last executing test programs: 1m4.885710014s ago: executing program 1 (id=10): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3e) 1m4.640164008s ago: executing program 1 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 1m4.446306871s ago: executing program 1 (id=19): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) syz_open_pts(r0, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_pts(r0, 0x121500) ppoll(&(0x7f0000000000)=[{r1, 0x3040}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) 1m3.594724975s ago: executing program 1 (id=35): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 1m3.477199697s ago: executing program 1 (id=36): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 1m1.823341833s ago: executing program 1 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0)=r2, 0x12) 1m1.823081543s ago: executing program 32 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0)=r2, 0x12) 39.288571693s ago: executing program 2 (id=518): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 39.006572198s ago: executing program 2 (id=523): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 38.015360374s ago: executing program 2 (id=534): r0 = eventfd2(0xce77, 0x800) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 37.878971996s ago: executing program 2 (id=535): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 37.734009688s ago: executing program 2 (id=536): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 37.323876394s ago: executing program 4 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x800, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) 37.288376045s ago: executing program 4 (id=543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 37.083213419s ago: executing program 2 (id=545): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000001f80)={[{@nodiscard}], [{@uid_eq}, {@subj_role={'subj_role', 0x3d, '\x00\x00\xbf\x8dD\xce\xf0\x9f\x80\x9f\xe1\xc1\xc9\xc6\x7f\xa9\x81\x84\xe1?\x96t\x87J\xbf\x90+\xd2\f\r\x86\xb8o\'K|\xb2\x8b\x0e\x87\xaf\xf5\xc0\xb4\x10\xefE\xcf@Ga\xd9\xf0\xb5z\"\x13\x8ax\b\x99~2 \xb8Pk\xc5u\xd1\xcd-4\xc66\xa7\xff\x16\xca\a\xd36A\x0f\xd6L\xf4\xb6.\b*\xbb=\xf2\xee=\xd9\x81\x02\xac\x86\xf9H\x94{\xa2s\xd7\x05\xcc\x98`\xe61\x18#\x19\xf4\xdbX\xd4ZQ#\xd6\xdc(\x9d\xea)\x913[\x99\xf5 \xce3\x97\xa0\xb1J\x01\xe4\x8e\xf5\x8c\xc6\xcf\x9aM\xf9-\x87\xc6\x19P\x84\x175\xfd\xb4\xba\x1e[\t\x1f#\xb1a\xdf9\xa0\x14\x1cn`K \xa65='}}, {@context={'context', 0x3d, 'system_u'}}]}, 0x4, 0x578, &(0x7f0000002d00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) 37.083044599s ago: executing program 33 (id=545): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000001f80)={[{@nodiscard}], [{@uid_eq}, {@subj_role={'subj_role', 0x3d, '\x00\x00\xbf\x8dD\xce\xf0\x9f\x80\x9f\xe1\xc1\xc9\xc6\x7f\xa9\x81\x84\xe1?\x96t\x87J\xbf\x90+\xd2\f\r\x86\xb8o\'K|\xb2\x8b\x0e\x87\xaf\xf5\xc0\xb4\x10\xefE\xcf@Ga\xd9\xf0\xb5z\"\x13\x8ax\b\x99~2 \xb8Pk\xc5u\xd1\xcd-4\xc66\xa7\xff\x16\xca\a\xd36A\x0f\xd6L\xf4\xb6.\b*\xbb=\xf2\xee=\xd9\x81\x02\xac\x86\xf9H\x94{\xa2s\xd7\x05\xcc\x98`\xe61\x18#\x19\xf4\xdbX\xd4ZQ#\xd6\xdc(\x9d\xea)\x913[\x99\xf5 \xce3\x97\xa0\xb1J\x01\xe4\x8e\xf5\x8c\xc6\xcf\x9aM\xf9-\x87\xc6\x19P\x84\x175\xfd\xb4\xba\x1e[\t\x1f#\xb1a\xdf9\xa0\x14\x1cn`K \xa65='}}, {@context={'context', 0x3d, 'system_u'}}]}, 0x4, 0x578, &(0x7f0000002d00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) 37.080202898s ago: executing program 4 (id=547): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000003680)="$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") r0 = open(&(0x7f0000000640)='./file2\x00', 0x4000, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 36.695801925s ago: executing program 4 (id=549): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 36.382190189s ago: executing program 4 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000180)=[{0x0, 0x8000, 0x800}], 0x1) 35.983076566s ago: executing program 4 (id=553): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) 35.982776816s ago: executing program 34 (id=553): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) 4.224191693s ago: executing program 6 (id=1128): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100d93, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) r2 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x10}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r4) close(r2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x9, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000002000000000000000018090049238e27a899bd54b8d44901186536b710de32a36a88732e4a484aa49f938ba9ba95539db556f7392b32ec3e32f84277ec31e86cbd199e9acbf722ff5b7a61a86b96f9038c0d860c1e3acf9ebdc8d3fcfda3e801000000583671d9409a26082e5892c5fb331174f0cf3da27a6a8b9d77854d4ae92f5927d676c2a8cd81b75f6023fde320670b3311f68698de3f7b1c1df28886ac8b386c4c31382e1b5b81779ff4c3d013df8245867c4d37e53080ae03fadd", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000079100800000000001ea0000000000000950000000000000091d165fd351587042bbc9e11cc39052a2c6672bf4e9f51e3d50285bbc76e33431c4826e889c795956d5e1e43d072bfc5c938e02b80c339a3787e8c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000042000010027bd7000fedbdf250a1020ab090000030400000014000200fe80000000000000000000000000009b9205ee5a479cb95bca6fbaaee5598e597ad2607703c3a891c29bf09d7d78350cc85cc74b1fca84dae7b5b16c82b7a336d284bf799fb19adc8ec58a711ebf07f45d9d55412d4dbd2ea95bc88dd96f39f9e0a81cbaac0ba048f579521d958320a550cde73d689582aacf26e8d5630fe1a4a9e6555c96d228b5eb71e8cf0a51938379a6d0cd570a66fa60db1dd21f7c085eb5179683a9fdea2ea3db44f9eab4dd164a1b00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.17118575s ago: executing program 6 (id=1139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x50010, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000000bc0)="$eJzs3e9rJGcdAPDvbHbz4y6aKH1RhdbDFu6KXnLp2TaI9k4Q3xWU6usz5PZCuE32SDZtEw7N4R8giNiCb/SVbwT/AEHuTyiCYN+LFeXQq4JFtCMzO5vspTu3SS67q8nnA5N5duaZ+X6f2d3Z2ZlnMwGcWRci4npEjEXECxExU0yvFEPstoes3gcP7y5nQxJp+vpfk0iKaVm1JGIsKZY9Xyw22R49aqo92tzeub3UaNQ3isnzrbU785vbO5dX15ZW6iv19atXF15efGXxpcUrJ9LOrF2vfv1PP/nhL77x6m+++OYfbvzl0veyfKeL+Z12nLT2Nqll22JPNSI2BhFsBMaK9vwrbetdqzrstAAAKJEd4386Ij6fH//PxFifY7XxrnIy8OwAAACAk5Bem45/JxHpEdWOvAQAAAAwKpW8D2xSmSv6AkxHpTI31+7D+1ScqzSam60v3Gpurd9s95WdjVrl1mqjfiXvUzsREbUke7ywd0ah/fjFvG42JI/0Af7xzFQ+f2652bg5ihMeAAAAcAadP/D9/x8z7e//AAAAwCkzW4zPjTgPAAAAYHBmR50AAAAAMHDH+P4/Pog8AAAAgIH45muvZUPauf/1zTe2t24337h8s755e25ta3luublxZ26l2VxppBMRa/3W12g273wp1rfemm/VN1vzm9s7N9aaW+utG6uP3AIbAAAAGKJPfe7+e0lE7H55Kh+ic21/rGQBvxWAU6NyyHpp9uf9weYCDFfZxzxw+lUfP7usm+/EIHIBhqvWHiWjzgMYnX47gMmyGu8eK5yfDwEAwAhc/Mz999Lk49f/q/vnBoBT6rDX/4HTp+T6fzoz7ESAoSu9/t+nYwDw/6+mByCcef2v/5d4N591vX+ENO27LgAAYKCm8yGpzBXXAqej8mHaFrNRS26tNupXIuKTEfH7mdpE9nghXzLxowEAAAAAAAAAAAAAAAAAAAAAAAAAOKQ0TSI9huqxlgIAAABGIaLy56S4D/DFmeenD54fGE8+zG8F/FGapm/+9PW331pqtTYWsul/y6ePR0TrnWz6+ChOXwAAAABdOnf5z7+/v1gbcTYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFYfPLy73BmGGffB1yJitlf8akzm48moRcS5vydR7VouiYixE4i/ey8inu4VP8nSitkii4PxKxExlWfxxPErRbEs/jNpmvaMf/6Jo8PZdj/b/1zv9f6vxIV83Pv9X20P1540fmf/d75rH9yJ39n/je3F/+pe8GzP84lDxvjs73413/XwO/vFifb8au/9Xyd+UrL/fa5XsOrHJ3332zs7ZbmlP4+42Gl7GhFd8btjzbfW7sxvbu9cXl1bWqmv1NevXl14efGVxZcWr8zfWm3Ui7/7K3473Sv+6Jlff1QW/8GFiHMR6czDu8vjnZyKD5bZ9ugryV4q44/k9HxWqJWted9/9hfrrp2v9cG9iEvP7W3/9Ptdz//T+bjn9v/ZP9Nc/jmQzb9YfCYku+1yRPHyjYhnf/nbZ0vbf2+yKB39+b/Uv+m5F771gz8esioAMASb2zu3lxqN+sbAC++kaXq4ytlRaXmdtDga60xJInYP1skO4E64FVMRUTIrYicm96ZMFVs1Drvmp0pTfX8qYkjPzlEL145SOZ040ost2f0faOAZLoznL8iR7pYAAIAB2D/6H3UmAAAAAAAAAAAAAAAAAAAAcHYN4/+KHYy5O5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81n8DAAD//x3CzJ0=") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e22, 0x808e, @empty, 0xffffffb0}, @in={0x2, 0x4e21, @loopback}], 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r9, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) close(r0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000440)="8d57fcd1a80f321782b08a1e75c6cb3163e87a4842f0d93e158c61bbcec4c56e3aa912edf042b829646572e6a9432e400a5b7d284121e426b53190bf3ec944a3ba6d074ca3b523e6ee96b4bcfab765b05267b2fbde11a62d52fc6bfb054197119157722cbe6a734b188fc4b974e80c0caa6e55a85e69300520909156b167dceae38bdbd5cf7e64c9524ec2d687357ccac5b3a95a5f92e733296e90f9458b6fc035638d076c5c39a84f24f43f052e30820855bfd5", 0xb4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 2.876709365s ago: executing program 0 (id=1140): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100d93, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) r2 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x10}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r4) close(r2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x9, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000002000000000000000018090049238e27a899bd54b8d44901186536b710de32a36a88732e4a484aa49f938ba9ba95539db556f7392b32ec3e32f84277ec31e86cbd199e9acbf722ff5b7a61a86b96f9038c0d860c1e3acf9ebdc8d3fcfda3e801000000583671d9409a26082e5892c5fb331174f0cf3da27a6a8b9d77854d4ae92f5927d676c2a8cd81b75f6023fde320670b3311f68698de3f7b1c1df28886ac8b386c4c31382e1b5b81779ff4c3d013df8245867c4d37e53080ae03fadd", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000079100800000000001ea0000000000000950000000000000091d165fd351587042bbc9e11cc39052a2c6672bf4e9f51e3d50285bbc76e33431c4826e889c795956d5e1e43d072bfc5c938e02b80c339a3787e8c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000042000010027bd7000fedbdf250a1020ab090000030400000014000200fe80000000000000000000000000009b9205ee5a479cb95bca6fbaaee5598e597ad2607703c3a891c29bf09d7d78350cc85cc74b1fca84dae7b5b16c82b7a336d284bf799fb19adc8ec58a711ebf07f45d9d55412d4dbd2ea95bc88dd96f39f9e0a81cbaac0ba048f579521d958320a550cde73d689582aacf26e8d5630fe1a4a9e6555c96d228b5eb71e8cf0a51938379a6d0cd570a66fa60db1dd21f7c085eb5179683a9fdea2ea3db44f9eab4dd164a1b00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.689094547s ago: executing program 3 (id=1143): pipe2(&(0x7f0000000080), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_usbip_server_init(0x3) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 2.596843319s ago: executing program 0 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) 1.839264111s ago: executing program 5 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff48100180c120d04ca306000000020000760e1860b008d77e00000300", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r2) 1.838982551s ago: executing program 6 (id=1146): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet(r1, 0x0, 0x0, 0x2103, 0x0, 0x0) 1.838767001s ago: executing program 7 (id=1147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000003300)=""/4095, 0xfff}], 0x1) 1.833805511s ago: executing program 0 (id=1155): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x4085, 0x9, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0x64, 0x1, 0x5}]}}}}}) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x70, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 1.833176531s ago: executing program 3 (id=1148): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 1.795111472s ago: executing program 5 (id=1149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.783093872s ago: executing program 6 (id=1150): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$selinux_user(r2, &(0x7f0000000240)={'system_u:object_r:dhcpd_initrc_exec_t:s0', 0x20, 'unconfined_u\x00'}, 0x36) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) pause() 1.780486602s ago: executing program 7 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.701863523s ago: executing program 5 (id=1152): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.701645373s ago: executing program 3 (id=1153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100"], 0x18) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) 1.639778534s ago: executing program 7 (id=1154): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/205, 0xcd}, 0x9}], 0x1, 0x23, 0x0) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) getpid() setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.639230924s ago: executing program 5 (id=1165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x6) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000280)={0x0, 0x0, 0x1}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 1.638269824s ago: executing program 3 (id=1166): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0xa}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) shmdt(r7) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) 1.597062755s ago: executing program 0 (id=1156): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r3, r3, 0x0, 0xe0000000) 1.349039969s ago: executing program 5 (id=1157): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100d93, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) r2 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x10}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r4) close(r2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x9, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000002000000000000000018090049238e27a899bd54b8d44901186536b710de32a36a88732e4a484aa49f938ba9ba95539db556f7392b32ec3e32f84277ec31e86cbd199e9acbf722ff5b7a61a86b96f9038c0d860c1e3acf9ebdc8d3fcfda3e801000000583671d9409a26082e5892c5fb331174f0cf3da27a6a8b9d77854d4ae92f5927d676c2a8cd81b75f6023fde320670b3311f68698de3f7b1c1df28886ac8b386c4c31382e1b5b81779ff4c3d013df8245867c4d37e53080ae03fadd", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000079100800000000001ea0000000000000950000000000000091d165fd351587042bbc9e11cc39052a2c6672bf4e9f51e3d50285bbc76e33431c4826e889c795956d5e1e43d072bfc5c938e02b80c339a3787e8c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000042000010027bd7000fedbdf250a1020ab090000030400000014000200fe80000000000000000000000000009b9205ee5a479cb95bca6fbaaee5598e597ad2607703c3a891c29bf09d7d78350cc85cc74b1fca84dae7b5b16c82b7a336d284bf799fb19adc8ec58a711ebf07f45d9d55412d4dbd2ea95bc88dd96f39f9e0a81cbaac0ba048f579521d958320a550cde73d689582aacf26e8d5630fe1a4a9e6555c96d228b5eb71e8cf0a51938379a6d0cd570a66fa60db1dd21f7c085eb5179683a9fdea2ea3db44f9eab4dd164a1b00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.195204841s ago: executing program 0 (id=1158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10003}, 0x18) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000640)="a8", 0x1}], 0x1) 855.298697ms ago: executing program 6 (id=1159): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf9100000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0xa}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) shmdt(r6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) 772.813928ms ago: executing program 3 (id=1160): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r1, 0x0) 477.077943ms ago: executing program 5 (id=1161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 476.222523ms ago: executing program 3 (id=1173): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0xa}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) shmdt(r7) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) 281.201506ms ago: executing program 7 (id=1162): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) brk(0x20001000) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000280)={[{@utf8}, {@hide, 0x0}, {@utf8}, {@overriderock}, {@map_off}, {@map_normal, 0x41}, {@session={'session', 0x3d, 0x37}}, {@unhide}, {@unhide}, {@overriderock}, {@map_off}, {@map_normal}, {}]}, 0x2, 0x6b1, &(0x7f0000001100)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x38) 277.363146ms ago: executing program 0 (id=1163): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 213.813657ms ago: executing program 7 (id=1164): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) 105.261319ms ago: executing program 7 (id=1167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x50010, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000000bc0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e22, 0x808e, @empty, 0xffffffb0}, @in={0x2, 0x4e21, @loopback}], 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r9, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) close(r0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000440)="8d57fcd1a80f321782b08a1e75c6cb3163e87a4842f0d93e158c61bbcec4c56e3aa912edf042b829646572e6a9432e400a5b7d284121e426b53190bf3ec944a3ba6d074ca3b523e6ee96b4bcfab765b05267b2fbde11a62d52fc6bfb054197119157722cbe6a734b188fc4b974e80c0caa6e55a85e69300520909156b167dceae38bdbd5cf7e64c9524ec2d687357ccac5b3a95a5f92e733296e90f9458b6fc035638d076c5c39a84f24f43f052e30820855bfd5", 0xb4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 0s ago: executing program 6 (id=1168): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100d93, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) r2 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x10}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r4) close(r2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x9, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000002000000000000000018090049238e27a899bd54b8d44901186536b710de32a36a88732e4a484aa49f938ba9ba95539db556f7392b32ec3e32f84277ec31e86cbd199e9acbf722ff5b7a61a86b96f9038c0d860c1e3acf9ebdc8d3fcfda3e801000000583671d9409a26082e5892c5fb331174f0cf3da27a6a8b9d77854d4ae92f5927d676c2a8cd81b75f6023fde320670b3311f68698de3f7b1c1df28886ac8b386c4c31382e1b5b81779ff4c3d013df8245867c4d37e53080ae03fadd", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000079100800000000001ea0000000000000950000000000000091d165fd351587042bbc9e11cc39052a2c6672bf4e9f51e3d50285bbc76e33431c4826e889c795956d5e1e43d072bfc5c938e02b80c339a3787e8c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000042000010027bd7000fedbdf250a1020ab090000030400000014000200fe80000000000000000000000000009b9205ee5a479cb95bca6fbaaee5598e597ad2607703c3a891c29bf09d7d78350cc85cc74b1fca84dae7b5b16c82b7a336d284bf799fb19adc8ec58a711ebf07f45d9d55412d4dbd2ea95bc88dd96f39f9e0a81cbaac0ba048f579521d958320a550cde73d689582aacf26e8d5630fe1a4a9e6555c96d228b5eb71e8cf0a51938379a6d0cd570a66fa60db1dd21f7c085eb5179683a9fdea2ea3db44f9eab4dd164a1b00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): 000. [ 51.003436][ T4081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 51.406653][ T4103] loop3: detected capacity change from 0 to 512 [ 51.415088][ T4103] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.175: bad orphan inode 15 [ 51.425465][ T4103] ext4_test_bit(bit=14, block=5) = 0 [ 51.431261][ T4103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.445407][ T4103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.727814][ T4121] 0: renamed from pim6reg1 [ 51.856925][ T4134] loop5: detected capacity change from 0 to 128 [ 51.871176][ T4134] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 51.896967][ T4134] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.932459][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 51.932473][ T29] audit: type=1400 audit(1753199152.973:284): avc: denied { setattr } for pid=4133 comm="syz.5.189" path="/22/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.020594][ T4150] loop3: detected capacity change from 0 to 1024 [ 52.031735][ T4150] EXT4-fs: Ignoring removed orlov option [ 52.043802][ T29] audit: type=1400 audit(1753199153.093:285): avc: denied { create } for pid=4152 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.063400][ T29] audit: type=1400 audit(1753199153.093:286): avc: denied { connect } for pid=4152 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.082858][ T29] audit: type=1400 audit(1753199153.093:287): avc: denied { setopt } for pid=4152 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.102339][ T29] audit: type=1400 audit(1753199153.093:288): avc: denied { bind } for pid=4152 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.121830][ T29] audit: type=1400 audit(1753199153.103:289): avc: denied { write } for pid=4152 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.123233][ T4150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.185854][ T3622] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.242663][ T4160] loop4: detected capacity change from 0 to 128 [ 52.243657][ T4162] loop2: detected capacity change from 0 to 128 [ 52.276050][ T29] audit: type=1326 audit(1753199153.323:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.5.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 52.279029][ T4162] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.324151][ T29] audit: type=1326 audit(1753199153.323:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.5.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 52.336422][ T4160] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.347523][ T29] audit: type=1326 audit(1753199153.323:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.5.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 52.383083][ T29] audit: type=1326 audit(1753199153.323:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.5.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 52.401825][ T4162] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.433452][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.443857][ T4160] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.604999][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.008757][ T4231] smc: net device bond0 applied user defined pnetid SYZ0 [ 53.100075][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.150236][ T4242] veth1_macvtap: left promiscuous mode [ 53.158079][ T4242] macsec0: entered allmulticast mode [ 53.187312][ T4242] veth1_macvtap: entered promiscuous mode [ 53.193247][ T4242] veth1_macvtap: entered allmulticast mode [ 53.213575][ T4242] macsec0: entered promiscuous mode [ 53.248719][ T4244] loop4: detected capacity change from 0 to 8192 [ 53.258195][ T4244] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.626723][ T4272] loop2: detected capacity change from 0 to 1024 [ 53.657829][ T4272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.707675][ T4281] loop0: detected capacity change from 0 to 128 [ 53.734598][ T4281] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.748563][ T4281] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.796995][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.283639][ T4315] netlink: 68 bytes leftover after parsing attributes in process `syz.4.247'. [ 54.450907][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.653711][ T4342] SELinux: failed to load policy [ 54.876622][ T4361] loop3: detected capacity change from 0 to 1024 [ 54.877109][ T4360] loop4: detected capacity change from 0 to 2048 [ 54.890038][ T4360] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.899251][ T4361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.925953][ T4360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.942105][ T3386] Process accounting resumed [ 54.956497][ T3451] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 234: padding at end of block bitmap is not set [ 54.979270][ T3451] EXT4-fs (loop4): Remounting filesystem read-only [ 54.999808][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.392778][ T4390] loop0: detected capacity change from 0 to 512 [ 55.457275][ T4396] loop5: detected capacity change from 0 to 1024 [ 55.476888][ T4396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.489881][ T4396] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.513434][ T3622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.666717][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.675300][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.716677][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.170930][ T4417] loop4: detected capacity change from 0 to 128 [ 56.177838][ T4417] EXT4-fs: Ignoring removed nobh option [ 56.189371][ T4417] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.202882][ T4417] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.221574][ T4420] ALSA: seq fatal error: cannot create timer (-22) [ 56.250991][ T4422] capability: warning: `syz.2.289' uses deprecated v2 capabilities in a way that may be insecure [ 56.284523][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.369109][ T4431] pim6reg1: entered promiscuous mode [ 56.374594][ T4431] pim6reg1: entered allmulticast mode [ 56.548088][ T4448] loop4: detected capacity change from 0 to 164 [ 56.621657][ T4449] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 57.304874][ T4480] loop2: detected capacity change from 0 to 1024 [ 57.311549][ T4480] EXT4-fs: Ignoring removed nobh option [ 57.318641][ T4480] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.329691][ T4480] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.341384][ T4480] JBD2: no valid journal superblock found [ 57.347329][ T4480] EXT4-fs (loop2): Could not load journal inode [ 57.373667][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 57.373682][ T29] audit: type=1326 audit(1753201736.416:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4479 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.403371][ T29] audit: type=1326 audit(1753201736.416:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4479 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.430057][ T29] audit: type=1326 audit(1753201736.476:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4479 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.453550][ T29] audit: type=1326 audit(1753201736.476:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4479 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.477141][ T29] audit: type=1326 audit(1753201736.476:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4479 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.551967][ T4487] mmap: syz.5.317 (4487) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.577767][ T4496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 57.746046][ T29] audit: type=1326 audit(1753201736.796:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.830102][ T4511] loop2: detected capacity change from 0 to 128 [ 57.854217][ T29] audit: type=1326 audit(1753201736.796:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.877621][ T29] audit: type=1326 audit(1753201736.816:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.901202][ T29] audit: type=1326 audit(1753201736.816:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.924561][ T29] audit: type=1326 audit(1753201736.816:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae1c5e9a9 code=0x7ffc0000 [ 57.951684][ T4511] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 57.965707][ T4511] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.976570][ T4514] loop0: detected capacity change from 0 to 1024 [ 58.009335][ T4514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.033792][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.222434][ T4531] loop4: detected capacity change from 0 to 512 [ 58.685832][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.726681][ T4549] loop0: detected capacity change from 0 to 512 [ 58.746644][ T4549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.759566][ T4549] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.811703][ T4553] pim6reg1: entered promiscuous mode [ 58.817176][ T4553] pim6reg1: entered allmulticast mode [ 58.834286][ T145] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 58.849201][ T145] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28 [ 58.861790][ T145] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.861790][ T145] [ 58.871605][ T145] EXT4-fs (loop0): Total free blocks count 0 [ 58.877662][ T145] EXT4-fs (loop0): Free/Dirty block details [ 58.883730][ T145] EXT4-fs (loop0): free_blocks=65280 [ 58.889218][ T145] EXT4-fs (loop0): dirty_blocks=1025 [ 58.894674][ T145] EXT4-fs (loop0): Block reservation details [ 58.901043][ T145] EXT4-fs (loop0): i_reserved_data_blocks=1025 [ 58.915989][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.986115][ T4558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'. [ 59.275507][ T4583] loop4: detected capacity change from 0 to 1024 [ 59.286958][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.344630][ T4588] loop3: detected capacity change from 0 to 8192 [ 59.395668][ T4593] loop3: detected capacity change from 0 to 512 [ 59.445224][ T4595] loop5: detected capacity change from 0 to 1024 [ 59.452283][ T4595] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.463302][ T4595] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.473703][ T4595] JBD2: no valid journal superblock found [ 59.479562][ T4595] EXT4-fs (loop5): Could not load journal inode [ 59.490751][ T4595] 9pnet: p9_errstr2errno: server reported unknown error [ 59.801685][ T4603] loop0: detected capacity change from 0 to 512 [ 59.816013][ T4603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.829011][ T4603] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.872575][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.075535][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.145922][ T4613] tipc: Started in network mode [ 60.150987][ T4613] tipc: Node identity daed7e8d82f7, cluster identity 4711 [ 60.158359][ T4613] tipc: Enabled bearer , priority 0 [ 60.167143][ T4612] tipc: Resetting bearer [ 60.182346][ T4612] tipc: Disabling bearer [ 60.247025][ T4617] loop2: detected capacity change from 0 to 164 [ 60.252450][ T4619] loop3: detected capacity change from 0 to 512 [ 60.260083][ T4617] Unable to read rock-ridge attributes [ 60.268852][ T4617] Unable to read rock-ridge attributes [ 60.286133][ T4619] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.322600][ T4625] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.322600][ T4625] program syz.2.369 not setting count and/or reply_len properly [ 60.432382][ T4628] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.367: corrupted inode contents [ 60.448099][ T4639] loop5: detected capacity change from 0 to 128 [ 60.449391][ T4628] EXT4-fs (loop3): Remounting filesystem read-only [ 60.465970][ T4628] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 60.508481][ T4639] syz.5.374: attempt to access beyond end of device [ 60.508481][ T4639] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 60.522735][ T4641] loop2: detected capacity change from 0 to 1024 [ 60.543761][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.552310][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.746409][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.380'. [ 60.755436][ T4655] bridge_slave_1: left allmulticast mode [ 60.761207][ T4655] bridge_slave_1: left promiscuous mode [ 60.767043][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.775330][ T4655] bridge_slave_0: left allmulticast mode [ 60.781051][ T4655] bridge_slave_0: left promiscuous mode [ 60.787110][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.888702][ T4660] raw_sendmsg: syz.0.382 forgot to set AF_INET. Fix it! [ 60.897793][ T4660] loop0: detected capacity change from 0 to 256 [ 61.007203][ T4672] loop5: detected capacity change from 0 to 128 [ 61.069001][ T4673] syz.5.387: attempt to access beyond end of device [ 61.069001][ T4673] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 61.083551][ T4673] syz.5.387: attempt to access beyond end of device [ 61.083551][ T4673] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 61.097033][ T4673] syz.5.387: attempt to access beyond end of device [ 61.097033][ T4673] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 61.111266][ T4673] syz.5.387: attempt to access beyond end of device [ 61.111266][ T4673] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 61.128559][ T4673] syz.5.387: attempt to access beyond end of device [ 61.128559][ T4673] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 61.158787][ T4673] syz.5.387: attempt to access beyond end of device [ 61.158787][ T4673] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 61.172963][ T4673] syz.5.387: attempt to access beyond end of device [ 61.172963][ T4673] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 61.186471][ T4673] syz.5.387: attempt to access beyond end of device [ 61.186471][ T4673] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 61.200288][ T4673] syz.5.387: attempt to access beyond end of device [ 61.200288][ T4673] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 61.251102][ T4683] loop5: detected capacity change from 0 to 128 [ 61.354844][ T4691] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 61.363445][ T4690] veth1_macvtap: left promiscuous mode [ 61.369878][ T4690] macsec0: entered allmulticast mode [ 61.392251][ T4691] bond1: entered promiscuous mode [ 61.397591][ T4691] bond1: entered allmulticast mode [ 61.412931][ T4691] geneve2: entered allmulticast mode [ 61.434201][ T4691] bond1: (slave geneve2): making interface the new active one [ 61.441811][ T4691] geneve2: entered promiscuous mode [ 61.450406][ T4691] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 61.465817][ T4691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 61.480837][ T4691] bond1: left promiscuous mode [ 61.485750][ T4691] geneve2: left promiscuous mode [ 61.490992][ T4691] bond1: left allmulticast mode [ 61.496775][ T4691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.668892][ T4719] loop4: detected capacity change from 0 to 512 [ 61.678932][ T4719] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.408: iget: bad i_size value: 38620345925642 [ 61.692426][ T4719] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.408: couldn't read orphan inode 15 (err -117) [ 61.825555][ T4724] loop3: detected capacity change from 0 to 1024 [ 61.939976][ T4734] loop2: detected capacity change from 0 to 512 [ 62.019372][ T31] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 62.032684][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 62.045377][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.045377][ T31] [ 62.055140][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 62.061311][ T31] EXT4-fs (loop4): Free/Dirty block details [ 62.067326][ T31] EXT4-fs (loop4): free_blocks=0 [ 62.072297][ T31] EXT4-fs (loop4): dirty_blocks=16024 [ 62.077747][ T31] EXT4-fs (loop4): Block reservation details [ 62.083812][ T31] EXT4-fs (loop4): i_reserved_data_blocks=16024 [ 62.099990][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 62.112754][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.112754][ T31] [ 62.316157][ T4747] loop0: detected capacity change from 0 to 2048 [ 62.373699][ T4747] loop0: p1 < > p4 [ 62.378269][ T4747] loop0: p4 size 722688 extends beyond EOD, truncated [ 62.389046][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 62.389124][ T29] audit: type=1400 audit(1753201741.437:551): avc: denied { write } for pid=4746 comm="syz.0.418" name="loop0p1" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.427486][ T29] audit: type=1400 audit(1753201741.437:552): avc: denied { open } for pid=4746 comm="syz.0.418" path="/dev/loop0p1" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.450649][ T29] audit: type=1400 audit(1753201741.437:553): avc: denied { ioctl } for pid=4746 comm="syz.0.418" path="/dev/loop0p1" dev="devtmpfs" ino=681 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.481732][ T4749] IPv6: sit1: Disabled Multicast RS [ 62.747294][ T4766] loop0: detected capacity change from 0 to 512 [ 62.758163][ T4766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002] [ 62.766351][ T4766] System zones: 1-12 [ 62.771242][ T4766] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.426: corrupted in-inode xattr: e_value size too large [ 62.793612][ T4766] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.426: couldn't read orphan inode 15 (err -117) [ 62.811943][ T4771] loop2: detected capacity change from 0 to 1024 [ 62.824954][ T4771] EXT4-fs: Ignoring removed orlov option [ 62.830118][ T29] audit: type=1400 audit(1753201741.877:554): avc: denied { create } for pid=4765 comm="syz.0.426" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.893031][ T29] audit: type=1400 audit(1753201741.927:555): avc: denied { read } for pid=4765 comm="syz.0.426" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.936420][ T29] audit: type=1400 audit(1753201741.927:556): avc: denied { create } for pid=4765 comm="syz.0.426" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 63.055005][ T4779] loop0: detected capacity change from 0 to 1024 [ 63.086771][ T4783] batman_adv: batadv0: Adding interface: dummy0 [ 63.093224][ T4783] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.096030][ T4779] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.431: Allocating blocks 449-513 which overlap fs metadata [ 63.118944][ T4783] batman_adv: batadv0: Interface activated: dummy0 [ 63.141010][ T29] audit: type=1400 audit(1753201742.187:557): avc: denied { ioctl } for pid=4782 comm="syz.4.432" path="socket:[7916]" dev="sockfs" ino=7916 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.162251][ T4779] SELinux: Context @ is not valid (left unmapped). [ 63.170904][ T4785] batadv0: mtu less than device minimum [ 63.175511][ T4779] EXT4-fs (loop0): pa ffff888106951230: logic 48, phys. 177, len 21 [ 63.180481][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.188104][ T4779] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 63.199014][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.219688][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.221216][ T29] audit: type=1400 audit(1753201742.227:558): avc: denied { relabelto } for pid=4778 comm="+}[@" name="cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 63.230556][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.265288][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.276138][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.286962][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.297740][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.308628][ T4785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.389084][ T4795] loop3: detected capacity change from 0 to 1024 [ 63.409346][ T4796] loop0: detected capacity change from 0 to 1024 [ 63.417695][ T4795] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.439208][ T29] audit: type=1326 audit(1753201742.487:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4738e9a9 code=0x7ffc0000 [ 63.470481][ T29] audit: type=1326 audit(1753201742.517:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7b4738e9a9 code=0x7ffc0000 [ 63.543550][ T4805] loop5: detected capacity change from 0 to 512 [ 63.564777][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 393: padding at end of block bitmap is not set [ 63.580937][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 63.593708][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.593708][ T12] [ 63.634400][ T4810] loop3: detected capacity change from 0 to 512 [ 63.641151][ T4810] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.649559][ T4810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.661801][ T4810] EXT4-fs (loop3): 1 truncate cleaned up [ 63.669258][ T4812] $H: renamed from bond0 (while UP) [ 63.677797][ T4812] $H: entered promiscuous mode [ 63.683135][ T4812] bond_slave_0: entered promiscuous mode [ 63.689097][ T4812] bond_slave_1: entered promiscuous mode [ 63.731350][ T4820] syzkaller1: entered promiscuous mode [ 63.736957][ T4820] syzkaller1: entered allmulticast mode [ 63.834410][ T4833] loop4: detected capacity change from 0 to 1024 [ 63.850249][ T4833] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.449: Allocating blocks 497-513 which overlap fs metadata [ 63.864700][ T4833] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 117 [ 63.877125][ T4833] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.877125][ T4833] [ 64.117491][ T4846] loop4: detected capacity change from 0 to 1024 [ 64.140213][ T4846] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 64.152617][ T4846] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.152617][ T4846] [ 64.162544][ T4846] EXT4-fs (loop4): Total free blocks count 0 [ 64.168644][ T4846] EXT4-fs (loop4): Free/Dirty block details [ 64.174623][ T4846] EXT4-fs (loop4): free_blocks=0 [ 64.179683][ T4846] EXT4-fs (loop4): dirty_blocks=0 [ 64.184781][ T4846] EXT4-fs (loop4): Block reservation details [ 64.190791][ T4846] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 64.289991][ T4856] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 64.324508][ T4858] capability: warning: `syz.0.457' uses 32-bit capabilities (legacy support in use) [ 64.430294][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 64.435299][ T4874] syzkaller0: entered promiscuous mode [ 64.444730][ T4874] syzkaller0: entered allmulticast mode [ 64.508510][ T4880] syzkaller0: entered promiscuous mode [ 64.514168][ T4880] syzkaller0: entered allmulticast mode [ 64.546110][ T4883] loop4: detected capacity change from 0 to 1024 [ 64.640445][ T4888] loop5: detected capacity change from 0 to 2048 [ 64.666574][ T4895] loop2: detected capacity change from 0 to 512 [ 64.690238][ T4897] : renamed from vlan1 (while UP) [ 64.694612][ T4888] loop5: p1 < > p4 [ 64.700483][ T4888] loop5: p4 size 8388608 extends beyond EOD, truncated [ 64.755144][ T4901] tipc: Started in network mode [ 64.755794][ T4903] loop5: detected capacity change from 0 to 512 [ 64.760078][ T4901] tipc: Node identity ba9cb353b8b8, cluster identity 4711 [ 64.773847][ T4901] tipc: Enabled bearer , priority 0 [ 64.773931][ T4904] loop0: detected capacity change from 0 to 1024 [ 64.782559][ T4903] EXT4-fs: Ignoring removed nobh option [ 64.792958][ T4900] tipc: Resetting bearer [ 64.810470][ T4903] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm +}[@: corrupted inode contents [ 64.814020][ T4900] tipc: Disabling bearer [ 64.829872][ T4903] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm +}[@: mark_inode_dirty error [ 64.842154][ T4903] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm +}[@: corrupted inode contents [ 64.853676][ T4903] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm +}[@: mark_inode_dirty error [ 64.865266][ T4903] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 64.876673][ T4903] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 64.889827][ T4903] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm +}[@: mark_inode_dirty error [ 64.901161][ T4903] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 64.914474][ T4903] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error [ 64.917301][ T4910] vlan0: entered promiscuous mode [ 64.925678][ T4903] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 64.946304][ T4910] team0: Port device vlan0 added [ 64.951712][ T4903] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 64.962688][ T4903] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 64.975142][ T4903] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm +}[@: mark_inode_dirty error [ 64.987285][ T4903] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 64.996883][ T4903] EXT4-fs (loop5): 1 truncate cleaned up [ 65.004647][ T4903] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.564317][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 65.614048][ T4935] veth1_to_bond: entered allmulticast mode [ 65.620748][ T4935] veth1_to_bond: left allmulticast mode [ 65.664428][ T4938] loop2: detected capacity change from 0 to 1024 [ 65.861132][ T4944] loop2: detected capacity change from 0 to 128 [ 65.869769][ T4944] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.059984][ T4958] loop5: detected capacity change from 0 to 512 [ 66.161938][ T4962] bridge: RTM_NEWNEIGH with invalid ether address [ 66.257134][ T4969] syzkaller0: entered promiscuous mode [ 66.262824][ T4969] syzkaller0: entered allmulticast mode [ 66.455467][ T4971] loop3: detected capacity change from 0 to 128 [ 66.458911][ T4973] tipc: Started in network mode [ 66.464020][ T4971] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.466785][ T4973] tipc: Node identity 862ddf4ee1b4, cluster identity 4711 [ 66.484449][ T4973] tipc: Enabled bearer , priority 0 [ 66.498267][ T4972] tipc: Resetting bearer [ 66.513883][ T4972] tipc: Disabling bearer [ 67.385845][ T5000] loop3: detected capacity change from 0 to 512 [ 67.392481][ T5000] EXT4-fs: Ignoring removed nobh option [ 67.417500][ T5000] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm +}[@: corrupted inode contents [ 67.421717][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 67.421736][ T29] audit: type=1400 audit(1753201746.467:665): avc: denied { ioctl } for pid=5001 comm="syz.0.509" path="socket:[8801]" dev="sockfs" ino=8801 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.429258][ T5000] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm +}[@: mark_inode_dirty error [ 67.475167][ T5000] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm +}[@: corrupted inode contents [ 67.489163][ T5000] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm +}[@: mark_inode_dirty error [ 67.504265][ T5000] Quota error (device loop3): write_blk: dquota write failed [ 67.511815][ T5000] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 67.524920][ T5000] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 67.536525][ T5000] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 67.549605][ T5000] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm +}[@: mark_inode_dirty error [ 67.560893][ T5000] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 67.573865][ T5000] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error [ 67.579253][ T5010] loop0: detected capacity change from 0 to 128 [ 67.585181][ T5000] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 67.594083][ T5010] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.605121][ T5000] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 67.623774][ T5000] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 67.637516][ T5000] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm +}[@: mark_inode_dirty error [ 67.664388][ T5000] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 67.676418][ T5000] EXT4-fs (loop3): 1 truncate cleaned up [ 67.682818][ T5000] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.695545][ T5013] syzkaller1: entered promiscuous mode [ 67.701173][ T5013] syzkaller1: entered allmulticast mode [ 68.030692][ T29] audit: type=1400 audit(1753201747.077:666): avc: denied { module_load } for pid=5025 comm="syz.3.520" path="/sys/kernel/notes" dev="sysfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 68.031609][ T5026] Invalid ELF header magic: != ELF [ 68.575892][ T5044] bridge: RTM_NEWNEIGH with invalid ether address [ 68.617857][ T5050] loop0: detected capacity change from 0 to 512 [ 68.624795][ T5050] EXT4-fs: Ignoring removed nobh option [ 68.635070][ T5050] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.528: corrupted inode contents [ 68.647328][ T5050] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.528: mark_inode_dirty error [ 68.659156][ T5050] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.528: corrupted inode contents [ 68.671284][ T5050] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.528: mark_inode_dirty error [ 68.684286][ T5050] Quota error (device loop0): write_blk: dquota write failed [ 68.691857][ T5050] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 68.702207][ T5050] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.528: Failed to acquire dquot type 0 [ 68.714432][ T5050] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.528: corrupted inode contents [ 68.727430][ T5050] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.528: mark_inode_dirty error [ 68.739230][ T5050] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.528: corrupted inode contents [ 68.751536][ T5050] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.528: mark_inode_dirty error [ 68.763250][ T5050] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.528: corrupted inode contents [ 68.775325][ T5050] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 68.784164][ T5050] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.528: corrupted inode contents [ 68.797246][ T5050] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.528: mark_inode_dirty error [ 68.808911][ T5050] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 68.820368][ T5050] EXT4-fs (loop0): 1 truncate cleaned up [ 68.827544][ T5050] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.855826][ T5057] loop4: detected capacity change from 0 to 512 [ 68.863797][ T5057] EXT4-fs: Ignoring removed nobh option [ 68.878721][ T5057] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm +}[@: corrupted inode contents [ 68.890606][ T5058] loop3: detected capacity change from 0 to 8192 [ 68.899317][ T5057] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm +}[@: mark_inode_dirty error [ 68.911739][ T5057] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm +}[@: corrupted inode contents [ 68.923934][ T5057] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm +}[@: mark_inode_dirty error [ 68.938872][ T5057] Quota error (device loop4): write_blk: dquota write failed [ 68.946919][ T5057] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 68.957748][ T5057] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 68.984297][ T5057] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 69.086722][ T5057] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm +}[@: mark_inode_dirty error [ 69.103498][ T5057] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 69.114963][ T5067] netlink: 'syz.5.531': attribute type 13 has an invalid length. [ 69.115318][ T5057] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error [ 69.135495][ T5057] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 69.148710][ T5057] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 69.161485][ T5057] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm +}[@: corrupted inode contents [ 69.174652][ T5057] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm +}[@: mark_inode_dirty error [ 69.186284][ T5057] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 69.195820][ T5057] EXT4-fs (loop4): 1 truncate cleaned up [ 69.206021][ T5057] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.245634][ T5074] loop2: detected capacity change from 0 to 512 [ 69.252662][ T5074] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.260454][ T5074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.303833][ T5074] EXT4-fs (loop2): 1 truncate cleaned up [ 69.336582][ T5067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.347234][ T5067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.389534][ T5067] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.398681][ T5067] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.407787][ T5067] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.416763][ T5067] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.427067][ T3313] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /95/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.454170][ T3313] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.543634][ T3313] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /95/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.569363][ T5084] netlink: 'syz.0.550': attribute type 13 has an invalid length. [ 69.586711][ T3313] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.616896][ T3313] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /95/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.645595][ T3313] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.671446][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.678747][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.690113][ T3313] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /95/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.723621][ T3313] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.748246][ T3313] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /95/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 69.771521][ T3313] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 69.831214][ T5084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.841898][ T5084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.881973][ T5084] veth1_macvtap: left allmulticast mode [ 69.891678][ T5084] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.901005][ T5084] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.910441][ T5084] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.919640][ T5084] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.947354][ T5093] pim6reg1: entered promiscuous mode [ 69.952882][ T5093] pim6reg1: entered allmulticast mode [ 70.079616][ T5101] loop4: detected capacity change from 0 to 8192 [ 70.091686][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.099795][ T5101] FAT-fs (loop4): Filesystem has been set read-only [ 70.106503][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.114443][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.122433][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.130384][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.140372][ T5101] bio_check_eod: 105 callbacks suppressed [ 70.140524][ T5101] syz.4.547: attempt to access beyond end of device [ 70.140524][ T5101] loop4: rw=0, sector=65368, nr_sectors = 1 limit=8192 [ 70.160002][ T5101] Buffer I/O error on dev loop4, logical block 65368, async page read [ 70.168510][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.176673][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.184625][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.193376][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.201301][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.209457][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.217375][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.222074][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 70.225231][ T5101] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff12) [ 70.225427][ T5101] syz.4.547: attempt to access beyond end of device [ 70.225427][ T5101] loop4: rw=0, sector=65368, nr_sectors = 1 limit=8192 [ 70.253483][ T5101] Buffer I/O error on dev loop4, logical block 65368, async page read [ 70.287317][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.294671][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.302075][ T5102] bridge_slave_0: entered allmulticast mode [ 70.309007][ T5102] bridge_slave_0: entered promiscuous mode [ 70.316033][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.323722][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.331407][ T5102] bridge_slave_1: entered allmulticast mode [ 70.340948][ T5102] bridge_slave_1: entered promiscuous mode [ 70.366566][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.379286][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.400888][ T5102] team0: Port device team_slave_0 added [ 70.407853][ T5102] team0: Port device team_slave_1 added [ 70.430242][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.437412][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.437452][ T5119] loop4: detected capacity change from 0 to 512 [ 70.437784][ T5119] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.463595][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.473197][ T5119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.477443][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.503908][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.530005][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.548204][ T5119] EXT4-fs (loop4): 1 truncate cleaned up [ 70.579811][ T5122] syzkaller1: entered promiscuous mode [ 70.585421][ T5122] syzkaller1: entered allmulticast mode [ 70.595217][ T5102] hsr_slave_0: entered promiscuous mode [ 70.601646][ T5102] hsr_slave_1: entered promiscuous mode [ 70.603457][ T3310] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /117/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 70.609337][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.629473][ T3310] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 70.638118][ T5102] Cannot create hsr debugfs directory [ 70.657652][ T3310] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /117/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 70.684956][ T3310] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 70.706219][ T3310] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /117/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 70.736584][ T3310] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 70.758781][ T3310] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /117/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 70.783204][ T3310] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 70.804340][ T3310] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /117/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 70.828019][ T3310] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 70.910761][ T5102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.922412][ T3310] bridge0: port 3(syz_tun) entered disabled state [ 70.930368][ T3310] syz_tun (unregistering): left allmulticast mode [ 70.937020][ T3310] syz_tun (unregistering): left promiscuous mode [ 70.943755][ T3310] bridge0: port 3(syz_tun) entered disabled state [ 70.951919][ T5102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.961107][ T5102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.970513][ T5102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.007017][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.020108][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.030045][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.037174][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.049169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.056398][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.087689][ T3451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.127200][ T3451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.190932][ T5145] loop0: detected capacity change from 0 to 2048 [ 71.195974][ T5141] syzkaller0: entered promiscuous mode [ 71.203141][ T5141] syzkaller0: entered allmulticast mode [ 71.216389][ T3451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.235929][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.253835][ T5145] loop0: p1 < > p4 [ 71.267898][ T5145] loop0: p4 size 8388608 extends beyond EOD, truncated [ 71.294688][ T3451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.428062][ T3451] bridge_slave_1: left allmulticast mode [ 71.433799][ T3451] bridge_slave_1: left promiscuous mode [ 71.439493][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.458207][ T3451] bridge_slave_0: left allmulticast mode [ 71.464158][ T3451] bridge_slave_0: left promiscuous mode [ 71.469833][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.488412][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 71.498722][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.586503][ T3451] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.603077][ T3451] bond_slave_0: left promiscuous mode [ 71.613792][ T3451] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.625422][ T3451] bond_slave_1: left promiscuous mode [ 71.631755][ T3451] $H (unregistering): Released all slaves [ 71.688042][ T3451] tipc: Left network mode [ 71.705009][ T3451] hsr_slave_0: left promiscuous mode [ 71.722050][ T3451] hsr_slave_1: left promiscuous mode [ 71.730282][ T3451] batman_adv: batadv0: Interface deactivated: dummy0 [ 71.737109][ T3451] batman_adv: batadv0: Removing interface: dummy0 [ 71.776776][ T5188] loop3: detected capacity change from 0 to 512 [ 71.795305][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.803052][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.812445][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.819994][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.831621][ T3451] veth1_macvtap: left promiscuous mode [ 71.838595][ T3451] veth0_macvtap: left promiscuous mode [ 71.845048][ T3451] veth1_vlan: left promiscuous mode [ 71.850348][ T3451] veth0_vlan: left promiscuous mode [ 71.925635][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 71.937632][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 71.979187][ T5195] loop5: detected capacity change from 0 to 8192 [ 71.992789][ T5102] veth0_vlan: entered promiscuous mode [ 72.008915][ T5146] chnl_net:caif_netlink_parms(): no params data found [ 72.047713][ T5102] veth1_vlan: entered promiscuous mode [ 72.057765][ T5199] vlan2: entered allmulticast mode [ 72.063658][ T5199] dummy0: entered allmulticast mode [ 72.099065][ T5102] veth0_macvtap: entered promiscuous mode [ 72.105734][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.113031][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.120984][ T5146] bridge_slave_0: entered allmulticast mode [ 72.127643][ T5146] bridge_slave_0: entered promiscuous mode [ 72.135342][ T5102] veth1_macvtap: entered promiscuous mode [ 72.146072][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.153309][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.160858][ T5146] bridge_slave_1: entered allmulticast mode [ 72.167707][ T5146] bridge_slave_1: entered promiscuous mode [ 72.176626][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.200005][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.221180][ T5146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.232472][ T5102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.241528][ T5102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.250640][ T5102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.259757][ T5102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.271600][ T5146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.332414][ T5209] syzkaller0: entered promiscuous mode [ 72.337992][ T5209] syzkaller0: entered allmulticast mode [ 72.345384][ T5146] team0: Port device team_slave_0 added [ 72.352420][ T5146] team0: Port device team_slave_1 added [ 72.391683][ T5146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.398791][ T5146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.424887][ T5146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.442144][ T5213] loop6: detected capacity change from 0 to 1024 [ 72.454632][ T5213] EXT4-fs mount: 48 callbacks suppressed [ 72.454650][ T5213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.471209][ T5146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.479535][ T5146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.505634][ T5146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.518476][ T29] audit: type=1326 audit(1753201751.528:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8f7ce9a9 code=0x7ffc0000 [ 72.541802][ T29] audit: type=1326 audit(1753201751.528:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fef8f7ce9a9 code=0x7ffc0000 [ 72.577610][ T29] audit: type=1326 audit(1753201751.628:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8f7ce9a9 code=0x7ffc0000 [ 72.601045][ T29] audit: type=1326 audit(1753201751.628:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8f7ce9a9 code=0x7ffc0000 [ 72.629210][ T29] audit: type=1326 audit(1753201751.658:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef8f7ce9a9 code=0x7ffc0000 [ 72.652566][ T29] audit: type=1326 audit(1753201751.658:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8f7ce9a9 code=0x7ffc0000 [ 72.676430][ T29] audit: type=1326 audit(1753201751.658:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5211 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8f7ce9a9 code=0x7ffc0000 [ 72.703721][ T5146] hsr_slave_0: entered promiscuous mode [ 72.709849][ T5146] hsr_slave_1: entered promiscuous mode [ 72.720705][ T5146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.735685][ T5146] Cannot create hsr debugfs directory [ 72.861106][ T5146] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 72.874875][ T5146] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 72.899184][ T5146] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 72.915985][ T5146] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 72.955850][ T5146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.968959][ T5146] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.978836][ T3924] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.985983][ T3924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.997601][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.004770][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.071165][ T5146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.183976][ T5146] veth0_vlan: entered promiscuous mode [ 73.192091][ T5146] veth1_vlan: entered promiscuous mode [ 73.209315][ T5146] veth0_macvtap: entered promiscuous mode [ 73.216783][ T5146] veth1_macvtap: entered promiscuous mode [ 73.229445][ T5146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.241443][ T5146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.251616][ T5102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.263257][ T5146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.272104][ T5146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.280855][ T5146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289787][ T5146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.290712][ T5245] netlink: 'syz.3.574': attribute type 10 has an invalid length. [ 73.313762][ T5245] geneve1: entered promiscuous mode [ 73.333978][ T5245] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 73.395888][ T5257] loop5: detected capacity change from 0 to 1024 [ 73.410932][ T5257] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.421937][ T5257] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.433100][ T5257] JBD2: no valid journal superblock found [ 73.438930][ T5257] EXT4-fs (loop5): Could not load journal inode [ 73.525900][ T29] audit: type=1326 audit(1753201752.578:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4738e9a9 code=0x7ffc0000 [ 73.549569][ T29] audit: type=1326 audit(1753201752.578:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4738e9a9 code=0x7ffc0000 [ 73.600561][ T5262] loop3: detected capacity change from 0 to 8192 [ 73.615389][ T29] audit: type=1326 audit(1753201752.628:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b4738e9a9 code=0x7ffc0000 [ 73.734647][ T5281] loop0: detected capacity change from 0 to 1024 [ 73.743139][ T5280] loop7: detected capacity change from 0 to 1024 [ 73.770441][ T5278] syzkaller0: entered promiscuous mode [ 73.776111][ T5278] syzkaller0: entered allmulticast mode [ 73.795862][ T5280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.816512][ T5281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.946644][ T5291] netlink: 28 bytes leftover after parsing attributes in process `syz.6.587'. [ 73.956073][ T5292] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 74.041335][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.590'. [ 74.050398][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.590'. [ 74.109289][ T5300] vlan2: entered allmulticast mode [ 74.116600][ T5300] dummy0: entered allmulticast mode [ 74.494736][ T5146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.518278][ T5307] loop6: detected capacity change from 0 to 1024 [ 74.525978][ T5307] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.537019][ T5307] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.550564][ T5307] JBD2: no valid journal superblock found [ 74.556573][ T5307] EXT4-fs (loop6): Could not load journal inode [ 74.575903][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.601187][ T5313] loop0: detected capacity change from 0 to 2048 [ 74.614032][ T5313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.749406][ T5324] loop3: detected capacity change from 0 to 2048 [ 74.833431][ T5324] loop3: p1 < > p4 [ 74.841502][ T5324] loop3: p4 size 8388608 extends beyond EOD, truncated [ 74.855106][ T5328] loop6: detected capacity change from 0 to 1024 [ 74.894223][ T5328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.917148][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.960774][ T5334] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 74.974815][ T5102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.984776][ T5334] geneve1: entered promiscuous mode [ 74.990490][ T5334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.999414][ T5334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.008292][ T5334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.017077][ T5334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.033483][ T5335] loop3: detected capacity change from 0 to 1024 [ 75.037899][ T5334] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 75.060342][ T5335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.190980][ T5348] loop6: detected capacity change from 0 to 1024 [ 75.205648][ T5348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.371796][ T5353] loop0: detected capacity change from 0 to 2048 [ 75.383371][ T5353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.460925][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.480497][ T5359] loop5: detected capacity change from 0 to 2048 [ 75.493348][ T5359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 75.565283][ T5359] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.580866][ T5359] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1690 with error 28 [ 75.593754][ T5359] EXT4-fs (loop5): This should not happen!! Data will be lost [ 75.593754][ T5359] [ 75.603753][ T5359] EXT4-fs (loop5): Total free blocks count 0 [ 75.609793][ T5359] EXT4-fs (loop5): Free/Dirty block details [ 75.616046][ T5359] EXT4-fs (loop5): free_blocks=2415919104 [ 75.622076][ T5359] EXT4-fs (loop5): dirty_blocks=1696 [ 75.627720][ T5359] EXT4-fs (loop5): Block reservation details [ 75.634077][ T5359] EXT4-fs (loop5): i_reserved_data_blocks=106 [ 75.658442][ T5370] loop0: detected capacity change from 0 to 512 [ 75.673862][ T5370] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.681169][ T5370] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.612: bg 0: block 248: padding at end of block bitmap is not set [ 75.698166][ T5370] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.612: Failed to acquire dquot type 1 [ 75.711949][ T5370] EXT4-fs (loop0): 1 truncate cleaned up [ 75.718418][ T5370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.738716][ T5370] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 75.753185][ T5370] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 75.776499][ T145] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 75.789277][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.815571][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.872277][ T5380] loop5: detected capacity change from 0 to 2048 [ 75.884740][ T5380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.999051][ T5102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.168959][ T3622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.185616][ T5395] loop3: detected capacity change from 0 to 164 [ 76.193994][ T5395] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 76.207707][ T5397] loop5: detected capacity change from 0 to 2048 [ 76.223684][ T5397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.240318][ T5397] netlink: 'syz.5.623': attribute type 10 has an invalid length. [ 76.248497][ T5397] macsec0: left allmulticast mode [ 76.254201][ T5397] batman_adv: batadv0: Adding interface: macsec0 [ 76.260591][ T5397] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.286202][ T5397] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 76.337008][ T3622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.375396][ T5414] serio: Serial port ptm0 [ 76.390399][ T5416] loop3: detected capacity change from 0 to 1024 [ 76.404784][ T5416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.443960][ T5423] loop7: detected capacity change from 0 to 512 [ 76.450879][ T5423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.464001][ T5423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.476839][ T5423] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.492230][ T5423] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.631: corrupted xattr block 32: bad e_name length [ 76.506354][ T5423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 76.515996][ T5423] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.631: corrupted xattr block 32: bad e_name length [ 76.530580][ T5423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 76.539780][ T5423] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.631: corrupted xattr block 32: bad e_name length [ 76.553859][ T5423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 76.576127][ T5146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.604551][ T5430] loop7: detected capacity change from 0 to 2048 [ 76.635523][ T5430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.805907][ T5146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.827575][ T5447] loop0: detected capacity change from 0 to 2048 [ 76.835967][ T5449] loop7: detected capacity change from 0 to 1024 [ 76.843652][ T5449] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.854698][ T5449] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 76.864809][ T5447] loop0: p1 < > p4 [ 76.865177][ T5449] JBD2: no valid journal superblock found [ 76.869300][ T5447] loop0: p4 size 8388608 extends beyond EOD, [ 76.874469][ T5449] EXT4-fs (loop7): Could not load journal inode [ 76.887019][ T5447] truncated [ 77.097700][ T5464] loop6: detected capacity change from 0 to 2048 [ 77.106849][ T5466] loop7: detected capacity change from 0 to 164 [ 77.115469][ T5466] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.125812][ T5464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.158643][ T5464] netlink: 'syz.6.647': attribute type 10 has an invalid length. [ 77.166869][ T5464] veth1_macvtap: left promiscuous mode [ 77.175493][ T5464] batman_adv: batadv0: Adding interface: macsec0 [ 77.182216][ T5464] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.207959][ T5464] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 77.246225][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.251783][ T5470] syzkaller0: entered promiscuous mode [ 77.261017][ T5470] syzkaller0: entered allmulticast mode [ 77.298283][ T5102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.391946][ T5486] loop7: detected capacity change from 0 to 764 [ 77.484352][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 77.497510][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.664'. [ 77.563151][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.681'. [ 77.576582][ T5516] net_ratelimit: 11 callbacks suppressed [ 77.576598][ T5516] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 77.635237][ T5523] veth0_vlan: entered allmulticast mode [ 77.653796][ T5526] loop9: detected capacity change from 0 to 7 [ 77.660923][ T5526] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.669229][ T5526] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.677288][ T5526] loop9: unable to read partition table [ 77.683446][ T5526] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 77.683446][ T5526] ) failed (rc=-5) [ 77.706426][ T5530] loop6: detected capacity change from 0 to 512 [ 77.723371][ T5530] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.678: corrupted in-inode xattr: invalid ea_ino [ 77.738995][ T5530] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.678: couldn't read orphan inode 15 (err -117) [ 77.754681][ T5530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.801181][ T5102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.924947][ T5544] loop5: detected capacity change from 0 to 1024 [ 77.953759][ T5544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.967515][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 77.967533][ T29] audit: type=1326 audit(1753201757.019:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 77.998343][ T29] audit: type=1326 audit(1753201757.019:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.021847][ T29] audit: type=1326 audit(1753201757.019:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.045255][ T29] audit: type=1326 audit(1753201757.049:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.068600][ T29] audit: type=1326 audit(1753201757.049:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.092277][ T29] audit: type=1326 audit(1753201757.049:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.115603][ T29] audit: type=1326 audit(1753201757.049:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.139014][ T29] audit: type=1326 audit(1753201757.049:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.162610][ T29] audit: type=1326 audit(1753201757.049:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.185935][ T29] audit: type=1326 audit(1753201757.049:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e9a9 code=0x7ffc0000 [ 78.588330][ T5553] loop7: detected capacity change from 0 to 1024 [ 78.602948][ T5553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.710725][ T3622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.741849][ T5564] loop6: detected capacity change from 0 to 512 [ 78.748538][ T5564] journal_path: Lookup failure for './file0/../file0' [ 78.755481][ T5564] EXT4-fs: error: could not find journal device path [ 79.081609][ T5570] veth0_vlan: left promiscuous mode [ 79.086910][ T5570] veth0_vlan: entered promiscuous mode [ 79.092475][ T5570] veth0_vlan: entered allmulticast mode [ 79.392926][ T5146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.416360][ T5597] loop7: detected capacity change from 0 to 512 [ 80.070818][ T5606] loop0: detected capacity change from 0 to 128 [ 80.080164][ T5606] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.094797][ T5606] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.111502][ T5609] loop3: detected capacity change from 0 to 1024 [ 80.144274][ T5609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.170251][ T5618] loop5: detected capacity change from 0 to 128 [ 80.186506][ T5618] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.199064][ T5618] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.228117][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.250125][ T5623] loop0: detected capacity change from 0 to 512 [ 80.258156][ T5623] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.711: bad orphan inode 15 [ 80.272460][ T5623] ext4_test_bit(bit=14, block=5) = 0 [ 80.278062][ T5628] loop6: detected capacity change from 0 to 128 [ 80.285909][ T5623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.298596][ T5626] loop7: detected capacity change from 0 to 512 [ 80.299702][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.305607][ T5626] journal_path: Lookup failure for './file0/../file0' [ 80.317152][ T5628] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.320771][ T5626] EXT4-fs: error: could not find journal device path [ 80.340006][ T5628] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.418005][ T5102] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.442827][ T5639] loop0: detected capacity change from 0 to 1024 [ 80.453377][ T5639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.887728][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.904599][ T5643] loop6: detected capacity change from 0 to 1024 [ 80.912018][ T5643] EXT4-fs: Ignoring removed orlov option [ 80.920063][ T5643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.010772][ T3622] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.287043][ T5656] loop5: detected capacity change from 0 to 1024 [ 81.314016][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.324848][ T5656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.384774][ T5664] loop7: detected capacity change from 0 to 512 [ 81.695053][ T5672] loop0: detected capacity change from 0 to 512 [ 81.702109][ T5672] journal_path: Lookup failure for './file0/../file0' [ 81.708959][ T5672] EXT4-fs: error: could not find journal device path [ 81.848118][ T5102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.092068][ T3622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.130932][ T5686] loop5: detected capacity change from 0 to 128 [ 82.139175][ T5686] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.151871][ T5686] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.218120][ T3622] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.262056][ T5695] loop3: detected capacity change from 0 to 8192 [ 82.270468][ T5695] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.577985][ T5724] loop7: detected capacity change from 0 to 1024 [ 82.615627][ T5724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.222277][ T5764] loop5: detected capacity change from 0 to 764 [ 83.343152][ T5771] 0: renamed from pim6reg1 [ 83.355361][ T5146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.836217][ T5827] SELinux: failed to load policy [ 83.854484][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 83.854498][ T29] audit: type=1326 audit(1753201762.909:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 83.896454][ T29] audit: type=1326 audit(1753201762.939:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 83.920028][ T29] audit: type=1326 audit(1753201762.939:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 83.943383][ T29] audit: type=1326 audit(1753201762.939:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 83.967275][ T29] audit: type=1326 audit(1753201762.939:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 83.990680][ T29] audit: type=1326 audit(1753201762.939:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 84.014303][ T29] audit: type=1326 audit(1753201762.939:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 84.037689][ T29] audit: type=1326 audit(1753201762.939:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 84.061031][ T29] audit: type=1326 audit(1753201762.939:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 84.084334][ T29] audit: type=1326 audit(1753201762.939:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 84.113633][ T5835] loop0: detected capacity change from 0 to 1024 [ 84.136830][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.138926][ T5834] 0: renamed from pim6reg1 [ 84.435292][ T5852] loop5: detected capacity change from 0 to 512 [ 84.518198][ T5859] loop3: detected capacity change from 0 to 1024 [ 84.533127][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.696672][ T5863] loop7: detected capacity change from 0 to 8192 [ 84.704804][ T5863] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.730506][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.907409][ T5871] loop0: detected capacity change from 0 to 1024 [ 84.934434][ T5871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.944677][ T5880] loop6: detected capacity change from 0 to 1024 [ 84.962522][ T5880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.974723][ T5880] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.999918][ T5102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.973214][ T5918] loop0: detected capacity change from 0 to 8192 [ 85.980993][ T5918] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.169164][ T5925] loop0: detected capacity change from 0 to 512 [ 86.180411][ T5923] macsec0: entered allmulticast mode [ 86.195080][ T5923] veth1_macvtap: entered allmulticast mode [ 86.204524][ T5923] macsec0: entered promiscuous mode [ 86.209888][ T5923] veth1_macvtap: entered promiscuous mode [ 86.227821][ T5923] batman_adv: batadv0: Interface activated: macsec0 [ 86.574337][ T5947] loop6: detected capacity change from 0 to 8192 [ 86.584487][ T5947] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.028944][ T5974] loop0: detected capacity change from 0 to 1024 [ 87.037658][ T5974] EXT4-fs: Ignoring removed orlov option [ 87.046784][ T5972] SELinux: failed to load policy [ 87.449335][ T5998] loop7: detected capacity change from 0 to 2048 [ 87.456442][ T5998] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.499295][ T36] Process accounting resumed [ 87.504821][ T37] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 234: padding at end of block bitmap is not set [ 87.519813][ T37] EXT4-fs (loop7): Remounting filesystem read-only [ 87.556590][ T6004] loop6: detected capacity change from 0 to 512 [ 87.720932][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.731089][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.770682][ T6013] SELinux: failed to load policy [ 87.968185][ T6018] loop5: detected capacity change from 0 to 1024 [ 87.975330][ T6018] EXT4-fs: Ignoring removed orlov option [ 88.220585][ T6035] loop3: detected capacity change from 0 to 2048 [ 88.227586][ T6035] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.256173][ T2958] Process accounting resumed [ 88.264502][ T31] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 234: padding at end of block bitmap is not set [ 88.290640][ T31] EXT4-fs (loop3): Remounting filesystem read-only [ 88.741219][ T6067] loop3: detected capacity change from 0 to 1024 [ 88.963627][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 88.963646][ T29] audit: type=1326 audit(1753204346.008:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 88.993298][ T29] audit: type=1326 audit(1753204346.008:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.016766][ T29] audit: type=1326 audit(1753204346.008:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.040114][ T29] audit: type=1326 audit(1753204346.008:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.063408][ T29] audit: type=1326 audit(1753204346.008:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.086832][ T29] audit: type=1326 audit(1753204346.008:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.110182][ T29] audit: type=1326 audit(1753204346.008:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.133670][ T29] audit: type=1326 audit(1753204346.008:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.157044][ T29] audit: type=1326 audit(1753204346.008:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.180372][ T29] audit: type=1326 audit(1753204346.008:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 89.233942][ T6077] loop0: detected capacity change from 0 to 512 [ 89.241509][ T6079] pim6reg1: entered promiscuous mode [ 89.246909][ T6079] pim6reg1: entered allmulticast mode [ 89.279376][ T6083] loop6: detected capacity change from 0 to 128 [ 89.286093][ T6083] EXT4-fs: Ignoring removed nobh option [ 89.294485][ T6083] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.503505][ T6102] loop7: detected capacity change from 0 to 1024 [ 89.513619][ T6102] EXT4-fs: Ignoring removed orlov option [ 90.592589][ T6134] loop0: detected capacity change from 0 to 512 [ 90.664367][ T6144] loop6: detected capacity change from 0 to 1024 [ 90.671265][ T6144] EXT4-fs: Ignoring removed nobh option [ 90.677403][ T6144] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.688594][ T6144] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.698990][ T6144] JBD2: no valid journal superblock found [ 90.704771][ T6144] EXT4-fs (loop6): Could not load journal inode [ 90.788242][ T6151] loop6: detected capacity change from 0 to 128 [ 90.831674][ T6151] syz.6.903: attempt to access beyond end of device [ 90.831674][ T6151] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 90.888999][ T6156] loop5: detected capacity change from 0 to 128 [ 90.898031][ T6156] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.118716][ T6167] loop3: detected capacity change from 0 to 512 [ 91.131754][ T6167] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.204731][ T12] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 91.219495][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28 [ 91.232158][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.232158][ T12] [ 91.241947][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 91.248000][ T12] EXT4-fs (loop3): Free/Dirty block details [ 91.253969][ T12] EXT4-fs (loop3): free_blocks=65280 [ 91.259432][ T12] EXT4-fs (loop3): dirty_blocks=1025 [ 91.264779][ T12] EXT4-fs (loop3): Block reservation details [ 91.270851][ T12] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 91.284027][ T6178] loop5: detected capacity change from 0 to 1024 [ 91.338770][ T6181] tipc: Enabled bearer , priority 0 [ 91.346481][ T6179] tipc: Resetting bearer [ 91.362125][ T6179] tipc: Disabling bearer [ 91.443178][ T6187] loop3: detected capacity change from 0 to 1024 [ 91.453740][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 91.463139][ T6187] EXT4-fs: Ignoring removed nobh option [ 91.469081][ T6187] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.473760][ T6191] bridge_slave_1: left allmulticast mode [ 91.480349][ T6187] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 91.485914][ T6191] bridge_slave_1: left promiscuous mode [ 91.486044][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.499806][ T6187] JBD2: no valid journal superblock found [ 91.514176][ T6187] EXT4-fs (loop3): Could not load journal inode [ 91.525694][ T6191] bridge_slave_0: left allmulticast mode [ 91.531649][ T6191] bridge_slave_0: left promiscuous mode [ 91.537714][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.545423][ T6195] loop7: detected capacity change from 0 to 512 [ 91.562955][ T6195] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.650703][ T6198] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.918: corrupted inode contents [ 91.663162][ T6198] EXT4-fs (loop7): Remounting filesystem read-only [ 91.670181][ T6198] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -30) [ 91.704771][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.713784][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.776372][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.920'. [ 91.822667][ T6208] loop7: detected capacity change from 0 to 1024 [ 92.342413][ T6225] loop5: detected capacity change from 0 to 512 [ 92.556395][ T6228] loop6: detected capacity change from 0 to 1024 [ 92.566936][ T6228] EXT4-fs: Ignoring removed orlov option [ 92.639972][ T6236] loop7: detected capacity change from 0 to 128 [ 92.653346][ T6236] syz.7.932: attempt to access beyond end of device [ 92.653346][ T6236] loop7: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 92.670922][ T6236] syz.7.932: attempt to access beyond end of device [ 92.670922][ T6236] loop7: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 92.721545][ T6239] loop3: detected capacity change from 0 to 128 [ 92.786262][ T6242] syz.3.933: attempt to access beyond end of device [ 92.786262][ T6242] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 92.824952][ T6242] syz.3.933: attempt to access beyond end of device [ 92.824952][ T6242] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 92.869406][ T6242] syz.3.933: attempt to access beyond end of device [ 92.869406][ T6242] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 92.969936][ T6242] syz.3.933: attempt to access beyond end of device [ 92.969936][ T6242] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 92.984259][ T6242] syz.3.933: attempt to access beyond end of device [ 92.984259][ T6242] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 92.998212][ T6242] syz.3.933: attempt to access beyond end of device [ 92.998212][ T6242] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 93.012084][ T6242] syz.3.933: attempt to access beyond end of device [ 93.012084][ T6242] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 93.243938][ T6253] loop0: detected capacity change from 0 to 1024 [ 93.309464][ T6257] pim6reg1: entered promiscuous mode [ 93.314857][ T6257] pim6reg1: entered allmulticast mode [ 93.585606][ T6275] loop7: detected capacity change from 0 to 512 [ 93.622900][ T6280] loop5: detected capacity change from 0 to 2048 [ 93.680005][ T6280] loop5: p1 < > p4 [ 93.684887][ T6280] loop5: p4 size 722688 extends beyond EOD, truncated [ 93.738744][ T6285] loop5: detected capacity change from 0 to 512 [ 93.753943][ T6285] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.820254][ T6290] loop5: detected capacity change from 0 to 164 [ 93.874860][ T6292] loop3: detected capacity change from 0 to 164 [ 93.882397][ T6292] Unable to read rock-ridge attributes [ 93.888935][ T6292] Unable to read rock-ridge attributes [ 93.890668][ T6293] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 94.158131][ T6298] loop3: detected capacity change from 0 to 512 [ 94.166994][ T6298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002] [ 94.176599][ T6298] System zones: 1-12 [ 94.180972][ T6298] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.958: corrupted in-inode xattr: e_value size too large [ 94.195916][ T6298] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.958: couldn't read orphan inode 15 (err -117) [ 94.458129][ T6321] loop3: detected capacity change from 0 to 512 [ 94.624789][ T6325] loop7: detected capacity change from 0 to 128 [ 94.676260][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.684873][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.803803][ T6343] loop7: detected capacity change from 0 to 1024 [ 94.810815][ T6343] EXT4-fs: Ignoring removed orlov option [ 95.242438][ T6350] loop6: detected capacity change from 0 to 512 [ 95.249372][ T6350] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.256303][ T6350] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 95.268415][ T6350] EXT4-fs (loop6): 1 truncate cleaned up [ 95.303635][ T6353] $H: renamed from bond0 (while UP) [ 95.311722][ T6353] $H: entered promiscuous mode [ 95.316957][ T6353] bond_slave_0: entered promiscuous mode [ 95.322992][ T6353] bond_slave_1: entered promiscuous mode [ 95.614817][ T6359] loop3: detected capacity change from 0 to 512 [ 95.730268][ T6365] loop7: detected capacity change from 0 to 164 [ 95.794997][ T6366] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 96.463926][ T6379] loop5: detected capacity change from 0 to 512 [ 96.477661][ T6383] syzkaller1: entered promiscuous mode [ 96.483354][ T6383] syzkaller1: entered allmulticast mode [ 96.638755][ T6390] tipc: Started in network mode [ 96.644287][ T6390] tipc: Node identity 9277da669482, cluster identity 4711 [ 96.651516][ T6390] tipc: Enabled bearer , priority 0 [ 96.661196][ T6389] tipc: Resetting bearer [ 96.694796][ T6389] tipc: Disabling bearer [ 96.703809][ T6394] batman_adv: batadv0: Adding interface: dummy0 [ 96.710154][ T6394] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.735718][ T6394] batman_adv: batadv0: Interface activated: dummy0 [ 96.746902][ T6397] batadv0: mtu less than device minimum [ 96.753017][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.763852][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.774660][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.785811][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.796894][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.807825][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.818671][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.829578][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.840598][ T6397] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.883508][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.7.994'. [ 96.893154][ T6403] bridge_slave_1: left allmulticast mode [ 96.899404][ T6403] bridge_slave_1: left promiscuous mode [ 96.905357][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.913661][ T6403] bridge_slave_0: left allmulticast mode [ 96.919450][ T6403] bridge_slave_0: left promiscuous mode [ 96.925193][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.100087][ T6418] loop6: detected capacity change from 0 to 512 [ 97.111629][ T6418] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.150315][ T6415] loop7: detected capacity change from 0 to 256 [ 97.182884][ T6426] loop7: detected capacity change from 0 to 128 [ 97.212108][ T6424] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.1003: corrupted inode contents [ 97.224454][ T6424] EXT4-fs (loop6): Remounting filesystem read-only [ 97.233483][ T6424] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 97.247208][ T6428] bio_check_eod: 106 callbacks suppressed [ 97.247224][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.247224][ T6428] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 97.268320][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.268320][ T6428] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 97.283553][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.283553][ T6428] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 97.300999][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.300999][ T6428] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 97.333006][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.333006][ T6428] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 97.357428][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.357428][ T6428] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 97.380478][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.380478][ T6428] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 97.395191][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.395191][ T6428] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 97.409649][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.409649][ T6428] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 97.425271][ T6428] syz.7.1004: attempt to access beyond end of device [ 97.425271][ T6428] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 97.469801][ T6439] loop6: detected capacity change from 0 to 128 [ 97.566284][ T6444] macsec0: entered allmulticast mode [ 97.586111][ T6446] netlink: 'syz.6.1012': attribute type 1 has an invalid length. [ 97.621041][ T6446] bond1: entered promiscuous mode [ 97.626266][ T6446] bond1: entered allmulticast mode [ 97.647006][ T6455] loop5: detected capacity change from 0 to 512 [ 97.651894][ T6446] geneve2: entered allmulticast mode [ 97.661151][ T6446] bond1: (slave geneve2): making interface the new active one [ 97.668936][ T6446] geneve2: entered promiscuous mode [ 97.674881][ T6446] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 97.690981][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1012'. [ 97.700676][ T6446] bond1: left promiscuous mode [ 97.701604][ T6452] loop3: detected capacity change from 0 to 256 [ 97.705627][ T6446] geneve2: left promiscuous mode [ 97.705751][ T6446] bond1: left allmulticast mode [ 97.724168][ T6446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.757209][ T6460] batman_adv: batadv0: Adding interface: dummy0 [ 97.763666][ T6460] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.789326][ T6460] batman_adv: batadv0: Interface activated: dummy0 [ 97.907733][ T6468] loop0: detected capacity change from 0 to 512 [ 97.921158][ T6462] syzkaller0: entered promiscuous mode [ 97.926707][ T6462] syzkaller0: entered allmulticast mode [ 97.934780][ T6468] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.010188][ T6474] loop6: detected capacity change from 0 to 128 [ 98.026801][ T6472] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.1020: corrupted inode contents [ 98.049274][ T6472] EXT4-fs (loop0): Remounting filesystem read-only [ 98.062461][ T6472] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 98.258983][ T6488] loop0: detected capacity change from 0 to 1024 [ 98.286770][ T6488] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 98.299281][ T6488] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.299281][ T6488] [ 98.308969][ T6488] EXT4-fs (loop0): Total free blocks count 0 [ 98.314996][ T6488] EXT4-fs (loop0): Free/Dirty block details [ 98.321045][ T6488] EXT4-fs (loop0): free_blocks=0 [ 98.326092][ T6488] EXT4-fs (loop0): dirty_blocks=0 [ 98.331218][ T6488] EXT4-fs (loop0): Block reservation details [ 98.337243][ T6488] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 98.339681][ T6491] loop6: detected capacity change from 0 to 256 [ 98.374280][ T6497] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 98.523280][ T6509] : renamed from vlan1 [ 98.541580][ T6511] loop6: detected capacity change from 0 to 2048 [ 98.560368][ T6513] netlink: 'syz.5.1037': attribute type 1 has an invalid length. [ 98.574392][ T6513] bond1: entered promiscuous mode [ 98.579544][ T6513] bond1: entered allmulticast mode [ 98.585565][ T6516] loop0: detected capacity change from 0 to 128 [ 98.592377][ T6513] geneve2: entered allmulticast mode [ 98.593070][ T6511] loop6: p1 < > p4 [ 98.599116][ T6513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.610429][ T6513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.619355][ T6513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.628248][ T6513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.637661][ T6511] loop6: p4 size 8388608 extends beyond EOD, truncated [ 98.638578][ T6513] bond1: (slave geneve2): making interface the new active one [ 98.652387][ T6513] geneve2: entered promiscuous mode [ 98.658586][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1037'. [ 98.658901][ T6513] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 98.677766][ T6517] bond1: left promiscuous mode [ 98.682659][ T6517] geneve2: left promiscuous mode [ 98.687716][ T6517] bond1: left allmulticast mode [ 98.738536][ T6517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.824168][ T6530] loop0: detected capacity change from 0 to 512 [ 99.005660][ T6548] loop5: detected capacity change from 0 to 128 [ 99.674686][ T6557] loop3: detected capacity change from 0 to 512 [ 99.735359][ T6559] netlink: 'syz.0.1056': attribute type 1 has an invalid length. [ 99.748507][ T6559] bond1: entered promiscuous mode [ 99.753716][ T6559] bond1: entered allmulticast mode [ 99.765813][ T6559] geneve2: entered allmulticast mode [ 99.773031][ T6559] bond1: (slave geneve2): making interface the new active one [ 99.780856][ T6559] geneve2: entered promiscuous mode [ 99.786754][ T6559] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 99.799816][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1056'. [ 99.809585][ T6559] bond1: left promiscuous mode [ 99.814707][ T6559] geneve2: left promiscuous mode [ 99.820179][ T6559] bond1: left allmulticast mode [ 99.835947][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.871619][ T6565] loop6: detected capacity change from 0 to 2048 [ 99.908799][ T6565] loop6: p1 < > p4 [ 99.913375][ T6565] loop6: p4 size 722688 extends beyond EOD, truncated [ 100.204324][ T6584] loop0: detected capacity change from 0 to 512 [ 100.223145][ T6584] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.226844][ T6586] loop7: detected capacity change from 0 to 512 [ 100.237596][ T6584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.239796][ T6586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002] [ 100.253046][ T6584] EXT4-fs (loop0): 1 truncate cleaned up [ 100.255688][ T6586] System zones: 1-12 [ 100.274696][ T6586] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.1069: corrupted in-inode xattr: e_value size too large [ 100.296276][ T6586] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1069: couldn't read orphan inode 15 (err -117) [ 100.496838][ T6599] loop6: detected capacity change from 0 to 1024 [ 100.503573][ T6599] EXT4-fs: Ignoring removed orlov option [ 100.547473][ T6605] loop3: detected capacity change from 0 to 2048 [ 100.578358][ T6605] loop3: p1 < > p4 [ 100.582855][ T6605] loop3: p4 size 722688 extends beyond EOD, truncated [ 100.640902][ T6613] batman_adv: batadv0: Adding interface: dummy0 [ 100.647257][ T6613] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.674796][ T6613] batman_adv: batadv0: Interface activated: dummy0 [ 100.898894][ T6623] $H: renamed from bond0 [ 100.905042][ T6623] $H: entered promiscuous mode [ 100.910237][ T6623] bond_slave_0: entered promiscuous mode [ 100.916119][ T6623] bond_slave_1: entered promiscuous mode [ 100.940599][ T6625] loop5: detected capacity change from 0 to 512 [ 100.949152][ T6625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002] [ 100.957337][ T6625] System zones: 1-12 [ 100.961950][ T6625] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.1083: corrupted in-inode xattr: e_value size too large [ 100.976356][ T6625] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1083: couldn't read orphan inode 15 (err -117) [ 101.122408][ T6633] syzkaller1: entered promiscuous mode [ 101.128077][ T6633] syzkaller1: entered allmulticast mode [ 101.177377][ T6636] loop0: detected capacity change from 0 to 512 [ 101.432588][ T6652] $H: renamed from bond0 (while UP) [ 101.449707][ T6652] $H: entered promiscuous mode [ 101.454917][ T6652] bond_slave_0: entered promiscuous mode [ 101.460791][ T6652] bond_slave_1: entered promiscuous mode [ 101.483856][ T6656] batman_adv: batadv0: Adding interface: dummy0 [ 101.490284][ T6656] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.515673][ T6656] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 101.710291][ T6666] syzkaller0: entered promiscuous mode [ 101.715843][ T6666] syzkaller0: entered allmulticast mode [ 101.736115][ T6669] loop5: detected capacity change from 0 to 1024 [ 101.756795][ T6669] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 101.769210][ T6669] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.769210][ T6669] [ 101.778932][ T6669] EXT4-fs (loop5): Total free blocks count 0 [ 101.785026][ T6669] EXT4-fs (loop5): Free/Dirty block details [ 101.791208][ T6669] EXT4-fs (loop5): free_blocks=0 [ 101.796234][ T6669] EXT4-fs (loop5): dirty_blocks=0 [ 101.801328][ T6669] EXT4-fs (loop5): Block reservation details [ 101.807420][ T6669] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 101.893800][ T6680] : renamed from vlan1 (while UP) [ 102.042195][ T6685] loop3: detected capacity change from 0 to 2048 [ 102.043357][ T6689] loop0: detected capacity change from 0 to 512 [ 102.056929][ T6687] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 102.068386][ T6685] loop3: p1 < > p4 [ 102.073036][ T6685] loop3: p4 size 8388608 extends beyond EOD, truncated [ 102.430628][ T6692] $H: renamed from bond0 (while UP) [ 102.439857][ T6692] $H: entered promiscuous mode [ 102.444973][ T6692] bond_slave_0: entered promiscuous mode [ 102.450963][ T6692] bond_slave_1: entered promiscuous mode [ 102.468371][ T6695] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 102.505611][ T6699] net_ratelimit: 50 callbacks suppressed [ 102.505632][ T6699] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 102.904529][ T6711] loop5: detected capacity change from 0 to 512 [ 102.911604][ T6705] syzkaller0: entered promiscuous mode [ 102.917132][ T6705] syzkaller0: entered allmulticast mode [ 102.989407][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1120'. [ 103.163793][ T6725] syzkaller1: entered promiscuous mode [ 103.169334][ T6725] syzkaller1: entered allmulticast mode [ 103.288887][ T6731] loop0: detected capacity change from 0 to 512 [ 103.296058][ T6731] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.307350][ T6731] EXT4-fs (loop0): 1 truncate cleaned up [ 103.313652][ T6731] EXT4-fs mount: 54 callbacks suppressed [ 103.313664][ T6731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.337280][ T6731] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 103.344104][ T6731] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.351911][ T6731] vhci_hcd vhci_hcd.0: Device attached [ 103.414911][ T6733] vhci_hcd: connection closed [ 103.415313][ T145] vhci_hcd: stop threads [ 103.424356][ T145] vhci_hcd: release socket [ 103.428888][ T145] vhci_hcd: disconnect device [ 103.930311][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.949838][ T6739] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 103.962077][ T6742] loop6: detected capacity change from 0 to 512 [ 103.995112][ T6748] batman_adv: batadv0: Adding interface: dummy0 [ 104.001729][ T6748] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.027101][ T6748] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 104.098879][ T6755] loop3: detected capacity change from 0 to 1024 [ 104.118436][ T6757] syzkaller0: entered promiscuous mode [ 104.124011][ T6757] syzkaller0: entered allmulticast mode [ 104.137821][ T6755] EXT4-fs: Ignoring removed orlov option [ 104.160345][ T6755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.220951][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.430685][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1142'. [ 104.436110][ T6771] loop3: detected capacity change from 0 to 512 [ 104.447715][ T6771] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.458883][ T6771] EXT4-fs (loop3): 1 truncate cleaned up [ 104.464890][ T6771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.483041][ T6771] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 104.489673][ T6771] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.497551][ T6771] vhci_hcd vhci_hcd.0: Device attached [ 104.570838][ T6775] vhci_hcd: connection closed [ 104.571039][ T3924] vhci_hcd: stop threads [ 104.580273][ T3924] vhci_hcd: release socket [ 104.584777][ T3924] vhci_hcd: disconnect device [ 105.082118][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.362234][ T6794] syzkaller0: entered promiscuous mode [ 105.367950][ T6794] syzkaller0: entered allmulticast mode [ 105.525374][ T6811] loop0: detected capacity change from 0 to 1024 [ 105.549997][ T6811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.562558][ T6814] loop3: detected capacity change from 0 to 1024 [ 105.572513][ T6811] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.586858][ T6814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.648992][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 105.649011][ T29] audit: type=1326 audit(1753204362.711:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.691031][ T29] audit: type=1326 audit(1753204362.751:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.714650][ T29] audit: type=1326 audit(1753204362.751:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.738219][ T29] audit: type=1326 audit(1753204362.751:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.762048][ T29] audit: type=1326 audit(1753204362.751:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.785598][ T29] audit: type=1326 audit(1753204362.751:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.809652][ T29] audit: type=1326 audit(1753204362.751:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.833098][ T29] audit: type=1326 audit(1753204362.751:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.856885][ T29] audit: type=1326 audit(1753204362.751:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.880676][ T29] audit: type=1326 audit(1753204362.751:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a7b6e9a9 code=0x7ffc0000 [ 105.919315][ T3924] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 393: padding at end of block bitmap is not set [ 105.934216][ T3924] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 105.947037][ T3924] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.947037][ T3924] [ 105.967093][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.338338][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.372545][ T6837] loop6: detected capacity change from 0 to 1024 [ 106.388944][ T6837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.695447][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1161'. [ 106.700575][ T6844] loop3: detected capacity change from 0 to 1024 [ 106.728661][ T6844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.840726][ T6850] loop7: detected capacity change from 0 to 164 [ 106.845294][ T6851] loop0: detected capacity change from 0 to 1024 [ 106.853985][ T6850] Unable to read rock-ridge attributes [ 106.854149][ T6851] EXT4-fs: Ignoring removed orlov option [ 106.864507][ T6850] Unable to read rock-ridge attributes [ 106.869600][ T6851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.909376][ T6854] loop7: detected capacity change from 0 to 1024 [ 106.919123][ T6854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.950685][ T6854] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1164: Allocating blocks 449-513 which overlap fs metadata [ 106.974330][ T6854] EXT4-fs (loop7): pa ffff888106951850: logic 48, phys. 177, len 21 [ 106.982433][ T6854] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 107.005571][ T5146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.029211][ T6859] loop7: detected capacity change from 0 to 512 [ 107.110455][ T5102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.245170][ T6857] ================================================================== [ 107.253375][ T6857] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 107.261378][ T6857] [ 107.263703][ T6857] write to 0xffff88811a09b254 of 4 bytes by task 6851 on cpu 0: [ 107.271342][ T6857] xas_set_mark+0x12b/0x140 [ 107.275947][ T6857] __folio_start_writeback+0x1dd/0x440 [ 107.281421][ T6857] ext4_bio_write_folio+0x5ad/0x9f0 [ 107.286650][ T6857] mpage_submit_folio+0xe4/0x170 [ 107.291693][ T6857] mpage_process_page_bufs+0x39b/0x4a0 [ 107.297183][ T6857] mpage_prepare_extent_to_map+0x741/0xaa0 [ 107.303016][ T6857] ext4_do_writepages+0xa1a/0x21c0 [ 107.308312][ T6857] ext4_writepages+0x176/0x300 [ 107.313140][ T6857] do_writepages+0x1c3/0x310 [ 107.317745][ T6857] file_write_and_wait_range+0x156/0x2c0 [ 107.323402][ T6857] generic_buffers_fsync_noflush+0x45/0x120 [ 107.329408][ T6857] ext4_sync_file+0x1ab/0x690 [ 107.334202][ T6857] vfs_fsync_range+0x10d/0x130 [ 107.339029][ T6857] ext4_buffered_write_iter+0x34f/0x3c0 [ 107.344617][ T6857] ext4_file_write_iter+0x383/0xf00 [ 107.349841][ T6857] iter_file_splice_write+0x5f2/0x970 [ 107.355249][ T6857] direct_splice_actor+0x156/0x2a0 [ 107.360382][ T6857] splice_direct_to_actor+0x312/0x680 [ 107.365772][ T6857] do_splice_direct+0xda/0x150 [ 107.370558][ T6857] do_sendfile+0x380/0x650 [ 107.374983][ T6857] __x64_sys_sendfile64+0x105/0x150 [ 107.380201][ T6857] x64_sys_call+0xb39/0x2fb0 [ 107.384799][ T6857] do_syscall_64+0xd2/0x200 [ 107.389327][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.395428][ T6857] [ 107.397763][ T6857] read to 0xffff88811a09b254 of 4 bytes by task 6857 on cpu 1: [ 107.405505][ T6857] __writeback_single_inode+0x1f9/0x7c0 [ 107.411127][ T6857] writeback_single_inode+0x167/0x3e0 [ 107.416531][ T6857] sync_inode_metadata+0x5b/0x90 [ 107.421492][ T6857] generic_buffers_fsync_noflush+0xd9/0x120 [ 107.427420][ T6857] ext4_sync_file+0x1ab/0x690 [ 107.432115][ T6857] vfs_fsync_range+0x10d/0x130 [ 107.436907][ T6857] ext4_buffered_write_iter+0x34f/0x3c0 [ 107.442477][ T6857] ext4_file_write_iter+0x383/0xf00 [ 107.447692][ T6857] iter_file_splice_write+0x5f2/0x970 [ 107.453091][ T6857] direct_splice_actor+0x156/0x2a0 [ 107.458231][ T6857] splice_direct_to_actor+0x312/0x680 [ 107.463640][ T6857] do_splice_direct+0xda/0x150 [ 107.468431][ T6857] do_sendfile+0x380/0x650 [ 107.472867][ T6857] __x64_sys_sendfile64+0x105/0x150 [ 107.478166][ T6857] x64_sys_call+0xb39/0x2fb0 [ 107.482779][ T6857] do_syscall_64+0xd2/0x200 [ 107.487330][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.493247][ T6857] [ 107.495577][ T6857] value changed: 0x0a000021 -> 0x04000021 [ 107.501293][ T6857] [ 107.503709][ T6857] Reported by Kernel Concurrency Sanitizer on: [ 107.509944][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.0.1163 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 107.520734][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.530801][ T6857] ================================================================== [ 107.574080][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.750972][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.