0ad4ccce2a1cfa8b5030bb9cab112cb7c600b5956d39d45b45a441eec6446c2d110799f7d63107554d95f5135225f7eaef8fa2b0b8714aa6d6bf04d6b24461ddba3a3546fcbf50f563c69909416f5c4de", 0x8a) syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x410000) capset(&(0x7f0000000200)={0x19980330, r4}, &(0x7f00000004c0)={0x1ff, 0x1, 0x3, 0x7f, 0x7, 0x2}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f0000000040)) io_pgetevents(r3, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 113.815471ms ago: executing program 0 (id=741): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = io_uring_setup(0x4d42, &(0x7f00000002c0)={0x0, 0xc368, 0x1500, 0x3, 0x12d}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000cc1200e8cd08497d2714c09bf2f0000000000800ffffff"], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x39, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x11) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) 61.660805ms ago: executing program 0 (id=742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) 56.559236ms ago: executing program 2 (id=743): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0xe8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(0xffffffffffffffff, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000000085"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r2, 0x0, 0x0, 0x8000c62) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x100000800000009) 950.56µs ago: executing program 0 (id=744): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}, {0xa, 0x0, 0x0, @empty, 0x3}}, 0x5c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe22, 0x2, @loopback, 0x2}, 0x2d) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4}}], 0x30, 0x800}, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES16=r7, @ANYBLOB="01000000000004dbdf2507000000050013008100000014000800000000000000000000000000000000000500140005000000"], 0x38}}, 0x2) syz_emit_ethernet(0x75, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000ece65fbcee558847000008000000000000000000c7f10e056a8e5c6e18832be5f0610b7fba5229e19406ccf55b116e051e8bbc48a196860ce216a11be7c5afc56b2c9d7c99e865472c4992298dfdf3761e3428cff2e85b0651970f63953c1b0ffe93c99bc760fbaf49607648c8682f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x100a}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11], 0x20}}, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 0s ago: executing program 3 (id=745): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="00000000000009000e3d20c0c4440000850000e2940000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000240)="927b78", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f00000003c0)="529a1bba6aa0844bf21df7334f210641b77188ffa85f3d5f2e56", 0x1a, 0x44, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f00000004c0)) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) kernel console output (not intermixed with test programs): 6: comm syz.1.269: invalid indirect mapped block 4294967295 (level 0) [ 61.967413][ T4334] EXT4-fs (loop0): 1 truncate cleaned up [ 61.989017][ T4345] loop4: detected capacity change from 0 to 512 [ 61.998485][ T4334] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 62.006454][ T4334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 62.017389][ T4336] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.269: invalid indirect mapped block 4294967295 (level 1) [ 62.037713][ T4345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.048312][ T4346] loop2: detected capacity change from 0 to 1024 [ 62.050455][ T4347] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.268: bad symlink. [ 62.057860][ T4336] EXT4-fs (loop1): 1 orphan inode deleted [ 62.071384][ T4336] EXT4-fs (loop1): 1 truncate cleaned up [ 62.079190][ T4334] siw: device registration error -23 [ 62.082246][ T4345] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.272: invalid indirect mapped block 4294967295 (level 0) [ 62.115388][ T4334] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.268: bad symlink. [ 62.128390][ T4345] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.272: invalid indirect mapped block 4294967295 (level 1) [ 62.144615][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 62.154781][ T4345] EXT4-fs (loop4): 1 orphan inode deleted [ 62.160600][ T4345] EXT4-fs (loop4): 1 truncate cleaned up [ 62.172474][ T4334] hsr_slave_1 (unregistering): left promiscuous mode [ 62.199605][ T4354] loop2: detected capacity change from 0 to 512 [ 62.207722][ T4354] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.235045][ T4354] EXT4-fs (loop2): 1 truncate cleaned up [ 62.242393][ T4352] pimreg: entered allmulticast mode [ 62.243929][ T4357] netlink: 'syz.4.275': attribute type 21 has an invalid length. [ 62.251321][ T4352] pimreg: left allmulticast mode [ 62.287617][ T4357] netlink: 132 bytes leftover after parsing attributes in process `syz.4.275'. [ 62.296837][ T4357] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 62.308896][ T4363] siw: device registration error -23 [ 62.314874][ T4361] loop2: detected capacity change from 0 to 512 [ 62.320635][ T4359] bridge3: entered promiscuous mode [ 62.326392][ T4359] bridge3: entered allmulticast mode [ 62.337090][ T4359] team0: Port device bridge3 added [ 62.419843][ T4369] loop0: detected capacity change from 0 to 128 [ 62.428812][ T4369] EXT4-fs: inline encryption not supported [ 62.465688][ T4371] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.492736][ T4371] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 62.493746][ T4369] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.542306][ T4373] lo speed is unknown, defaulting to 1000 [ 62.600021][ T4380] loop3: detected capacity change from 0 to 512 [ 62.618836][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 62.619813][ T4380] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.641116][ T4380] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.284: invalid indirect mapped block 4294967295 (level 0) [ 62.658892][ T4380] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.284: invalid indirect mapped block 4294967295 (level 1) [ 62.678516][ T4380] EXT4-fs (loop3): 1 orphan inode deleted [ 62.684385][ T4380] EXT4-fs (loop3): 1 truncate cleaned up [ 62.740922][ T4385] lo speed is unknown, defaulting to 1000 [ 62.799833][ T4384] netlink: 'syz.2.285': attribute type 30 has an invalid length. [ 62.940893][ T4384] Zero length message leads to an empty skb [ 63.017575][ T4388] netlink: 'syz.2.288': attribute type 21 has an invalid length. [ 63.025656][ T4388] netlink: 132 bytes leftover after parsing attributes in process `syz.2.288'. [ 63.034703][ T4388] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 63.099139][ T4390] pimreg: entered allmulticast mode [ 63.105915][ T4390] pimreg: left allmulticast mode [ 63.115390][ T4392] loop3: detected capacity change from 0 to 512 [ 63.119499][ T4394] loop0: detected capacity change from 0 to 512 [ 63.136816][ T4394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.152140][ T4392] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 63.160546][ T4392] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 63.177190][ T4394] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.181446][ T4392] System zones: 0-1, 15-15, 18-18, 34-34 [ 63.193726][ T4392] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.195433][ T4394] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.286: corrupted xattr block 19: overlapping e_value [ 63.215627][ T4392] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.230456][ T4392] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 63.240060][ T4394] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 63.249744][ T4392] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.287: bg 0: block 40: padding at end of block bitmap is not set [ 63.265356][ T4394] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.286: corrupted xattr block 19: overlapping e_value [ 63.294398][ T4392] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 63.303769][ T4392] EXT4-fs (loop3): 1 truncate cleaned up [ 63.310995][ T4394] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 63.320134][ T4394] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.286: corrupted xattr block 19: overlapping e_value [ 63.360128][ T4402] pimreg: entered allmulticast mode [ 63.367918][ T4402] pimreg: left allmulticast mode [ 63.378564][ T4392] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 63.384529][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 63.386742][ T4392] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 63.406336][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 63.416488][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 63.432226][ T4405] loop1: detected capacity change from 0 to 1024 [ 63.433646][ T4407] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.287: bad symlink. [ 63.459110][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 63.479597][ T29] kauditd_printk_skb: 762 callbacks suppressed [ 63.479615][ T29] audit: type=1400 audit(1756668993.544:3007): avc: denied { setopt } for pid=4408 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.521903][ T4392] siw: device registration error -23 [ 63.534744][ T4392] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.287: bad symlink. [ 63.535464][ T4405] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.293: Allocating blocks 449-513 which overlap fs metadata [ 63.553374][ T4415] loop4: detected capacity change from 0 to 128 [ 63.570215][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 63.583800][ T4413] loop0: detected capacity change from 0 to 512 [ 63.595883][ T4392] hsr_slave_1 (unregistering): left promiscuous mode [ 63.613506][ T4404] EXT4-fs (loop1): pa ffff888107257850: logic 48, phys. 177, len 21 [ 63.616366][ T29] audit: type=1326 audit(1756668993.684:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe48233ebe9 code=0x0 [ 63.621636][ T4404] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 63.660949][ T4417] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.670290][ T4417] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 63.678702][ T29] audit: type=1326 audit(1756668993.714:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 63.702692][ T29] audit: type=1326 audit(1756668993.714:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 63.726145][ T29] audit: type=1326 audit(1756668993.714:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 63.749610][ T29] audit: type=1326 audit(1756668993.714:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 63.772949][ T29] audit: type=1326 audit(1756668993.714:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 63.796335][ T29] audit: type=1326 audit(1756668993.714:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 63.819643][ T29] audit: type=1326 audit(1756668993.714:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 63.843098][ T29] audit: type=1326 audit(1756668993.714:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 63.874130][ T4413] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.891838][ T4413] EXT4-fs (loop0): mount failed [ 63.961342][ T4423] loop1: detected capacity change from 0 to 1024 [ 64.029560][ T4423] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.296: Allocating blocks 385-513 which overlap fs metadata [ 64.048925][ T4420] EXT4-fs (loop1): pa ffff8881054e97e0: logic 16, phys. 129, len 24 [ 64.057093][ T4420] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 64.140162][ T4435] lo speed is unknown, defaulting to 1000 [ 64.497799][ T4440] loop1: detected capacity change from 0 to 1024 [ 64.551605][ T4442] lo speed is unknown, defaulting to 1000 [ 64.568045][ T4446] loop0: detected capacity change from 0 to 1024 [ 64.585995][ T4448] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.632896][ T4446] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.303: Allocating blocks 385-513 which overlap fs metadata [ 64.676364][ T4437] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.300: Allocating blocks 449-513 which overlap fs metadata [ 64.697820][ T4445] EXT4-fs (loop0): pa ffff8881054e97e0: logic 16, phys. 129, len 24 [ 64.705896][ T4445] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 64.758673][ T4453] loop4: detected capacity change from 0 to 512 [ 64.776322][ T4436] EXT4-fs (loop1): pa ffff8881054e98c0: logic 48, phys. 177, len 21 [ 64.784431][ T4436] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 64.808291][ T4453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.867885][ T4453] EXT4-fs (loop4): 1 truncate cleaned up [ 64.873722][ T4458] loop3: detected capacity change from 0 to 1024 [ 64.922578][ T4460] loop1: detected capacity change from 0 to 512 [ 64.963851][ T4460] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.041821][ T4460] EXT4-fs (loop1): 1 truncate cleaned up [ 65.125032][ T4468] pimreg: entered allmulticast mode [ 65.219208][ T4469] lo speed is unknown, defaulting to 1000 [ 65.357010][ T4471] loop4: detected capacity change from 0 to 164 [ 65.373175][ T4468] pimreg: left allmulticast mode [ 65.399788][ T4473] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.459786][ T4473] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 65.473586][ T4471] syz.4.310: attempt to access beyond end of device [ 65.473586][ T4471] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 65.582896][ T4476] loop0: detected capacity change from 0 to 128 [ 65.593695][ T4471] syz.4.310: attempt to access beyond end of device [ 65.593695][ T4471] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 65.662944][ T4480] loop1: detected capacity change from 0 to 1024 [ 65.710388][ T4480] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.314: Allocating blocks 449-513 which overlap fs metadata [ 65.765161][ T4479] EXT4-fs (loop1): pa ffff8881054e97e0: logic 48, phys. 177, len 21 [ 65.765926][ T4486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.773240][ T4479] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 65.791123][ T4484] lo speed is unknown, defaulting to 1000 [ 65.906703][ T4491] loop1: detected capacity change from 0 to 1024 [ 65.976219][ T4497] loop3: detected capacity change from 0 to 128 [ 65.983548][ T4497] EXT4-fs: inline encryption not supported [ 65.991939][ T4497] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.029356][ T4491] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.317: Allocating blocks 449-513 which overlap fs metadata [ 66.062680][ T4490] EXT4-fs (loop1): pa ffff8881072577e0: logic 48, phys. 177, len 21 [ 66.070855][ T4490] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 66.100016][ T4502] __nla_validate_parse: 5 callbacks suppressed [ 66.100037][ T4502] netlink: 96 bytes leftover after parsing attributes in process `syz.4.321'. [ 66.214338][ T4506] pimreg: entered allmulticast mode [ 66.321377][ T4506] pimreg: left allmulticast mode [ 66.449371][ T4509] lo speed is unknown, defaulting to 1000 [ 66.701774][ T4512] loop0: detected capacity change from 0 to 1024 [ 66.879049][ T4512] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.324: Allocating blocks 385-513 which overlap fs metadata [ 66.900404][ T4516] loop1: detected capacity change from 0 to 512 [ 66.909810][ T4511] EXT4-fs (loop0): pa ffff8881072578c0: logic 16, phys. 129, len 24 [ 66.917912][ T4511] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 66.929919][ T4516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.963688][ T4516] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.034869][ T4516] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.326: corrupted xattr block 19: overlapping e_value [ 67.089728][ T4533] loop3: detected capacity change from 0 to 128 [ 67.102557][ T4533] EXT4-fs: inline encryption not supported [ 67.108839][ T4516] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 67.118234][ T4516] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.326: corrupted xattr block 19: overlapping e_value [ 67.132192][ T4534] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.326: corrupted xattr block 19: overlapping e_value [ 67.145298][ T4535] loop0: detected capacity change from 0 to 512 [ 67.154237][ T4537] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.164511][ T4535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.175588][ T4533] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.186215][ T4534] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 67.189044][ T4537] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 67.210389][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'. [ 67.233229][ T4535] EXT4-fs (loop0): 1 truncate cleaned up [ 67.239802][ T4516] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 67.255293][ T4541] loop4: detected capacity change from 0 to 1024 [ 67.284946][ T4516] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.326: corrupted xattr block 19: overlapping e_value [ 67.376798][ T4538] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.326: corrupted xattr block 19: overlapping e_value [ 67.397169][ T4546] lo speed is unknown, defaulting to 1000 [ 67.421742][ T4551] netlink: 96 bytes leftover after parsing attributes in process `syz.0.337'. [ 67.470213][ T4538] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.326: corrupted xattr block 19: overlapping e_value [ 67.490698][ T4550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.512254][ T4552] loop2: detected capacity change from 0 to 1024 [ 67.539812][ T4553] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.334: Allocating blocks 385-513 which overlap fs metadata [ 67.557764][ T4538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 67.598973][ T4553] EXT4-fs (loop4): pa ffff8881054e9e00: logic 16, phys. 129, len 24 [ 67.607149][ T4553] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 67.624877][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 67.645350][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 67.660815][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 67.689408][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 67.702221][ T4544] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.335: Allocating blocks 449-513 which overlap fs metadata [ 67.746164][ T4543] EXT4-fs (loop2): pa ffff8881054e9e00: logic 48, phys. 177, len 21 [ 67.754278][ T4543] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 67.909911][ T4569] lo speed is unknown, defaulting to 1000 [ 68.293603][ T4577] loop4: detected capacity change from 0 to 128 [ 68.311101][ T4577] EXT4-fs: inline encryption not supported [ 68.335403][ T4577] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.376734][ T4580] loop3: detected capacity change from 0 to 512 [ 68.390334][ T4582] loop2: detected capacity change from 0 to 512 [ 68.407912][ T4582] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.470796][ T4582] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.348: corrupted in-inode xattr: overlapping e_value [ 68.502659][ T4580] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.551156][ T4582] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.348: couldn't read orphan inode 15 (err -117) [ 68.677044][ T4580] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.347: corrupted inode contents [ 68.689006][ T4580] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.347: mark_inode_dirty error [ 68.706529][ T4580] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.347: corrupted inode contents [ 68.729276][ T4580] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.347: mark_inode_dirty error [ 68.738057][ T4590] loop0: detected capacity change from 0 to 1024 [ 68.766375][ T4590] EXT4-fs mount: 159 callbacks suppressed [ 68.766398][ T4590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.795486][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.837977][ T4595] lo speed is unknown, defaulting to 1000 [ 68.956366][ T4595] atomic_op ffff88811c406128 conn xmit_atomic 0000000000000000 [ 69.097216][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.168402][ T4590] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.350: Allocating blocks 449-513 which overlap fs metadata [ 69.193282][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 69.193298][ T29] audit: type=1326 audit(1756669002.269:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.244136][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.246366][ T4589] EXT4-fs (loop0): pa ffff8881072578c0: logic 48, phys. 177, len 21 [ 69.261211][ T4589] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 69.271350][ T29] audit: type=1326 audit(1756669002.299:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.294746][ T29] audit: type=1326 audit(1756669002.299:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.318149][ T29] audit: type=1326 audit(1756669002.299:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.341756][ T29] audit: type=1326 audit(1756669002.299:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.344927][ T4600] loop2: detected capacity change from 0 to 512 [ 69.365282][ T29] audit: type=1326 audit(1756669002.299:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.394870][ T29] audit: type=1326 audit(1756669002.299:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.418275][ T29] audit: type=1326 audit(1756669002.299:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.441655][ T29] audit: type=1326 audit(1756669002.299:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.465242][ T29] audit: type=1326 audit(1756669002.299:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 69.524260][ T4600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.543956][ T4598] pimreg: entered allmulticast mode [ 69.566079][ T4598] pimreg: left allmulticast mode [ 69.577435][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.622491][ T4600] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.352: corrupted in-inode xattr: overlapping e_value [ 69.644950][ T4600] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.352: couldn't read orphan inode 15 (err -117) [ 69.664010][ T4600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.737721][ T4605] lo speed is unknown, defaulting to 1000 [ 69.760745][ T4611] loop0: detected capacity change from 0 to 512 [ 69.773577][ T4611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.793906][ T4611] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.356: corrupted in-inode xattr: overlapping e_value [ 69.810114][ T4611] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.356: couldn't read orphan inode 15 (err -117) [ 69.836959][ T4611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.837358][ T4614] loop4: detected capacity change from 0 to 512 [ 69.855298][ T4610] loop3: detected capacity change from 0 to 512 [ 69.871906][ T4610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.885180][ T4614] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.919481][ T4614] EXT4-fs (loop4): 1 truncate cleaned up [ 69.928836][ T4610] EXT4-fs (loop3): 1 truncate cleaned up [ 69.965700][ T4614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.980142][ T4610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.018921][ T4614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.035733][ T4610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.169701][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.182248][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.213220][ T4625] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.285681][ T4628] loop0: detected capacity change from 0 to 512 [ 70.298519][ T4625] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 70.299958][ T4631] loop2: detected capacity change from 0 to 512 [ 70.313194][ T4628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.344656][ T4625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 70.360771][ T4628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.430797][ T4628] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.444213][ T4639] loop1: detected capacity change from 0 to 512 [ 70.454832][ T23] kernel write not supported for file /174/attr/exec (pid: 23 comm: kworker/1:0) [ 70.464343][ T4628] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.360: corrupted xattr block 19: overlapping e_value [ 70.469053][ T4631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.494780][ T4628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 70.504091][ T4638] loop4: detected capacity change from 0 to 128 [ 70.504337][ T4628] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.360: corrupted xattr block 19: overlapping e_value [ 70.526426][ T4628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 70.526949][ T4638] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 70.540606][ T4628] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.360: corrupted xattr block 19: overlapping e_value [ 70.555381][ T4642] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.360: corrupted xattr block 19: overlapping e_value [ 70.561608][ T4631] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.586371][ T4638] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.600803][ T4631] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.363: corrupted inode contents [ 70.620206][ T4642] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 70.639361][ T4643] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.360: corrupted xattr block 19: overlapping e_value [ 70.654607][ T4643] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.360: corrupted xattr block 19: overlapping e_value [ 70.669502][ T4639] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.669687][ T4631] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.363: mark_inode_dirty error [ 70.677592][ T4639] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 70.701772][ T4639] System zones: 0-1, 15-15, 18-18, 34-34 [ 70.707706][ T4639] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.714159][ T4639] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 70.728722][ T4639] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 70.743803][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.760197][ T4639] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.365: bg 0: block 40: padding at end of block bitmap is not set [ 70.776942][ T4631] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.363: corrupted inode contents [ 70.791707][ T4643] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 70.806535][ T4639] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 70.818792][ T4631] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.363: mark_inode_dirty error [ 70.819004][ T4639] EXT4-fs (loop1): 1 truncate cleaned up [ 70.838323][ T4639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.865531][ T4639] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.873672][ T4639] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 70.908237][ T4650] loop4: detected capacity change from 0 to 512 [ 70.916034][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.921097][ T4651] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.365: bad symlink. [ 70.962645][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.991851][ T4639] siw: device registration error -23 [ 70.998141][ T4639] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.365: bad symlink. [ 71.070862][ T4650] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.078860][ T4650] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 71.093735][ T4650] System zones: 0-1, 15-15, 18-18, 34-34 [ 71.099922][ T4650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.123765][ T4650] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.123959][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 71.138473][ T4650] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 71.220870][ T4664] lo speed is unknown, defaulting to 1000 [ 71.306113][ T4663] loop3: detected capacity change from 0 to 1024 [ 71.348052][ T4650] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.368: bg 0: block 40: padding at end of block bitmap is not set [ 71.395646][ T4650] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.433980][ T4663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.468899][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.498853][ T4650] EXT4-fs (loop4): 1 truncate cleaned up [ 71.523654][ T23] hid_parser_main: 19 callbacks suppressed [ 71.523754][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.536726][ T4650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.537260][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.556939][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.567556][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.575126][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.582580][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.589998][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.597442][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.604974][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.612437][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.621391][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 71.622461][ T4650] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.638962][ T4650] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 71.657865][ T4674] fido_id[4674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.658662][ T4673] loop1: detected capacity change from 0 to 512 [ 71.681121][ T4673] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.699302][ T4675] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.368: bad symlink. [ 71.712230][ T4673] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.372: corrupted in-inode xattr: overlapping e_value [ 71.732066][ T4678] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.368: bad symlink. [ 71.743544][ T4673] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.372: couldn't read orphan inode 15 (err -117) [ 71.756661][ T4673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.761048][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.782734][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 71.957025][ T4650] hsr_slave_1 (unregistering): left promiscuous mode [ 71.975605][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 71.990070][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 71.999525][ T4682] loop3: detected capacity change from 0 to 512 [ 72.000295][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 72.052857][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 72.079364][ T4688] lo speed is unknown, defaulting to 1000 [ 72.185851][ T4682] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.204324][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.392689][ T4691] pimreg: entered allmulticast mode [ 72.418163][ T4691] pimreg: left allmulticast mode [ 72.450413][ T4682] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.375: corrupted in-inode xattr: overlapping e_value [ 72.484680][ T4695] loop4: detected capacity change from 0 to 1024 [ 72.485489][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.502500][ T4682] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.375: couldn't read orphan inode 15 (err -117) [ 72.515888][ T4695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.529623][ T4682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.610144][ T4701] loop0: detected capacity change from 0 to 1024 [ 72.618954][ T4704] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.378: Allocating blocks 385-513 which overlap fs metadata [ 72.656983][ T4701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.755322][ T4701] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.381: Allocating blocks 385-513 which overlap fs metadata [ 72.759536][ T4704] EXT4-fs (loop4): pa ffff8881072579a0: logic 16, phys. 129, len 24 [ 72.772916][ T4700] EXT4-fs (loop0): pa ffff888107257a10: logic 16, phys. 129, len 24 [ 72.777354][ T4704] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 72.785319][ T4700] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 72.833374][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.838517][ T4712] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.863834][ T4710] lo speed is unknown, defaulting to 1000 [ 72.888420][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.026906][ T4721] loop0: detected capacity change from 0 to 512 [ 73.038809][ T4723] loop2: detected capacity change from 0 to 1024 [ 73.062230][ T4721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.102592][ T4726] loop3: detected capacity change from 0 to 128 [ 73.131707][ T4721] EXT4-fs (loop0): 1 truncate cleaned up [ 73.146956][ T4723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.159819][ T4721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.205550][ T4731] loop1: detected capacity change from 0 to 512 [ 73.215578][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.277950][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.325180][ T4731] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.333285][ T4731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 73.341496][ T4731] System zones: 0-1, 15-15, 18-18, 34-34 [ 73.358975][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.391334][ T4731] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.403110][ T4731] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.417728][ T4731] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 73.428063][ T4731] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.388: bg 0: block 40: padding at end of block bitmap is not set [ 73.463506][ T4731] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 73.476304][ T4740] loop2: detected capacity change from 0 to 512 [ 73.483220][ T4731] EXT4-fs (loop1): 1 truncate cleaned up [ 73.489407][ T4731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.502547][ T4740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.519850][ T4740] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.389: corrupted in-inode xattr: overlapping e_value [ 73.539813][ T4740] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.389: couldn't read orphan inode 15 (err -117) [ 73.554211][ T4731] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.561260][ T4740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.562261][ T4731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 73.691849][ T4747] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.388: bad symlink. [ 73.715390][ T4731] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.388: bad symlink. [ 73.807505][ T4750] lo speed is unknown, defaulting to 1000 [ 73.866521][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 73.924033][ T4753] loop3: detected capacity change from 0 to 512 [ 73.986677][ T4753] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.067339][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.094445][ T4753] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.393: corrupted in-inode xattr: overlapping e_value [ 74.132058][ T4753] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.393: couldn't read orphan inode 15 (err -117) [ 74.180481][ T4757] loop1: detected capacity change from 0 to 1024 [ 74.192110][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.211595][ T4753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.246132][ T4757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.272328][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 74.272343][ T29] audit: type=1326 audit(1756669010.344:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.311902][ T4761] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.342354][ T4757] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.394: Allocating blocks 385-513 which overlap fs metadata [ 74.356745][ T4761] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 74.358500][ T4757] EXT4-fs (loop1): pa ffff8881054e9ee0: logic 16, phys. 129, len 24 [ 74.373026][ T4757] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 74.373172][ T29] audit: type=1326 audit(1756669010.374:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.406260][ T29] audit: type=1326 audit(1756669010.374:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.429741][ T29] audit: type=1326 audit(1756669010.374:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.453178][ T29] audit: type=1326 audit(1756669010.374:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.476610][ T29] audit: type=1326 audit(1756669010.374:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.500048][ T29] audit: type=1326 audit(1756669010.374:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.523468][ T29] audit: type=1326 audit(1756669010.374:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.546743][ T29] audit: type=1326 audit(1756669010.374:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.570112][ T29] audit: type=1326 audit(1756669010.374:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 74.641266][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.739186][ T4772] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.754839][ T4768] lo speed is unknown, defaulting to 1000 [ 74.756839][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.773166][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 74.834337][ T4775] loop0: detected capacity change from 0 to 1024 [ 74.895450][ T4775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.965590][ T4784] loop3: detected capacity change from 0 to 1024 [ 74.982717][ T4783] pimreg: entered allmulticast mode [ 74.983390][ T4775] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.400: Allocating blocks 449-513 which overlap fs metadata [ 74.990826][ T4783] pimreg: left allmulticast mode [ 75.044448][ T4784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.103981][ T4774] EXT4-fs (loop0): pa ffff888107257a10: logic 48, phys. 177, len 21 [ 75.112203][ T4774] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 75.250663][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.360230][ T4777] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.399: Allocating blocks 449-513 which overlap fs metadata [ 75.418566][ T4795] lo speed is unknown, defaulting to 1000 [ 75.422518][ T4797] loop0: detected capacity change from 0 to 128 [ 75.474456][ T4797] EXT4-fs: inline encryption not supported [ 75.484830][ T4776] EXT4-fs (loop3): pa ffff8881054e9ee0: logic 48, phys. 177, len 21 [ 75.492927][ T4776] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 75.502985][ T4797] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.563306][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.572659][ T4797] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.619841][ T4800] pimreg: entered allmulticast mode [ 75.633568][ T4800] pimreg: left allmulticast mode [ 75.693584][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.740079][ T4804] loop1: detected capacity change from 0 to 1024 [ 75.757213][ T4805] loop3: detected capacity change from 0 to 512 [ 75.771710][ T4804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.785343][ T4805] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.860228][ T4805] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.408: invalid indirect mapped block 4294967295 (level 0) [ 75.904349][ T4805] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.408: invalid indirect mapped block 4294967295 (level 1) [ 75.942586][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.952390][ T4805] EXT4-fs (loop3): 1 orphan inode deleted [ 75.958185][ T4805] EXT4-fs (loop3): 1 truncate cleaned up [ 75.985779][ T4805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.007662][ T4815] netlink: 96 bytes leftover after parsing attributes in process `syz.1.410'. [ 76.062088][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.148930][ T4819] loop1: detected capacity change from 0 to 1024 [ 76.265975][ T4819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.313512][ T4819] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.413: Allocating blocks 385-513 which overlap fs metadata [ 76.340349][ T4819] EXT4-fs (loop1): pa ffff888107257a80: logic 16, phys. 129, len 24 [ 76.348457][ T4819] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 76.538809][ T4828] atomic_op ffff8881098fd928 conn xmit_atomic 0000000000000000 [ 76.653547][ T4826] lo speed is unknown, defaulting to 1000 [ 76.829442][ T4819] syz.1.413 (4819) used greatest stack depth: 10088 bytes left [ 76.868572][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.890717][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 76.935536][ T4834] loop0: detected capacity change from 0 to 1024 [ 76.944236][ T4838] loop1: detected capacity change from 0 to 1024 [ 76.967352][ T4834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.989357][ T4838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.022547][ T4840] pimreg: entered allmulticast mode [ 77.031848][ T4840] pimreg: left allmulticast mode [ 77.146484][ T4849] loop3: detected capacity change from 0 to 1024 [ 77.155862][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.166160][ T4834] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.416: Allocating blocks 449-513 which overlap fs metadata [ 77.206768][ T4849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.209143][ T4851] loop4: detected capacity change from 0 to 128 [ 77.228574][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 77.243523][ T4851] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.257259][ T4833] EXT4-fs (loop0): pa ffff8881054e9ee0: logic 48, phys. 177, len 21 [ 77.261872][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 77.265385][ T4833] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 77.294048][ T4849] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.420: Allocating blocks 385-513 which overlap fs metadata [ 77.319721][ T4851] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.320340][ T4848] EXT4-fs (loop3): pa ffff888107257a80: logic 16, phys. 129, len 24 [ 77.336972][ T4848] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 77.350379][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.476582][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.483917][ C0] hrtimer: interrupt took 57246 ns [ 77.550007][ T2762] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.551530][ T4861] lo speed is unknown, defaulting to 1000 [ 77.659396][ T4874] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.700684][ T4874] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 77.716599][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 78.004151][ T4881] lo speed is unknown, defaulting to 1000 [ 78.497562][ T4887] loop0: detected capacity change from 0 to 1024 [ 78.507166][ T4889] pimreg: entered allmulticast mode [ 78.515655][ T4889] pimreg: left allmulticast mode [ 78.545565][ T4887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.645165][ T4897] loop4: detected capacity change from 0 to 164 [ 78.736071][ T4886] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.434: Allocating blocks 449-513 which overlap fs metadata [ 78.767570][ T4885] EXT4-fs (loop0): pa ffff8881054e9e70: logic 48, phys. 177, len 21 [ 78.775874][ T4885] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 78.776764][ T4900] lo speed is unknown, defaulting to 1000 [ 78.915874][ T4903] lo speed is unknown, defaulting to 1000 [ 79.028014][ T4903] atomic_op ffff8881318e8928 conn xmit_atomic 0000000000000000 [ 79.286481][ T4900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.344383][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 79.344402][ T29] audit: type=1326 audit(1756669015.414:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.374089][ T29] audit: type=1326 audit(1756669015.414:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.428947][ T1041] hid_parser_main: 19 callbacks suppressed [ 79.429040][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.442519][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.449934][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.466501][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.473999][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.481696][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.489145][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.496590][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.504060][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.511468][ T1041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.520738][ T29] audit: type=1326 audit(1756669015.414:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.544025][ T29] audit: type=1326 audit(1756669015.414:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.567763][ T29] audit: type=1326 audit(1756669015.414:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.590960][ T4914] loop3: detected capacity change from 0 to 512 [ 79.591153][ T29] audit: type=1326 audit(1756669015.414:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.604664][ T1041] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 79.620844][ T29] audit: type=1326 audit(1756669015.414:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.653611][ T29] audit: type=1326 audit(1756669015.414:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.654086][ T4914] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.676917][ T29] audit: type=1326 audit(1756669015.414:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.676954][ T29] audit: type=1326 audit(1756669015.414:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f107433ebe9 code=0x7ffc0000 [ 79.765507][ T4916] loop1: detected capacity change from 0 to 1024 [ 79.822858][ T4914] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.442: corrupted in-inode xattr: overlapping e_value [ 79.859040][ T4916] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.445: Allocating blocks 449-513 which overlap fs metadata [ 79.874379][ T4914] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.442: couldn't read orphan inode 15 (err -117) [ 79.979876][ T4915] EXT4-fs (loop1): pa ffff8881054e9f50: logic 48, phys. 177, len 21 [ 79.987984][ T4915] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 80.015549][ T4930] loop0: detected capacity change from 0 to 512 [ 80.079812][ T4930] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 80.088044][ T4930] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 80.116298][ T4936] syz_tun: entered allmulticast mode [ 80.125829][ T4935] syz_tun: left allmulticast mode [ 80.138847][ T4937] bridge2: entered promiscuous mode [ 80.144278][ T4930] System zones: 0-1, 15-15, 18-18 [ 80.144314][ T4937] bridge2: entered allmulticast mode [ 80.154884][ T4930] , 34-34 [ 80.220863][ T4930] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.227300][ T4930] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 80.241986][ T4930] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 80.273443][ T4947] loop1: detected capacity change from 0 to 128 [ 80.282696][ T4930] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.448: bg 0: block 40: padding at end of block bitmap is not set [ 80.335639][ T4951] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.340714][ T4930] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 80.345203][ T4951] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 80.377808][ T4946] pimreg: entered allmulticast mode [ 80.383749][ T4930] EXT4-fs (loop0): 1 truncate cleaned up [ 80.392459][ T4930] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 80.400417][ T4930] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 80.415290][ T4951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 80.435072][ T4930] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.448: bad symlink. [ 80.451799][ T4954] pimreg: left allmulticast mode [ 80.459932][ T4956] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.480545][ T4956] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 80.489613][ T4930] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.448: bad symlink. [ 80.523008][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 80.549360][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 80.583290][ T4964] loop0: detected capacity change from 0 to 512 [ 80.624951][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 80.638540][ T4964] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.668397][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 80.700719][ T4964] EXT4-fs (loop0): mount failed [ 80.855326][ T4972] netlink: 'syz.0.463': attribute type 21 has an invalid length. [ 80.881811][ T4972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.463'. [ 80.890957][ T4972] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 80.908386][ T4976] siw: device registration error -23 [ 80.926066][ T4977] loop3: detected capacity change from 0 to 164 [ 80.971534][ T4977] syz.3.465: attempt to access beyond end of device [ 80.971534][ T4977] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 80.996651][ T4977] syz.3.465: attempt to access beyond end of device [ 80.996651][ T4977] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 81.039911][ T4983] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.065831][ T4987] loop3: detected capacity change from 0 to 512 [ 81.084417][ T4983] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 81.104973][ T4989] loop2: detected capacity change from 0 to 1024 [ 81.140404][ T4987] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 81.148485][ T4987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 81.163194][ T4987] System zones: 0-1, 15-15, 18-18, 34-34 [ 81.166811][ T4996] loop1: detected capacity change from 0 to 1024 [ 81.169100][ T4987] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.182212][ T4987] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.196966][ T4987] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 81.204001][ T4987] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.470: bg 0: block 40: padding at end of block bitmap is not set [ 81.218530][ T4987] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 81.237402][ T4987] EXT4-fs (loop3): 1 truncate cleaned up [ 81.292882][ T5002] loop0: detected capacity change from 0 to 512 [ 81.310493][ T5002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.314659][ T4987] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 81.327316][ T4987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 81.339502][ T5002] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.475: corrupted in-inode xattr: overlapping e_value [ 81.355190][ T4987] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.470: bad symlink. [ 81.378978][ T5002] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.475: couldn't read orphan inode 15 (err -117) [ 81.410644][ T4987] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.470: bad symlink. [ 81.423731][ T5006] loop2: detected capacity change from 0 to 1024 [ 81.622946][ T5024] loop3: detected capacity change from 0 to 164 [ 81.628335][ T5022] loop2: detected capacity change from 0 to 1024 [ 81.637256][ T5024] syz.3.481: attempt to access beyond end of device [ 81.637256][ T5024] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 81.652675][ T5024] syz.3.481: attempt to access beyond end of device [ 81.652675][ T5024] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 81.749389][ T5026] lo speed is unknown, defaulting to 1000 [ 81.772439][ T5022] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.480: Allocating blocks 449-513 which overlap fs metadata [ 81.832672][ T5021] EXT4-fs (loop2): pa ffff888107257a10: logic 48, phys. 177, len 21 [ 81.840753][ T5021] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 82.004567][ T5034] loop0: detected capacity change from 0 to 512 [ 82.037678][ T5034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.076360][ T5038] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.077082][ T5034] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.483: corrupted in-inode xattr: overlapping e_value [ 82.120662][ T5034] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.483: couldn't read orphan inode 15 (err -117) [ 82.187636][ T5041] __nla_validate_parse: 2 callbacks suppressed [ 82.187654][ T5041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 82.234356][ T5038] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 82.340337][ T5049] pimreg: entered allmulticast mode [ 82.366443][ T5049] pimreg: left allmulticast mode [ 82.372581][ T5053] loop2: detected capacity change from 0 to 128 [ 82.392706][ T5053] EXT4-fs: inline encryption not supported [ 82.416797][ T5053] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.432676][ T5055] loop3: detected capacity change from 0 to 1024 [ 82.459700][ T5055] EXT4-fs: Ignoring removed orlov option [ 82.705862][ T5068] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.725022][ T5064] lo speed is unknown, defaulting to 1000 [ 82.753389][ T5068] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 82.765528][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 82.810011][ T5070] loop2: detected capacity change from 0 to 1024 [ 82.837229][ T5070] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.494: Allocating blocks 385-513 which overlap fs metadata [ 82.852769][ T5074] loop4: detected capacity change from 0 to 512 [ 82.857390][ T5070] EXT4-fs (loop2): pa ffff888107257a80: logic 16, phys. 129, len 24 [ 82.867160][ T5070] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 82.883318][ T5074] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.906061][ T5074] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.495: corrupted inode contents [ 82.917993][ T5074] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.495: mark_inode_dirty error [ 82.929829][ T5074] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.495: corrupted inode contents [ 82.942518][ T5074] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.495: mark_inode_dirty error [ 82.985577][ T1041] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 83.033266][ T5079] fido_id[5079]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.051534][ T5083] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.062696][ T5083] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 83.074431][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 83.094477][ T5085] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.103984][ T5085] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 83.164541][ T5085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 83.213288][ T5094] loop1: detected capacity change from 0 to 1024 [ 83.225954][ T5092] hub 9-0:1.0: USB hub found [ 83.241292][ T5092] hub 9-0:1.0: 8 ports detected [ 83.257986][ T5098] loop3: detected capacity change from 0 to 512 [ 83.268316][ T5098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.299738][ T5098] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.310872][ T5104] loop4: detected capacity change from 0 to 512 [ 83.322229][ T5104] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.336194][ T5098] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.504: corrupted xattr block 19: overlapping e_value [ 83.341098][ T5104] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.505: corrupted inode contents [ 83.362937][ T5104] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.505: mark_inode_dirty error [ 83.375724][ T5104] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.505: corrupted inode contents [ 83.388527][ T5104] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.505: mark_inode_dirty error [ 83.392143][ T5098] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.435354][ T5107] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.504: corrupted xattr block 19: overlapping e_value [ 83.450067][ T5098] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.504: corrupted xattr block 19: overlapping e_value [ 83.495605][ T5112] loop0: detected capacity change from 0 to 1024 [ 83.502835][ T5107] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.509507][ T5098] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.548925][ T5113] loop1: detected capacity change from 0 to 1024 [ 83.554491][ T5098] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.504: corrupted xattr block 19: overlapping e_value [ 83.576319][ T5118] loop4: detected capacity change from 0 to 128 [ 83.585266][ T5114] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.504: corrupted xattr block 19: overlapping e_value [ 83.588553][ T5112] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.507: Allocating blocks 385-513 which overlap fs metadata [ 83.626263][ T5118] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.628660][ T5114] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.504: corrupted xattr block 19: overlapping e_value [ 83.685517][ T5114] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.700685][ T5120] EXT4-fs (loop0): pa ffff8881054e9e00: logic 16, phys. 129, len 24 [ 83.708783][ T5120] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 83.763935][ T5110] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.506: Allocating blocks 449-513 which overlap fs metadata [ 83.814903][ T5109] EXT4-fs (loop1): pa ffff8881054e9770: logic 48, phys. 177, len 21 [ 83.823105][ T5109] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 83.876964][ T5128] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.886610][ T5128] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 83.944358][ T5132] loop2: detected capacity change from 0 to 512 [ 83.967492][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 83.985822][ T5132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.025353][ T5132] EXT4-fs (loop2): 1 truncate cleaned up [ 84.056900][ T5150] loop3: detected capacity change from 0 to 1024 [ 84.073247][ T5149] loop1: detected capacity change from 0 to 512 [ 84.092636][ T5149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.141786][ T5142] loop0: detected capacity change from 0 to 1024 [ 84.158014][ T5149] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.519: corrupted in-inode xattr: overlapping e_value [ 84.190697][ T5149] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.519: couldn't read orphan inode 15 (err -117) [ 84.217852][ T5151] lo speed is unknown, defaulting to 1000 [ 84.286135][ T5142] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.517: Allocating blocks 449-513 which overlap fs metadata [ 84.323120][ T5141] EXT4-fs (loop0): pa ffff8881054e9620: logic 48, phys. 177, len 21 [ 84.331244][ T5141] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 84.397713][ T5168] loop3: detected capacity change from 0 to 512 [ 84.412699][ T29] kauditd_printk_skb: 826 callbacks suppressed [ 84.412717][ T29] audit: type=1326 audit(1756669021.480:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.446417][ T5168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.474345][ T5168] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.525: invalid indirect mapped block 4294967295 (level 0) [ 84.488288][ T29] audit: type=1326 audit(1756669021.480:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.490249][ T5168] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.525: invalid indirect mapped block 4294967295 (level 1) [ 84.511887][ T29] audit: type=1326 audit(1756669021.480:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.549303][ T29] audit: type=1326 audit(1756669021.480:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.572686][ T29] audit: type=1326 audit(1756669021.480:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.596132][ T29] audit: type=1326 audit(1756669021.480:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.619503][ T29] audit: type=1326 audit(1756669021.480:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.642883][ T29] audit: type=1326 audit(1756669021.480:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.643159][ T5168] EXT4-fs (loop3): 1 orphan inode deleted [ 84.666228][ T29] audit: type=1326 audit(1756669021.480:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.666277][ T29] audit: type=1326 audit(1756669021.480:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbbbce2ebe9 code=0x7ffc0000 [ 84.672052][ T5168] EXT4-fs (loop3): 1 truncate cleaned up [ 84.774887][ T5175] loop1: detected capacity change from 0 to 1024 [ 84.814387][ T5177] loop3: detected capacity change from 0 to 1024 [ 84.860171][ T5175] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.527: Allocating blocks 385-513 which overlap fs metadata [ 84.860225][ T5177] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.528: Allocating blocks 385-513 which overlap fs metadata [ 84.904334][ T5176] EXT4-fs (loop3): pa ffff888107257a80: logic 16, phys. 129, len 24 [ 84.912590][ T5176] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 84.967704][ T5184] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.977566][ T5184] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 84.978916][ T5175] EXT4-fs (loop1): pa ffff8881054e9e00: logic 16, phys. 129, len 24 [ 84.993790][ T5175] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 85.022922][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 85.138510][ T5193] loop2: detected capacity change from 0 to 512 [ 85.184048][ T5193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.211012][ T5198] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.228733][ T5196] lo speed is unknown, defaulting to 1000 [ 85.242180][ T5198] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 85.242291][ T5193] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.292599][ T5198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 85.310023][ T5201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.490739][ T5210] hub 9-0:1.0: USB hub found [ 85.508505][ T5210] hub 9-0:1.0: 8 ports detected [ 85.572849][ T5193] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.534: corrupted xattr block 19: overlapping e_value [ 85.608042][ T5213] loop1: detected capacity change from 0 to 1024 [ 85.614674][ T5193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 85.636541][ T5193] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.534: corrupted xattr block 19: overlapping e_value [ 85.713525][ T5215] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.534: corrupted xattr block 19: overlapping e_value [ 85.745521][ T5219] loop0: detected capacity change from 0 to 1024 [ 85.760754][ T5193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 85.770318][ T5217] loop4: detected capacity change from 0 to 1024 [ 85.891036][ T5193] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.534: corrupted xattr block 19: overlapping e_value [ 85.934057][ T5219] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.543: Allocating blocks 385-513 which overlap fs metadata [ 85.954089][ T5213] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.541: Allocating blocks 385-513 which overlap fs metadata [ 85.954469][ T5215] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 85.986028][ T5228] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.987723][ T5224] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.534: corrupted xattr block 19: overlapping e_value [ 86.007435][ T5218] EXT4-fs (loop0): pa ffff8881054e94d0: logic 16, phys. 129, len 24 [ 86.009578][ T5228] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 86.017080][ T5218] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 86.036608][ T5224] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.534: corrupted xattr block 19: overlapping e_value [ 86.036763][ T5212] EXT4-fs (loop1): pa ffff8881054e9540: logic 16, phys. 129, len 24 [ 86.058362][ T5212] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 86.122098][ T5224] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 86.133118][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 86.184836][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 86.197017][ T5237] loop2: detected capacity change from 0 to 512 [ 86.206350][ T5237] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.220780][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 86.244668][ T5237] EXT4-fs (loop2): 1 truncate cleaned up [ 86.257178][ T5239] loop4: detected capacity change from 0 to 512 [ 86.278604][ T5244] pimreg: entered allmulticast mode [ 86.325371][ T5239] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.392792][ T5239] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.548: corrupted in-inode xattr: overlapping e_value [ 86.418295][ T5239] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.548: couldn't read orphan inode 15 (err -117) [ 86.418987][ T5251] loop2: detected capacity change from 0 to 1024 [ 86.535481][ T5251] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.552: Allocating blocks 449-513 which overlap fs metadata [ 86.582717][ T5250] EXT4-fs (loop2): pa ffff8881054e95b0: logic 48, phys. 177, len 21 [ 86.590848][ T5250] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 86.629512][ T5259] netlink: 'syz.0.554': attribute type 21 has an invalid length. [ 86.640178][ T5259] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 86.705717][ T5259] siw: device registration error -23 [ 86.710725][ T5263] loop4: detected capacity change from 0 to 1024 [ 86.803176][ T5263] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.556: Allocating blocks 449-513 which overlap fs metadata [ 86.823303][ T5262] EXT4-fs (loop4): pa ffff8881054e94d0: logic 48, phys. 177, len 21 [ 86.831508][ T5262] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 86.850868][ T5273] loop0: detected capacity change from 0 to 1024 [ 86.892263][ T5273] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.559: Allocating blocks 449-513 which overlap fs metadata [ 86.946282][ T5277] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.953824][ T5272] EXT4-fs (loop0): pa ffff888107257c40: logic 48, phys. 177, len 21 [ 86.963601][ T5272] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 86.971048][ T5277] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 87.183989][ T3385] hid_parser_main: 48 callbacks suppressed [ 87.184011][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 87.197370][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 87.204936][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 87.854265][ T5290] lo speed is unknown, defaulting to 1000 [ 87.907178][ T5291] lo speed is unknown, defaulting to 1000 [ 88.174737][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.182241][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.189662][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.197206][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.204684][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.212210][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.219618][ T3385] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.223930][ T5285] loop3: detected capacity change from 0 to 512 [ 88.250744][ T5299] __nla_validate_parse: 3 callbacks suppressed [ 88.250760][ T5299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'. [ 88.276717][ T5301] loop4: detected capacity change from 0 to 512 [ 88.283606][ T3385] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 88.289194][ T5285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.310400][ T5303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5303 comm=syz.2.569 [ 88.351011][ T5304] fido_id[5304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.353513][ T5285] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.564: corrupted in-inode xattr: overlapping e_value [ 88.387313][ T5285] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.564: couldn't read orphan inode 15 (err -117) [ 88.413959][ T5301] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.421999][ T5301] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 88.437535][ T5301] System zones: 0-1, 15-15, 18-18, 34-34 [ 88.443853][ T5301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.450340][ T5301] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.465078][ T5301] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 88.474807][ T5316] loop0: detected capacity change from 0 to 512 [ 88.487196][ T5301] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.568: bg 0: block 40: padding at end of block bitmap is not set [ 88.502444][ T5301] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 88.520969][ T5301] EXT4-fs (loop4): 1 truncate cleaned up [ 88.542049][ T5301] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.550030][ T5301] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 88.564642][ T5316] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.582359][ T5301] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.568: bad symlink. [ 88.582840][ T5316] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.573: corrupted inode contents [ 88.610838][ T5316] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.573: mark_inode_dirty error [ 88.620784][ T5301] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.568: bad symlink. [ 88.635012][ T5316] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.573: corrupted inode contents [ 88.648388][ T5316] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.573: mark_inode_dirty error [ 88.677616][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 88.718458][ T5331] loop4: detected capacity change from 0 to 128 [ 88.729234][ T5333] loop0: detected capacity change from 0 to 128 [ 88.742504][ T5331] EXT4-fs: inline encryption not supported [ 88.758374][ T5333] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.787845][ T5338] loop2: detected capacity change from 0 to 128 [ 88.798072][ T5331] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.864143][ T5345] netlink: 'syz.0.583': attribute type 21 has an invalid length. [ 88.872172][ T5345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.583'. [ 88.881367][ T5345] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 88.893010][ T5345] siw: device registration error -23 [ 88.912834][ T5347] loop4: detected capacity change from 0 to 512 [ 88.923590][ T5347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.943779][ T5349] loop0: detected capacity change from 0 to 512 [ 88.949386][ T5347] EXT4-fs (loop4): 1 truncate cleaned up [ 88.972416][ T5349] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.991067][ T5349] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.585: corrupted inode contents [ 89.010122][ T5349] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.585: mark_inode_dirty error [ 89.022346][ T5349] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.585: corrupted inode contents [ 89.034275][ T5349] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.585: mark_inode_dirty error [ 89.099349][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 89.108707][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 89.217187][ T5363] loop4: detected capacity change from 0 to 1024 [ 89.336552][ T5371] loop0: detected capacity change from 0 to 128 [ 89.389412][ T5375] netlink: 'syz.3.595': attribute type 21 has an invalid length. [ 89.397701][ T5375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.595'. [ 89.406776][ T5375] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 89.415035][ T5377] loop1: detected capacity change from 0 to 128 [ 89.418988][ T5375] siw: device registration error -23 [ 89.430213][ T5377] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.447781][ T1041] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 89.489177][ T5381] fido_id[5381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.517607][ T5383] loop3: detected capacity change from 0 to 1024 [ 89.553087][ T5385] hub 9-0:1.0: USB hub found [ 89.560451][ T5385] hub 9-0:1.0: 8 ports detected [ 89.593462][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 89.603068][ T5389] loop1: detected capacity change from 0 to 1024 [ 89.605176][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 89.666642][ T5397] netlink: 96 bytes leftover after parsing attributes in process `syz.1.603'. [ 89.738627][ T29] kauditd_printk_skb: 718 callbacks suppressed [ 89.738656][ T29] audit: type=1326 audit(1756669028.807:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.770687][ T29] audit: type=1326 audit(1756669028.807:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.794289][ T29] audit: type=1326 audit(1756669028.807:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.818125][ T29] audit: type=1326 audit(1756669028.807:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.818735][ T5400] hub 9-0:1.0: USB hub found [ 89.841803][ T29] audit: type=1326 audit(1756669028.807:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.841841][ T29] audit: type=1326 audit(1756669028.807:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.841869][ T29] audit: type=1326 audit(1756669028.807:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.916441][ T29] audit: type=1326 audit(1756669028.807:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.939797][ T29] audit: type=1326 audit(1756669028.807:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.963224][ T29] audit: type=1326 audit(1756669028.807:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48cd5ebe9 code=0x7ffc0000 [ 89.993997][ T5400] hub 9-0:1.0: 8 ports detected [ 90.225889][ T3400] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 90.285517][ T5414] fido_id[5414]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.339832][ T5415] lo speed is unknown, defaulting to 1000 [ 90.693043][ T5421] loop3: detected capacity change from 0 to 1024 [ 90.805491][ T5427] loop2: detected capacity change from 0 to 128 [ 90.812103][ T5425] loop3: detected capacity change from 0 to 512 [ 90.829260][ T5427] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.869206][ T5425] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.920399][ T5425] EXT4-fs (loop3): 1 truncate cleaned up [ 91.018882][ T5434] netlink: 96 bytes leftover after parsing attributes in process `syz.4.615'. [ 91.094319][ T5438] loop2: detected capacity change from 0 to 512 [ 91.114479][ T5438] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.132869][ T5438] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.616: invalid indirect mapped block 4294967295 (level 0) [ 91.147913][ T5438] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.616: invalid indirect mapped block 4294967295 (level 1) [ 91.175274][ T5438] EXT4-fs (loop2): 1 orphan inode deleted [ 91.181105][ T5438] EXT4-fs (loop2): 1 truncate cleaned up [ 91.199031][ T5443] hub 9-0:1.0: USB hub found [ 91.203752][ T5443] hub 9-0:1.0: 8 ports detected [ 91.313341][ T5447] loop4: detected capacity change from 0 to 1024 [ 91.327640][ T5450] loop2: detected capacity change from 0 to 1024 [ 91.361391][ T5447] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.622: Allocating blocks 385-513 which overlap fs metadata [ 91.396608][ T5447] EXT4-fs (loop4): pa ffff8881054e95b0: logic 16, phys. 129, len 24 [ 91.404840][ T5447] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 91.496678][ T5462] loop2: detected capacity change from 0 to 1024 [ 91.507481][ T5460] loop0: detected capacity change from 0 to 512 [ 91.515170][ T5460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.543538][ T5460] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.570088][ T5460] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.625: corrupted xattr block 19: overlapping e_value [ 91.603961][ T5460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 91.609210][ T5471] pimreg: entered allmulticast mode [ 91.627296][ T5471] pimreg: left allmulticast mode [ 91.633463][ T5460] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.625: corrupted xattr block 19: overlapping e_value [ 91.633557][ T5472] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.625: corrupted xattr block 19: overlapping e_value [ 91.649593][ T5460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 91.669119][ T5472] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 91.669968][ T5460] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.625: corrupted xattr block 19: overlapping e_value [ 91.693772][ T5476] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.625: corrupted xattr block 19: overlapping e_value [ 91.707910][ T5476] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.625: corrupted xattr block 19: overlapping e_value [ 91.722226][ T5476] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 91.730950][ T5307] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 91.797799][ T5479] loop1: detected capacity change from 0 to 512 [ 91.828144][ T5479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.830136][ T5485] loop0: detected capacity change from 0 to 512 [ 91.843913][ T5485] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.856536][ T5483] hub 9-0:1.0: USB hub found [ 91.856660][ T5479] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.862625][ T5483] hub 9-0:1.0: 8 ports detected [ 91.876267][ T5479] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.630: corrupted xattr block 19: overlapping e_value [ 91.890801][ T5479] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 91.898728][ T5485] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.633: invalid indirect mapped block 4294967295 (level 0) [ 91.899943][ T5479] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.630: corrupted xattr block 19: overlapping e_value [ 91.915613][ T5485] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.633: invalid indirect mapped block 4294967295 (level 1) [ 91.928106][ T5479] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 91.942073][ T5490] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.630: corrupted xattr block 19: overlapping e_value [ 91.952579][ T5485] EXT4-fs (loop0): 1 orphan inode deleted [ 91.965935][ T5479] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.630: corrupted xattr block 19: overlapping e_value [ 91.969994][ T5485] EXT4-fs (loop0): 1 truncate cleaned up [ 91.973364][ T5490] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 92.002774][ T5490] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.630: corrupted xattr block 19: overlapping e_value [ 92.016854][ T5490] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.630: corrupted xattr block 19: overlapping e_value [ 92.030944][ T5490] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 92.041339][ T5490] EXT4-fs error (device loop1): ext4_get_inode_usage:884: inode #15: comm syz.1.630: corrupted xattr block 19: overlapping e_value [ 92.058410][ T5492] loop0: detected capacity change from 0 to 512 [ 92.075909][ T5492] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.083922][ T5492] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 92.099523][ T5492] System zones: 0-1, 15-15, 18-18, 34-34 [ 92.105528][ T5492] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.112199][ T5492] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 92.126966][ T5492] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 92.134475][ T5492] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.634: bg 0: block 40: padding at end of block bitmap is not set [ 92.148980][ T5492] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 92.158318][ T5492] EXT4-fs (loop0): 1 truncate cleaned up [ 92.179066][ T5492] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.187224][ T5492] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 92.211509][ T5492] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.634: bad symlink. [ 92.225747][ T5501] loop3: detected capacity change from 0 to 512 [ 92.225759][ T5492] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.634: bad symlink. [ 92.243292][ T5498] loop1: detected capacity change from 0 to 1024 [ 92.244433][ T5502] loop4: detected capacity change from 0 to 512 [ 92.273676][ T5502] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.292057][ T5501] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.315257][ T5501] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.637: corrupted inode contents [ 92.328321][ T5502] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.638: corrupted in-inode xattr: overlapping e_value [ 92.330269][ T5501] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.637: mark_inode_dirty error [ 92.343824][ T5502] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.638: couldn't read orphan inode 15 (err -117) [ 92.370087][ T5501] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.637: corrupted inode contents [ 92.383170][ T5501] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.637: mark_inode_dirty error [ 92.409358][ T5512] loop0: detected capacity change from 0 to 1024 [ 92.526203][ T5527] loop3: detected capacity change from 0 to 128 [ 92.535759][ T5525] loop1: detected capacity change from 0 to 164 [ 92.546601][ T5524] pimreg: entered allmulticast mode [ 92.567342][ T5525] syz.1.642: attempt to access beyond end of device [ 92.567342][ T5525] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 92.584422][ T5528] pimreg: left allmulticast mode [ 92.606531][ T5530] loop4: detected capacity change from 0 to 512 [ 92.614592][ T5525] syz.1.642: attempt to access beyond end of device [ 92.614592][ T5525] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 92.634285][ T5530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.683811][ T5530] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.697158][ T5530] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.646: corrupted xattr block 19: overlapping e_value [ 92.712342][ T5530] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 92.721584][ T5530] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.646: corrupted xattr block 19: overlapping e_value [ 92.751829][ T5530] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 92.762949][ T5539] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.646: corrupted xattr block 19: overlapping e_value [ 92.777762][ T5530] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.646: corrupted xattr block 19: overlapping e_value [ 92.783379][ T5539] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 92.824771][ T5540] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.646: corrupted xattr block 19: overlapping e_value [ 92.839128][ T5540] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.646: corrupted xattr block 19: overlapping e_value [ 92.868127][ T5541] lo speed is unknown, defaulting to 1000 [ 92.935532][ T5540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 93.149489][ T5548] loop4: detected capacity change from 0 to 128 [ 93.197016][ T5548] EXT4-fs: inline encryption not supported [ 93.210076][ T5548] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.412311][ T5561] __nla_validate_parse: 3 callbacks suppressed [ 93.412366][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 93.427453][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 93.528879][ T5567] loop4: detected capacity change from 0 to 512 [ 93.537279][ T5567] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.600661][ T5570] lo speed is unknown, defaulting to 1000 [ 93.669973][ T5569] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.688207][ T5569] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 93.698032][ T5567] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.657: corrupted in-inode xattr: overlapping e_value [ 93.726082][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 93.736489][ T5567] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.657: couldn't read orphan inode 15 (err -117) [ 93.845079][ T5574] loop2: detected capacity change from 0 to 512 [ 93.904962][ T5574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.942649][ T5574] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.972088][ T5574] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.659: corrupted xattr block 19: overlapping e_value [ 93.990045][ T5574] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 93.999857][ T5574] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.659: corrupted xattr block 19: overlapping e_value [ 94.022303][ T5584] hub 9-0:1.0: USB hub found [ 94.027114][ T5584] hub 9-0:1.0: 8 ports detected [ 94.030289][ T5586] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.659: corrupted xattr block 19: overlapping e_value [ 94.047548][ T5574] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 94.051340][ T5586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 94.064597][ T5574] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.659: corrupted xattr block 19: overlapping e_value [ 94.079599][ T5586] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.659: corrupted xattr block 19: overlapping e_value [ 94.095129][ T5586] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.659: corrupted xattr block 19: overlapping e_value [ 94.111001][ T5586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 94.121623][ T5586] EXT4-fs error (device loop2): ext4_get_inode_usage:884: inode #15: comm syz.2.659: corrupted xattr block 19: overlapping e_value [ 94.300750][ T5595] lo speed is unknown, defaulting to 1000 [ 94.361567][ T5595] atomic_op ffff88811aa28d28 conn xmit_atomic 0000000000000000 [ 94.388627][ T5593] loop4: detected capacity change from 0 to 128 [ 94.417763][ T5593] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.647087][ T5603] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.685414][ T5603] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 94.699304][ T5606] loop2: detected capacity change from 0 to 512 [ 94.710597][ T5606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.730162][ T5606] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.666: corrupted in-inode xattr: overlapping e_value [ 94.744198][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 94.744216][ T29] audit: type=1326 audit(1756669034.794:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.744258][ T5609] loop0: detected capacity change from 0 to 1024 [ 94.750428][ T29] audit: type=1326 audit(1756669034.794:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.807564][ T5606] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.666: couldn't read orphan inode 15 (err -117) [ 94.819523][ T29] audit: type=1326 audit(1756669034.884:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.846125][ T29] audit: type=1326 audit(1756669034.884:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.869569][ T29] audit: type=1326 audit(1756669034.884:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.892971][ T29] audit: type=1326 audit(1756669034.884:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.916352][ T29] audit: type=1326 audit(1756669034.884:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.925329][ T5612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 94.939947][ T29] audit: type=1326 audit(1756669034.884:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.939984][ T29] audit: type=1326 audit(1756669034.884:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 94.978998][ T5609] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.671: Allocating blocks 385-513 which overlap fs metadata [ 94.995854][ T29] audit: type=1326 audit(1756669034.884:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe48233ebe9 code=0x7ffc0000 [ 95.015899][ T5609] EXT4-fs (loop0): pa ffff8881054e95b0: logic 16, phys. 129, len 24 [ 95.040874][ T5609] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 95.084526][ T5618] loop3: detected capacity change from 0 to 512 [ 95.103043][ T5618] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.120251][ T5618] EXT4-fs (loop3): 1 truncate cleaned up [ 95.176616][ T5625] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.186104][ T5625] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 95.240721][ T5630] loop2: detected capacity change from 0 to 512 [ 95.270140][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'. [ 95.271769][ T5635] netlink: 'syz.1.679': attribute type 21 has an invalid length. [ 95.287522][ T5630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.298530][ T5635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.679'. [ 95.307589][ T5635] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 95.323240][ T5630] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.326762][ T5635] siw: device registration error -23 [ 95.336817][ T5630] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.677: corrupted xattr block 19: overlapping e_value [ 95.354375][ T5630] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.356466][ T5639] loop3: detected capacity change from 0 to 512 [ 95.370036][ T5630] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.677: corrupted xattr block 19: overlapping e_value [ 95.385448][ T5630] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.394817][ T5630] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.677: corrupted xattr block 19: overlapping e_value [ 95.418692][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 95.418781][ T5646] loop0: detected capacity change from 0 to 128 [ 95.427604][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 95.427919][ T5639] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.438737][ T5640] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.677: corrupted xattr block 19: overlapping e_value [ 95.442722][ T5639] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 95.467690][ T5645] bridge2: entered promiscuous mode [ 95.477586][ T5645] bridge2: entered allmulticast mode [ 95.483460][ T5639] System zones: 0-1, 15-15, 18-18, 34-34 [ 95.487338][ T5646] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.489361][ T5639] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.527516][ T5639] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 95.540798][ T5640] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.542281][ T5639] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 95.580140][ T5648] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.677: corrupted xattr block 19: overlapping e_value [ 95.597213][ T5650] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.607584][ T5650] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 95.616015][ T5648] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.677: corrupted xattr block 19: overlapping e_value [ 95.635676][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 95.651086][ T5639] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.680: bg 0: block 40: padding at end of block bitmap is not set [ 95.667047][ T5648] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.703474][ T5658] loop0: detected capacity change from 0 to 1024 [ 95.705539][ T5656] loop4: detected capacity change from 0 to 1024 [ 95.732940][ T5639] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 95.742653][ T5639] EXT4-fs (loop3): 1 truncate cleaned up [ 95.778730][ T5658] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.687: Allocating blocks 385-513 which overlap fs metadata [ 95.778775][ T5639] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.778789][ T5639] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 95.794817][ T5657] EXT4-fs (loop0): pa ffff8881054e95b0: logic 16, phys. 129, len 24 [ 95.816655][ T5657] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 95.841337][ T5667] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.680: bad symlink. [ 95.859253][ T5672] loop1: detected capacity change from 0 to 128 [ 95.866537][ T5672] EXT4-fs: inline encryption not supported [ 95.874339][ T5667] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.680: bad symlink. [ 95.915128][ T5672] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.953892][ T5679] loop0: detected capacity change from 0 to 164 [ 95.959702][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 95.975708][ T5682] loop4: detected capacity change from 0 to 128 [ 96.001946][ T5682] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.064095][ T5685] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.069035][ T5679] syz.0.693: attempt to access beyond end of device [ 96.069035][ T5679] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 96.087524][ T5685] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 96.101657][ T5679] syz.0.693: attempt to access beyond end of device [ 96.101657][ T5679] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 96.121754][ T5687] bridge2: entered promiscuous mode [ 96.127097][ T5687] bridge2: entered allmulticast mode [ 96.249190][ T5703] loop2: detected capacity change from 0 to 1024 [ 96.278858][ T5707] loop1: detected capacity change from 0 to 1024 [ 96.338314][ T5707] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.705: Allocating blocks 385-513 which overlap fs metadata [ 96.358446][ T5705] EXT4-fs (loop1): pa ffff888107257cb0: logic 16, phys. 129, len 24 [ 96.366523][ T5705] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 96.403421][ T5692] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.700: Allocating blocks 449-513 which overlap fs metadata [ 96.434067][ T5691] EXT4-fs (loop2): pa ffff888107257cb0: logic 48, phys. 177, len 21 [ 96.442192][ T5691] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 96.489041][ T5714] loop3: detected capacity change from 0 to 128 [ 96.519647][ T5714] EXT4-fs: inline encryption not supported [ 96.531782][ T5714] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.589287][ T5719] netlink: 'syz.2.708': attribute type 21 has an invalid length. [ 96.601914][ T5719] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 96.633971][ T5721] loop3: detected capacity change from 0 to 128 [ 96.653495][ T5721] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.696525][ T5724] loop1: detected capacity change from 0 to 1024 [ 96.729469][ T5726] loop2: detected capacity change from 0 to 512 [ 96.766203][ T5724] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.710: Allocating blocks 449-513 which overlap fs metadata [ 96.793397][ T5726] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 96.801433][ T5726] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 96.810747][ T5726] System zones: 0-1, 15-15, 18-18, 34-34 [ 96.813444][ T5723] EXT4-fs (loop1): pa ffff888107257bd0: logic 48, phys. 177, len 21 [ 96.816978][ T5726] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.824807][ T5723] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 96.831821][ T5726] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 96.855726][ T5726] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 96.865689][ T5726] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.711: bg 0: block 40: padding at end of block bitmap is not set [ 96.881763][ T5726] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 96.931630][ T5736] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.943506][ T5726] EXT4-fs (loop2): 1 truncate cleaned up [ 96.951613][ T5736] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 96.968020][ T5726] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 96.976080][ T5726] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 97.026694][ T5726] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.711: bad symlink. [ 97.032653][ T5740] loop1: detected capacity change from 0 to 1024 [ 97.072571][ T5726] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.711: bad symlink. [ 97.143998][ T5744] hub 9-0:1.0: USB hub found [ 97.148891][ T5744] hub 9-0:1.0: 8 ports detected [ 97.184528][ T5754] netlink: 'syz.2.721': attribute type 21 has an invalid length. [ 97.199453][ T5754] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 97.313308][ T5767] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.334275][ T5767] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 97.355094][ T5769] loop0: detected capacity change from 0 to 512 [ 97.363059][ T5773] netlink: 'syz.4.730': attribute type 21 has an invalid length. [ 97.380109][ T5773] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 97.412674][ T5769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.419151][ T5773] siw: device registration error -23 [ 97.444172][ T5778] loop2: detected capacity change from 0 to 512 [ 97.458970][ T5769] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.729: corrupted in-inode xattr: overlapping e_value [ 97.477408][ T5784] netlink: 'syz.3.734': attribute type 21 has an invalid length. [ 97.488270][ T5769] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.729: couldn't read orphan inode 15 (err -117) [ 97.500792][ T5784] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 97.505290][ T5785] loop1: detected capacity change from 0 to 1024 [ 97.511771][ T5784] siw: device registration error -23 [ 97.524456][ T5781] hub 9-0:1.0: USB hub found [ 97.531958][ T5781] hub 9-0:1.0: 8 ports detected [ 97.545134][ T5778] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.553124][ T5778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 97.571976][ T5778] System zones: 0-1, 15-15, 18-18, 34-34 [ 97.577989][ T5778] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.584620][ T5778] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 97.599226][ T5778] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 97.628025][ T5778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.731: bg 0: block 40: padding at end of block bitmap is not set [ 97.645484][ T5793] loop3: detected capacity change from 0 to 1024 [ 97.650774][ T5778] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 97.661810][ T5778] EXT4-fs (loop2): 1 truncate cleaned up [ 97.695380][ T5778] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.703414][ T5778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 97.717435][ T5778] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.731: bad symlink. [ 97.752982][ T5778] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.731: bad symlink. [ 97.841047][ T5789] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.735: Allocating blocks 449-513 which overlap fs metadata [ 97.877641][ T5787] EXT4-fs (loop3): pa ffff888107257d20: logic 48, phys. 177, len 21 [ 97.878854][ T5814] loop2: detected capacity change from 0 to 1024 [ 97.885876][ T5787] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 97.935932][ T5819] siw: device registration error -23 [ 97.948590][ T3477] ================================================================== [ 97.956724][ T3477] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 97.963445][ T3477] [ 97.965781][ T3477] write to 0xffff8881072e1e50 of 8 bytes by task 2994 on cpu 0: [ 97.973416][ T3477] __dentry_kill+0x142/0x4b0 [ 97.978024][ T3477] dput+0x5e/0xd0 [ 97.981675][ T3477] step_into+0x5b2/0x820 [ 97.985932][ T3477] walk_component+0x162/0x220 [ 97.990636][ T3477] path_lookupat+0xfe/0x2a0 [ 97.995162][ T3477] filename_lookup+0x2d7/0x340 [ 97.999949][ T3477] do_readlinkat+0x7d/0x320 [ 98.004564][ T3477] __x64_sys_readlink+0x47/0x60 [ 98.009439][ T3477] x64_sys_call+0x28da/0x2ff0 [ 98.014139][ T3477] do_syscall_64+0xd2/0x200 [ 98.018666][ T3477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.024567][ T3477] [ 98.026893][ T3477] read to 0xffff8881072e1e50 of 8 bytes by task 3477 on cpu 1: [ 98.034439][ T3477] fast_dput+0x5f/0x2c0 [ 98.038604][ T3477] dput+0x24/0xd0 [ 98.042260][ T3477] do_unlinkat+0x259/0x480 [ 98.046694][ T3477] __x64_sys_unlink+0x2e/0x40 [ 98.051384][ T3477] x64_sys_call+0x2dc0/0x2ff0 [ 98.056073][ T3477] do_syscall_64+0xd2/0x200 [ 98.060607][ T3477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.066509][ T3477] [ 98.068840][ T3477] value changed: 0xffff888237460a38 -> 0x0000000000000000 [ 98.075953][ T3477] [ 98.078282][ T3477] Reported by Kernel Concurrency Sanitizer on: [ 98.084437][ T3477] CPU: 1 UID: 0 PID: 3477 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.093723][ T3477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.103783][ T3477] ================================================================== [ 98.147972][ T5814] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.743: Allocating blocks 385-513 which overlap fs metadata [ 98.165453][ T5814] EXT4-fs (loop2): pa ffff888107257cb0: logic 16, phys. 129, len 24 [ 98.173596][ T5814] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8