last executing test programs: 2m17.736585246s ago: executing program 0 (id=127): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x40020005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3ff, 0x10, 0xfffd}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x221, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x140d, 0x403, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x6ad575dd3d2d679c}, 0x10) sendto$inet(r1, &(0x7f0000000100)="ab", 0xff80, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000400)={0x0, 0x7, 0xf00}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(r7, 0x8924, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") statx(r10, &(0x7f0000000280)='./file1\x00', 0x800, 0x1, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xffffffff, 0x0, 0x0, 0x100000000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000e00)=ANY=[]) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008041}, 0x4008890) socket$inet6(0xa, 0x3, 0x3c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) 2m16.616474071s ago: executing program 0 (id=133): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=r2, @ANYBLOB="0072c1"], 0x28}}], 0x1, 0x14) fcntl$setlease(r0, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095", @ANYRES32=r3, @ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000400)=ANY=[], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x18) close(r6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000004c0)='./file1\x00', 0x420481, 0x40) open$dir(0x0, 0x105003, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f00000006c0)=ANY=[@ANYBLOB="040cd9fb816dd5a75206dfce163ebe6f59ce4b1f7b5f77a5"], 0x14, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 2m16.508053183s ago: executing program 0 (id=135): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000640)='./file0\x00', 0x400a02, 0x8) dup3(0xffffffffffffffff, r0, 0x0) mlock(&(0x7f0000707000/0x4000)=nil, 0x4000) socketpair(0x11, 0x1, 0x0, &(0x7f00000003c0)) syz_clone(0x20000, 0x0, 0x2c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x200, 0xf87a, 0x40, 0x0, 0x1}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000e581cf62bdd77150bf7639a4100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180001000000004100000000000000180200005ae98180acdcb3c51ee456c154653d26e4cbd5269d7bb4a5b74e0e521c58ec65ea404fb34f4aef548eb95f5a693457a955f59e3d413abcd73d7284f494a22d2eccfc6fc261ed8bc18aea6eaf826ce6894a4ea999e75e2964aed2cffe7fa8d31d5f387f52afacc3e9825e24db708a4b48245fa50a537ec944cc86b45843359b5c6792d4f513d28113b4844ef481033c1dc47cfd5c2420996ae86a4e49dabfcb11a72a3cb49211ef7f92576185543668ee688f835b58db0efe0f3d740e77c3d8aad1a26ae09826816f90624d1a9554580b05b9fc", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 2m15.456954428s ago: executing program 0 (id=151): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x4) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x58}], 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x7ff, 0xffff) semget(0x0, 0x2, 0x2) socket(0x1e, 0x4, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000003c0)=0x2, 0x12) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800", @ANYRES32=r6], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async) r11 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r11, &(0x7f0000000280)={0x18, 0x2, {0x2, @local}}, 0x1e) (async) preadv(r10, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r10, 0x29, 0x37, &(0x7f00000000c0)={0x2b, 0xb, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x8, [0x1]}}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x46d}, @generic={0x80, 0x36, "02fc75485096adbd96a15d6129ffdd304a2f5c09f9869148a75ee5ca1176728214d24c9c474a5384b90c927124f21efbce26073651c9"}, @ra={0x5, 0x2, 0x4b}]}, 0x60) ioctl$SG_IO(r9, 0x2285, 0x0) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r4, @ANYRES8=r8], &(0x7f0000000200)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m15.456524008s ago: executing program 0 (id=152): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES16, @ANYRES8=r0, @ANYRES32, @ANYBLOB, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9febff0718"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) syz_genetlink_get_family_id$nl802154(0x0, r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="50000000df769abff203755c8a1fbee4e1d27633", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000018a47d510b2799e147b95afccdd0b27dcbfcce2edc195e4fa9f3cbafae126efb952965a73dc77dde07ff1e035ecee2f21b896cf6aec15bb1b0fcc0c79c5a48c7398a5d0ad18934e42943d807f1516c72db06e9f3b9f5cb0582f6d4fe665a1bb984301d2ae9f5b582139952960eab3eb711a4e50145", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x8840) sigaltstack(0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x143900, 0x184) close(r3) 2m15.315658319s ago: executing program 0 (id=155): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x44, 0x4eb, &(0x7f0000000540)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) rename(&(0x7f0000000140)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 2m0.199549691s ago: executing program 32 (id=155): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x44, 0x4eb, &(0x7f0000000540)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) rename(&(0x7f0000000140)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 3.462502391s ago: executing program 3 (id=2553): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x9, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x20c}, {&(0x7f00000005c0)="f1c8e38398ab3b", 0x7}, {&(0x7f0000001400)="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", 0x1000}], 0x3}}], 0x1, 0x4000) 2.522808594s ago: executing program 3 (id=2573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2.231178569s ago: executing program 3 (id=2578): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40402, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0x54, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)=""/111, 0x37, 0x6f, 0x0, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x10, &(0x7f0000000500)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcf1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x76, &(0x7f0000000580)=""/118, 0x41100, 0x1, '\x00', r6, @fallback=0x16, r7, 0x8, &(0x7f0000000a80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0xf, 0x7fff, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f0000000b00)}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0x0, &(0x7f0000000200)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYRES32, @ANYBLOB="008f86ed6af58f42b643e30000020000000000009a525c872d736641716a3f1cf1819797e5436cdf353c9a0c6a16ae44df02e25fee29670a76288f54", @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000001c0)=0x9c) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="301000003b0007010100000000000000017c00000400fc80181001"], 0x1030}}, 0x4c884) 1.228797952s ago: executing program 2 (id=2591): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40402, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000080), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x80, 0x40, 0x8, 0xfffffeff, {{0x21, 0x4, 0x2, 0x3, 0x84, 0x64, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @loopback, {[@rr={0x7, 0xf, 0xe7, [@local, @remote, @rand_addr=0x64010100]}, @end, @lsrr={0x83, 0x17, 0xa, [@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0xd, "cd868ad0af3c887ef47471"}, @lsrr={0x83, 0xf, 0x60, [@remote, @local, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xb9, 0x3, 0x1, [{@empty, 0x5}, {@loopback, 0x6}, {@local, 0x10}, {@multicast1, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffc8a}]}]}}}}}) 1.131835104s ago: executing program 1 (id=2595): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40402, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) writev(r1, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2) 560.784122ms ago: executing program 5 (id=2605): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x2000000, [{0x0, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) 555.133272ms ago: executing program 4 (id=2606): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x3fffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@newtaction={0x2a4, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x28c, 0x1, [@m_connmark={0xfc, 0x1c, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffe01, 0xeab9, 0x6, 0x7, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1000, 0x3, 0x1, 0xffa}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28, 0xffff, 0x7, 0x10, 0x4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x80, 0x3, 0x5, 0x5}, 0xd2a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x0, 0x5}, 0x4}}]}, {0x3d, 0x6, "06081f972c75dc3e25913a9244759758ca2a684b23ba369f326e9677ae093592efc91432f56b8e0350b6d1a51365ea0092ba6958035003b95c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x18c, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x15d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @random="7b64d143ba29", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xf800, 0x7}}}}}}, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) 508.792883ms ago: executing program 5 (id=2607): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x2000000, [{0x0, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) 461.734273ms ago: executing program 3 (id=2608): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x9, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000b900fdffffff18110000", @ANYRES32=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x20c}, {&(0x7f00000005c0)="f1c8e38398ab3b", 0x7}, {&(0x7f0000001400)="7de7678bc9f42de5e9f4530e62d929540201ec0575b575fd6c1e2fe4af507eb6db09852d6cd4b5b3f69a4ba69732922c2e995569d5680aff5622f2caa8a8fcb33a91bbf40f19a21f3b7c62f4d05ed08c2fb02dc68cefd539029493d8ea604b5a1c85a14376c7d5e27db1827a0734f092b45564c216f797ee02f3906af2bed7bd5663462bb199447dee16e3f563db3bf34cbe982ad20cd98d56f9986a5acc31006ea24caf945a9c53f860ab3b161d072930fdea12a5eb943563431db99f683aa3d5bb5d65a0163c1bc1149c8afd4ce2c93354848c785264e46b6f76dba40bf6f9077358db9ca62877f17166f057a31351692ff1879dfb440f68478597ebf7cc4b410bd0c14bda294223ab66794343400df8d7cdb6bbf06d018b17067c3b46516450d3f0b055fa8df46d972733ae77275bc01f119ca4df9ae3b6729415c76c7641cb341578ce20181ec8910300de0bdcf7b41d91e1b3ddaa491d7b4a538dd6007170ac2b359d7dbb2e4c7096691f1d9136d3ce4033fd003996ca882305e54a5385a07aef17243ad2de1d1c0af311c199c87f2d5857eb32c199e5b531f7b554a41f76e569d34fda43c9fd725ad368dd306e452b7e68f0eda56e1cbc1a1dbed99526823a91496c899ec7eccfc92975265d5b636a7007d3a238e10d4be40599820bc54fdf32eba15a173abaf0d688d450fe4e737313608af24a797690e3c4db9680abc415a9889a390b536ff5de5c36e0acf2f0099cd1fa84a505ec22a3c762cb9b18edd7802ffa8a8b655c1c9e4cb4f5e48eba416ea9d7ffead907fbf02a9346c27fd118cc516e66d772989b737860163f81a265ce9b81662ec8e8b1c0abd89e3259df1ba95ad5e0c3933e7089ad2cb72a03735cb1a0eb127a274c7b5445b99ed36c4059fbad08b2b33031162fba377876821ef6e4c4802e3a29010fe6b39c0e75d4593b2267708e52fd1547aa025685e1d3cfa4acf6c22413455d914a4533b3384df4e76ff52fc5d0221f9e372151af6b497be6fca8410477a0ba7c39bbe74ce4b3beaa9522a0182026f7f04147e1d4765883e70904f77be76e34535a315506516df1c023a7ba274642d921cbf9e1e2c0b0a9ae274f742e6f6f978daf7ec5718482ae4e6f3de8369f671989ada0134595ce6d7263f8815e6ff6d5d3f84258abeeeb01121d0a500077dc4b6eeb48cda6982bafc29f6a4db27540b91d335f6f2c62818c72261a76aaa952744f2b04ee19ab2a31add2644b42e14eab44edc5f37e1b7bd6630d079a7807e8be74af03bde0f9948b51f5a08ca2966aa2c62cf627adb941b6346eb3e4984d03bb040fc5bf780529f1eb1cd5441ad76f78609a38d956f65180fad949737d5260b6f3fb6a62c5ea0b1b351a6df6695c9bab43a41d6ba5340cc46afe21e313e394bdc56f4b7c811564e11601805461b106dc29e8f69c85f4ed3eedba58df3b44e5e08e26c30e8575979870281395609563fff33f8ad3770942ea3af894d813f65b3f60b624a422cce7ec1f5542e02017acb3fd8f46231f0be4ae9f5d0553999929e6ac5ccd9356f9625f1573a8fd9a79ed6c2e33c7de4e525d41594b3aa35906e535977a6a401b1f528b2944219e1caf957417168ecf8a319902b1dccceed6a83e6b4a91a1bad80cd6bd450de50685520ee3af9e42497f60caad58a3640764152e06153e8c0d662e5ca785cfef19136135b57cb0e863f2d2e5449b46f2b508ae15df010dc7ef03596aad329bc45beea49fdc0a39b50836322b6517e3231faa998eb1dafddb95e2275302a82f7e501e3de4a3a3780c59f1556fa0037e720ea75fc64d872b3f7b7d58c391eae47c7df281a2772bd35a7747d26a7e086558d96682b501361591393fc18529e7e2399850b4b0d8791b9e7189d68b928141f55b01470f9df444701b99788fcbb8a454803a07ce7c41ddb1d4e5c3eb2283bd2ecf43dc530f382715a99ffefc0b68a8c06812c89d72e4153fdbc49dcda0fa662c573d83c91f21b82ad364599e0b66aa5d2b5dcd7d11638de94ca9c40ee9da505de57e619d7dcff76ce8e2ab108d4dc2f1177da4ce4c3975adb86fe7bbcfce9f469ac365d584e0809f010e1c039217ff91359756595acdc701450b7f30ceba39363d62d663138b0df69602cbbe7c5ab86fc6b6143b54ddd125894f24de87705b14179d21f8e8b36838845f1b475abdd9c28de616d726e8bf049572ced9be6a3357fad0533796729536206253ee9f99755cc136012ef8a65481366d4b85f02809c64d7be4717548c4981f86eeb8a2940296570c07233886eae0f50f86b67d85118390c420e75ca305ec374a7c5c5b4b96528e65a6db464ec2fb8cb3e1e93604fc81d45e6e08fd2809ba61a8ac89edf63d474c6fea36c6ae67dc49df49073e686bfdf7c486b4296e312040460c23235c834df85f6bcdcbb096d5ba3b3fec69d887664a1d62da66c6a4b5c9d8c272e513ef3d624a59d9ed9b6e4f2933a71fb46fe4ed68ddd5c1a4ec6e81d952e13c76db9f40bc8f71ba12b2cd5776f6cd781620bfbfd4dbe51b51936ade8bb8abcb635760752778d3d774989bcc2a56445fe2a0af8eca3bfcf6d934afaf08efdc7b0b5a2f8f469f6f2f41cf279e6d528db80682bc95065ac4b208f682ea635ec14e2d1fa759e48a608815ee541e8a74f58ebc2006103db6d354ab64c5665e4ed318a061028e761166971230fd7c330ab4fb64c1a370b8101aa8125cdffb3a4e380bd1193d95d2880f468119c67a4438343e0b2eeb9848937f872b0b1e8375c16e14bfe2bdeb38fe9203f5061f060603312ea6e08a5290d4b27a06f3c64074b9374b551299f07813bbd4bf7c05807967a6636d4b3f467be61378fba6c542b482d1b3855ecd0f4b355ae72531d5bb2b9d60ca17c63985be1e2def89091fb63a21065ac5d911d63c78aa3155c641234d73747a99039efa388d4e58b7f5389dda475ad777e131e426219556c3a035f5bb8820ab3644916cf11d0283bb4fc6bda038110a13bff2834b1b961890da1b0b39883d49bf8933bef70583493c7e26d87da5bc504b95e294f7538dfa3c6b695ad82c279282d3b8fc5ec948fc09a8671edf87f85394d91d65a6ba3f134e67dd166985d42833dadf8b11b7fa848e46b2e50133f0d6d30dc443a54fb7b80d15ec1493fc77eb9ad0654db058e5efa6faf25650825f8c7a3d3318b736b0f9c9c8ee53f356a26e5052946d4fe71bb8fdc837672825f19359ab938cb6651dd92763820f21fd890f1cf15cc4d4d2e983555752160137c183279a1331e429ecf9a01fdfd9f17a0e70334d3f5cf49e5210f8f97b0afb10e6598d8840014492663cf3264561d082660e465bcf99c1fce23a4331210f479dc49686d6854dfc63d7153588a73db46db1282ad27ec65f3036e7acfab8a7c4e554a0a020fe5b37cbdcf8e2d84a502fc2059ef0fb24add0f34a662eec1a724ab5a833edb162ff9bcef98acc3146d4716c3fffd6516f24bf6a6d470ad05141742bd40247da34c415723f0f73e2643d5af7c1acf6da1e01f978a3621cd27b4a626714184c9c5fdb5e17eff820a4772661057dc34e1daeec29d2dec355a8c328a12b6174888ee766f55e2d9dd2c3437b9f5d64fcc14544db1f35ed48e545e6f7d1901249f2d9dc94c267d5df8a755d581932666864b2eca40696a4f2ed6660549329c56382cc3db86faf73128cfe79f571a17354a5cdcfbbe7580a62e2b968f9e3a236ec6d136a1acf1ce3086b19ed4daca868db5dc05c436b2a52601f543fe25fbac877023ca9bb3f09628baeed1d061b385feda43f1a37e8852394ed1a75259789997c8022df4acf654a0d0764e1d6fa6a60df777e1e541c9e51b5da93eee60c827753bec8d4ba3f5683fd2226dc8acab174938b7b982cc998bb7c8e99bbe2e216470d42d96e15558772e0ce862d54778af997eb0599bea5a713f9a087c356ad5a58129d6b8254a669e62d2a33be2dae7553944f6819f91defe3bbe385a944ae903337098688e92ad7edfb5dd25a79f4497cac1a57278deda8567cda7dccaedb78bfe0a598caa4dab78f6dbadbb953aa359715b5173a8c9f8b6870dac365a21a6234cdff38598621043231c564c88af76db252ddc9d73eecb9a0395fbd2fee846e2c8f7570f1406d5723f380fe2e315c6d2bfbc441989e5a92195b852af719160292ed76e4405fc94fc116ba327b46a8fe98dfd74fbca146b19f8d3f29732973be01e7b5fdcb1bb8f4b4863e81d0a254beaaa2263d8e33eb763e2ff8dacea06f1e5215b389d7cff7a6909d54d9eaeaa4e8b5380966873e099feea1cce9f978091fbde6494e04358c9e31e02ae65c34c3ed592e630c8f42bf14b0f1fd7b74335883779b6f842c2e6b5dff569e47c2043b703d291128888261cd3a0aced91cbce10961c948793386a4dca0772152a32db3583c0dfe5384f477b97ae5167e045b7f0caa20a39d7e2feacd283b341d3f05ff7f5ff612441379bb0e4d1777ab5c991b09b6a42cba5e99a5c2992aafbc164821ead690416214f7d712491059e152c15a21d1aec801fa084dcda4a659ff1f69ba8a5737bb46a028b8d3b1a3cf232c5ee8deea05f2426a8cbe2ab90ba62c7620d2db9a5ea7124037460b54d3db7d63305d1c35acdecff8ce3c4e02ec1c16e1ead9cf0bf654cec1bf551b3b7eb7cafe82733e65355be9b156a453adf505aebff3e36afe356467a321d4dd540b7419cd69b63a4118f737c7cf994211d317d9063ee5cc17031708b0f6c726da8eef592aa51b837e7f02803ddd09d4ad0891fc2d9347daa04dcee237d82db8d640ffe4a951870c6bda7981a82b5d5ee6a518d5abb3d0d2a1f988bd979c1fcd880bc0dd62ee9633b6687c9a2d3d50a909abe9d22550e297b6d0fc54474b41fc3e74a87c6af1c1e1cb7b280c07efae678004ec1334fdf7f23786c5028d9a94b53d7e69bfa13acbef57576f14ccc12dea05760798ae24cc9a31c8cfca8156455e6418c9d61bfb8efe6b10cf9852ae8f69fed5d109aebf9d8918f9ee776d526056a98716142ff8ec6bbc82db942e8a0e1631f6b03210a7800b1d3c85178af80844e1ed1e78d732b2e451b43230835b158864928d45bb222761dc6755866bb245d7720aade67a755c37e1cb8deed7a89d58c42e67d943ce8ed0bc87e68abf467df8757af18a7437b304c1e99bd317c3775f9800275b186c3ee13acee609c4673f0e4fe4218d080436486e107db4ec03f91f23275383e29e5ed35cc890041c8f0b8bb4d784068e065a4360ff4a2fdaec28e27460c64ba91e4afdefc9cfad017ea9294c9682f16eb30aa112db2443327767bcf0719ca9c5a1b92ae6699b838e88d07a017d226331c92d823f5d822d632719df8913d5df1e3ce6648fac72e3902ac1d87a58b624ca09e16f37e0fae97fbb1f04fc0387357dea8244a277c87bbde65ec0ba011adc91f9856b11107fefa44822c25088199599a90e4d43f9c67368c9666a5b3f0ff175193f5c0ebb374e54a80148c38e208fd05345682e36994ead2dc3d8d67bf9665cb70cf305177097e0639a2bed7a28b07e57a1b23926513ef5eba1cb6a0d19f5c5cfa77ff93206aed85daa51e167be28ccedd04e4b85182eabb42ad4ad13807d29fd21dd525f49cee22663b99345d3b29ad6e1fa902fe1810808a4fe2273446f9c312ab5d8684a77d85fdc8fcf656b2ea53e86ab9a9b99bbe05245f0c8b14fff975bd470936304c8c0df32d925eb4f48b41461e4533bb1ca78a5235853318f40d1df1db1e0b8b979d33e9141dd676beb22c1fc19f5fd", 0x1000}], 0x3}}], 0x1, 0x4000) 453.467363ms ago: executing program 4 (id=2609): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x31, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r4, 0xffffffffffffffff, 0x5a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x15, 0x9, 0x8, 0x3, 0x10000, r4, 0xfffe00, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @value=r0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x40000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() rt_sigqueueinfo(r7, 0xffffffff, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 382.204564ms ago: executing program 5 (id=2610): r0 = socket(0x15, 0x80000, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0xe) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) close_range(r3, r3, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYBLOB="de2f2914abd5e70392cd5ef18d20cb6955663de9cc6f4cf4477f3d619cb74d68d9dd8342aee9afda3ca24e083393b65eb8dc6cc7920fbca6962182a49503aa03e70ae3f78fa3042465bbc445b77a8bd26e450bf8e791a612830f8e9b9aa2ee7c1e9cce4c0b58977234f061d2f0a53a942f8e7f4b1eff4be313c42c51d847"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r9, &(0x7f0000000140)=""/94, 0x5e, 0x40012020, 0x0, 0x0) write(r0, &(0x7f00000000c0)="23fca23c431a4b6737dff43270", 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) fsync(0xffffffffffffffff) 336.918625ms ago: executing program 1 (id=2611): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) msgget$private(0x0, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 280.847976ms ago: executing program 5 (id=2612): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40402, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15 HID v0.00 Device [sy] on syz0 [ 156.272378][T10184] hub 9-0:1.0: USB hub found [ 156.277150][T10184] hub 9-0:1.0: 8 ports detected [ 156.387874][T10194] hub 8-0:1.0: USB hub found [ 156.420864][T10194] hub 8-0:1.0: 8 ports detected [ 156.463797][T10201] loop4: detected capacity change from 0 to 1024 [ 156.464119][T10201] EXT4-fs: Ignoring removed orlov option [ 156.696869][T10215] loop2: detected capacity change from 0 to 512 [ 156.710588][T10215] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2076: bg 0: block 288: padding at end of block bitmap is not set [ 156.737566][T10215] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 156.747260][T10214] loop5: detected capacity change from 0 to 128 [ 156.754413][T10215] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2076: attempt to clear invalid blocks 1024 len 1 [ 156.908876][T10220] tipc: Started in network mode [ 156.914232][T10220] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 156.957140][T10215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2076: invalid indirect mapped block 1819239214 (level 0) [ 156.992864][T10214] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.002930][T10215] EXT4-fs (loop2): 1 truncate cleaned up [ 157.003349][T10220] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 157.017180][T10220] tipc: Enabled bearer , priority 10 [ 157.290186][ T29] kauditd_printk_skb: 615 callbacks suppressed [ 157.290227][ T29] audit: type=1326 audit(1752008942.582:12774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.361305][ T29] audit: type=1326 audit(1752008942.582:12775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.385003][ T29] audit: type=1326 audit(1752008942.582:12776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.408675][ T29] audit: type=1326 audit(1752008942.582:12777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.432354][ T29] audit: type=1326 audit(1752008942.582:12778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.456001][ T29] audit: type=1326 audit(1752008942.582:12779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.479658][ T29] audit: type=1326 audit(1752008942.582:12780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.481509][T10231] loop2: detected capacity change from 0 to 2048 [ 157.503406][ T29] audit: type=1326 audit(1752008942.582:12781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.533360][ T29] audit: type=1326 audit(1752008942.582:12782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.557091][ T29] audit: type=1326 audit(1752008942.582:12783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 157.605114][T10236] loop4: detected capacity change from 0 to 512 [ 157.635146][T10231] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.674386][T10236] EXT4-fs (loop4): too many log groups per flexible block group [ 157.682253][T10236] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 157.709503][T10231] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2083: corrupted xattr block 128: bad e_name length [ 157.723233][T10236] EXT4-fs (loop4): mount failed [ 157.728295][T10231] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 157.737418][T10231] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2083: corrupted xattr block 128: bad e_name length [ 157.759911][T10231] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 157.769137][T10231] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2083: corrupted xattr block 128: bad e_name length [ 157.799026][T10214] 9pnet_fd: Insufficient options for proto=fd [ 157.801406][T10231] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 157.911791][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 157.944474][T10254] ip6gretap0: entered promiscuous mode [ 157.950056][T10254] macsec0: entered allmulticast mode [ 157.959516][T10254] ip6gretap0: entered allmulticast mode [ 157.997255][T10254] ip6gretap0: left allmulticast mode [ 158.002783][T10254] ip6gretap0: left promiscuous mode [ 158.010944][ T36] tipc: Node number set to 1 [ 158.066158][T10266] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2093'. [ 158.144252][T10271] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2095'. [ 158.245195][T10278] loop3: detected capacity change from 0 to 2048 [ 158.288806][T10280] loop4: detected capacity change from 0 to 512 [ 158.303395][T10280] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.343712][T10280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.377621][T10294] hub 9-0:1.0: USB hub found [ 158.383769][T10280] EXT4-fs (loop4): 1 truncate cleaned up [ 158.397837][T10294] hub 9-0:1.0: 8 ports detected [ 158.436197][T10297] loop2: detected capacity change from 0 to 1024 [ 158.447094][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.454942][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.463193][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.469477][T10280] tipc: Enabling of bearer rejected, already enabled [ 158.470843][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.479080][T10297] ext4: Bad value for 'mb_optimize_scan' [ 158.486202][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.499680][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.507519][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.515273][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.522983][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.530695][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.538600][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.546343][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.554042][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.561795][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.569533][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.577278][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.585128][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.592986][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.600750][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.608511][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.616239][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.624368][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.632135][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.639857][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.647576][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.655347][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.663116][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.670799][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.678630][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.686419][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.694147][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.701856][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.712723][ T9] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.793479][T10311] hub 9-0:1.0: USB hub found [ 158.797539][T10305] fido_id[10305]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.804921][T10311] hub 9-0:1.0: 8 ports detected [ 158.854261][T10311] loop4: detected capacity change from 0 to 1024 [ 158.876198][T10307] loop3: detected capacity change from 0 to 512 [ 158.883488][T10307] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.890367][T10307] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.920415][T10307] EXT4-fs (loop3): 1 truncate cleaned up [ 158.988530][T10307] tipc: Started in network mode [ 158.993565][T10307] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 159.003096][T10307] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 159.011777][T10307] tipc: Enabled bearer , priority 10 [ 159.193268][T10334] loop3: detected capacity change from 0 to 2048 [ 159.200699][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'. [ 159.257128][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.264950][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.272737][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.280496][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.288263][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.295978][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.303780][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.311473][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.319148][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.326860][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.328018][T10349] hub 9-0:1.0: USB hub found [ 159.334596][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.334623][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.354628][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.362347][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.362903][T10349] hub 9-0:1.0: 8 ports detected [ 159.370029][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.382633][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.390317][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.398106][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.405840][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.413590][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.421295][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.429000][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.436727][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.444488][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.452209][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.459954][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.467721][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.475422][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.483282][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.487972][T10351] loop2: detected capacity change from 0 to 164 [ 159.490987][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.491015][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.491096][ T3603] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 159.520694][T10349] loop3: detected capacity change from 0 to 1024 [ 159.548560][ T3603] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.670090][T10357] fido_id[10357]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.794240][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.802224][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.810107][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.817994][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.825708][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.833447][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.841168][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.848851][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.856847][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.864678][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.872450][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.880202][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.888117][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.895872][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.903936][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.911640][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.919325][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.927193][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.934893][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.942650][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.950486][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.958313][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.966169][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.973911][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.981623][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.989290][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 159.997187][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 160.004953][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 160.012639][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 160.020312][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 160.028056][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 160.035929][ T36] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 160.059615][ T36] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.123286][T10376] loop2: detected capacity change from 0 to 2048 [ 160.132608][ T36] tipc: Node number set to 1 [ 160.185866][T10376] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.205879][T10378] fido_id[10378]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.228188][T10376] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2128: corrupted xattr block 128: bad e_name length [ 160.253447][T10376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 160.330294][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 160.369729][T10376] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2128: corrupted xattr block 128: bad e_name length [ 160.391115][T10376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 160.401218][T10376] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2128: corrupted xattr block 128: bad e_name length [ 160.421107][T10376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 160.474269][T10394] loop1: detected capacity change from 0 to 512 [ 160.496360][T10394] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2133: bg 0: block 288: padding at end of block bitmap is not set [ 160.521113][T10398] loop5: detected capacity change from 0 to 128 [ 160.549219][T10398] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.567104][T10394] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 160.694691][T10408] loop3: detected capacity change from 0 to 128 [ 160.709026][T10394] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2133: attempt to clear invalid blocks 1024 len 1 [ 160.757123][T10408] ext4 filesystem being mounted at /464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.790127][T10412] hub 9-0:1.0: USB hub found [ 160.814295][T10415] loop4: detected capacity change from 0 to 512 [ 160.827119][T10412] hub 9-0:1.0: 8 ports detected [ 160.868225][T10412] loop2: detected capacity change from 0 to 1024 [ 160.874995][T10394] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2133: invalid indirect mapped block 1819239214 (level 0) [ 160.900516][T10415] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.921592][T10415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.927487][T10398] 9pnet_fd: Insufficient options for proto=fd [ 160.962364][T10415] EXT4-fs (loop4): 1 truncate cleaned up [ 160.988124][T10421] loop3: detected capacity change from 0 to 1024 [ 161.001577][T10421] EXT4-fs: Ignoring removed nobh option [ 161.007228][T10421] EXT4-fs: Ignoring removed bh option [ 161.052590][T10394] EXT4-fs (loop1): 1 truncate cleaned up [ 161.092457][T10415] tipc: Enabling of bearer rejected, already enabled [ 161.174804][T10427] hub 9-0:1.0: USB hub found [ 161.179526][T10427] hub 9-0:1.0: 8 ports detected [ 161.244274][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 161.255485][T10427] loop2: detected capacity change from 0 to 1024 [ 161.290761][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.298761][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.306484][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.314202][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.321903][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.329598][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.337378][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.345125][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.352839][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.360629][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.368365][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.376166][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.383925][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.391641][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.399365][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407293][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407383][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407409][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407438][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407553][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407581][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407607][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407667][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407697][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407726][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407796][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407818][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407840][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407879][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.407903][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.408116][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.408145][ T3395] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 161.412455][ T3395] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 161.472310][T10450] fido_id[10450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.486437][T10449] loop5: detected capacity change from 0 to 512 [ 161.487133][T10449] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.489393][T10449] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.493100][T10449] EXT4-fs (loop5): 1 truncate cleaned up [ 161.504298][T10449] tipc: Started in network mode [ 161.504332][T10449] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 161.504484][T10449] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 161.504738][T10449] tipc: Enabled bearer , priority 10 [ 161.652272][T10464] loop5: detected capacity change from 0 to 1024 [ 161.652749][T10464] ext4: Bad value for 'mb_optimize_scan' [ 161.680795][T10466] loop5: detected capacity change from 0 to 2048 [ 161.720031][T10466] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.720965][T10466] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2155: corrupted xattr block 128: bad e_name length [ 161.747239][T10466] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 161.747326][T10466] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2155: corrupted xattr block 128: bad e_name length [ 161.748539][T10466] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 161.748566][T10466] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2155: corrupted xattr block 128: bad e_name length [ 161.748806][T10466] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 161.766531][T10457] loop1: detected capacity change from 0 to 512 [ 161.767377][T10457] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.801327][T10457] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.814716][T10457] EXT4-fs (loop1): 1 truncate cleaned up [ 161.816010][T10457] tipc: Enabling of bearer rejected, already enabled [ 161.949117][T10474] loop5: detected capacity change from 0 to 512 [ 162.137013][T10476] loop1: detected capacity change from 0 to 512 [ 162.138458][T10474] EXT4-fs (loop5): too many log groups per flexible block group [ 162.151174][T10474] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 162.151652][T10476] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.181153][T10474] EXT4-fs (loop5): mount failed [ 162.186499][T10476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.218351][T10476] EXT4-fs (loop1): 1 truncate cleaned up [ 162.277675][T10476] EXT4-fs mount: 70 callbacks suppressed [ 162.277695][T10476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.299059][T10488] loop5: detected capacity change from 0 to 512 [ 162.331675][T10488] EXT4-fs (loop5): too many log groups per flexible block group [ 162.339387][T10488] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 162.347269][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 162.347284][ T29] audit: type=1326 audit(1752008947.642:13483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f682b6dd290 code=0x7ffc0000 [ 162.379685][T10488] EXT4-fs (loop5): mount failed [ 162.394171][ T29] audit: type=1326 audit(1752008947.672:13484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f682b6dd677 code=0x7ffc0000 [ 162.417893][ T29] audit: type=1326 audit(1752008947.672:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f682b6dd290 code=0x7ffc0000 [ 162.441517][ T29] audit: type=1326 audit(1752008947.672:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 162.465227][ T29] audit: type=1326 audit(1752008947.672:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.1.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682b6de929 code=0x7ffc0000 [ 162.490041][T10472] tipc: Enabling of bearer rejected, already enabled [ 162.510971][ T36] tipc: Node number set to 1 [ 162.524295][ T29] audit: type=1326 audit(1752008947.822:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 162.535386][T10495] loop2: detected capacity change from 0 to 512 [ 162.547938][ T29] audit: type=1326 audit(1752008947.822:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 162.577971][ T29] audit: type=1326 audit(1752008947.822:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 162.601928][T10495] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.614439][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.674568][T10495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.676483][ T29] audit: type=1326 audit(1752008947.822:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 162.706870][T10495] EXT4-fs (loop2): 1 truncate cleaned up [ 162.708307][ T29] audit: type=1326 audit(1752008947.822:13492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effdd37e963 code=0x7ffc0000 [ 162.715553][T10495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.775343][T10495] tipc: Started in network mode [ 162.780278][T10495] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 162.799907][T10495] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 162.808554][T10495] tipc: Enabled bearer , priority 10 [ 162.818468][T10504] loop1: detected capacity change from 0 to 1024 [ 162.881292][T10504] ext4: Bad value for 'mb_optimize_scan' [ 162.918303][T10507] loop5: detected capacity change from 0 to 2048 [ 162.956198][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.983778][T10507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.001866][T10511] loop1: detected capacity change from 0 to 512 [ 163.020550][T10511] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.036747][T10507] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.048810][T10507] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2167: corrupted xattr block 128: bad e_name length [ 163.079388][T10511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.104782][T10507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 163.114113][T10507] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2167: corrupted xattr block 128: bad e_name length [ 163.130733][T10507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 163.136496][T10500] ip6gretap0: entered promiscuous mode [ 163.146373][T10511] EXT4-fs (loop1): 1 truncate cleaned up [ 163.146541][T10507] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2167: corrupted xattr block 128: bad e_name length [ 163.155821][T10511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.157712][T10500] macsec0: entered allmulticast mode [ 163.174561][T10507] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 163.182314][T10500] ip6gretap0: entered allmulticast mode [ 163.208540][T10500] ip6gretap0: left allmulticast mode [ 163.213935][T10500] ip6gretap0: left promiscuous mode [ 163.222291][ T4580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.256112][T10511] tipc: Enabling of bearer rejected, already enabled [ 163.354731][T10532] loop2: detected capacity change from 0 to 256 [ 163.367305][T10537] loop3: detected capacity change from 0 to 512 [ 163.391750][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.429226][T10537] EXT4-fs (loop3): too many log groups per flexible block group [ 163.437011][T10537] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 163.509791][T10537] EXT4-fs (loop3): mount failed [ 163.612188][T10551] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2183'. [ 163.649164][T10555] netlink: 'syz.4.2185': attribute type 3 has an invalid length. [ 163.681325][T10555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10555 comm=syz.4.2185 [ 163.704071][T10555] loop4: detected capacity change from 0 to 512 [ 163.711526][T10555] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.739439][T10555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 163.753855][T10555] System zones: 0-2, 18-18, 34-34 [ 163.767684][T10566] IPVS: stopping master sync thread 4091 ... [ 163.773043][T10566] bridge2: entered promiscuous mode [ 163.773064][T10566] bridge2: entered allmulticast mode [ 163.801028][ T3395] tipc: Node number set to 1 [ 163.823753][T10572] hub 9-0:1.0: USB hub found [ 163.823814][T10572] hub 9-0:1.0: 8 ports detected [ 163.833072][T10555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.833139][T10555] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.834476][T10572] loop3: detected capacity change from 0 to 1024 [ 163.880341][T10572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.908329][T10555] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 163.930002][T10555] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2185: Failed to acquire dquot type 1 [ 163.940345][T10577] loop5: detected capacity change from 0 to 128 [ 163.958146][T10555] syz.4.2185 (10555) used greatest stack depth: 10048 bytes left [ 163.986860][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.014094][T10577] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.026794][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.026983][T10577] ext4 filesystem being mounted at /356/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.081784][T10582] nftables ruleset with unbound chain [ 164.118722][T10584] loop1: detected capacity change from 0 to 512 [ 164.144819][T10584] EXT4-fs (loop1): too many log groups per flexible block group [ 164.152711][T10584] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 164.161951][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 164.172710][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2195'. [ 164.182177][T10584] EXT4-fs (loop1): mount failed [ 164.212747][T10587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.222130][T10592] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2194'. [ 164.256787][T10577] 9pnet_fd: Insufficient options for proto=fd [ 164.364852][T10605] hub 4-0:1.0: USB hub found [ 164.369572][T10605] hub 4-0:1.0: 8 ports detected [ 164.395888][T10607] loop3: detected capacity change from 0 to 128 [ 164.407809][ T4580] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.437866][T10607] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.462817][T10615] loop4: detected capacity change from 0 to 1024 [ 164.470430][T10615] EXT4-fs: Ignoring removed orlov option [ 164.480401][T10614] loop1: detected capacity change from 0 to 1024 [ 164.487025][T10607] ext4 filesystem being mounted at /477/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.491842][T10615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.514424][T10617] hub 9-0:1.0: USB hub found [ 164.520648][T10614] ext4: Bad value for 'mb_optimize_scan' [ 164.533811][T10617] hub 9-0:1.0: 8 ports detected [ 164.583493][T10619] loop5: detected capacity change from 0 to 1024 [ 164.614025][T10619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.698110][ T4580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.733224][T10625] tipc: Enabling of bearer rejected, already enabled [ 164.773821][T10633] loop5: detected capacity change from 0 to 512 [ 164.802894][T10607] 9pnet_fd: Insufficient options for proto=fd [ 164.824029][T10633] EXT4-fs (loop5): too many log groups per flexible block group [ 164.831849][T10633] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 164.858920][T10633] EXT4-fs (loop5): mount failed [ 164.881484][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.985003][T10645] loop3: detected capacity change from 0 to 512 [ 165.001568][T10642] loop1: detected capacity change from 0 to 1024 [ 165.020084][T10642] EXT4-fs: Ignoring removed nobh option [ 165.025884][T10642] EXT4-fs: Ignoring removed bh option [ 165.035545][T10645] EXT4-fs (loop3): too many log groups per flexible block group [ 165.043281][T10645] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 165.051023][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.051218][T10645] EXT4-fs (loop3): mount failed [ 165.138213][T10642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.191406][T10642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.287456][T10661] loop5: detected capacity change from 0 to 256 [ 165.401361][T10663] loop3: detected capacity change from 0 to 1024 [ 165.435032][T10663] ext4: Bad value for 'mb_optimize_scan' [ 165.602063][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.609873][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.617615][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.625350][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.633056][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.640737][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.648466][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.656242][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.664002][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.671769][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.679569][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.687295][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.694986][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.702743][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.710571][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.718392][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.726107][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.733877][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.741582][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.749263][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.757085][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.764989][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.772763][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.780456][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.788165][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.796099][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.803911][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.805309][T10677] loop5: detected capacity change from 0 to 512 [ 165.811588][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.811616][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.833459][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.841470][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.849273][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 165.860084][T10677] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.879611][T10677] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.889771][T10673] loop1: detected capacity change from 0 to 512 [ 165.898965][T10673] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.906100][T10673] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.917311][ T36] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 165.917988][T10677] EXT4-fs (loop5): 1 truncate cleaned up [ 165.981694][T10687] fido_id[10687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.005598][T10673] EXT4-fs (loop1): 1 truncate cleaned up [ 166.011901][T10673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.023259][T10677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.026395][T10673] tipc: Enabling of bearer rejected, already enabled [ 166.109177][T10693] loop2: detected capacity change from 0 to 512 [ 166.160764][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.189522][T10693] EXT4-fs (loop2): too many log groups per flexible block group [ 166.197300][T10693] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 166.213686][T10693] EXT4-fs (loop2): mount failed [ 166.300397][T10706] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2232'. [ 166.308913][T10708] loop1: detected capacity change from 0 to 1024 [ 166.338174][T10708] ext4: Bad value for 'mb_optimize_scan' [ 166.423700][T10714] loop4: detected capacity change from 0 to 512 [ 166.449947][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.457701][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.462025][T10714] EXT4-fs (loop4): too many log groups per flexible block group [ 166.465441][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.473045][T10714] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 166.480658][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.495221][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.502911][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.510581][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.518531][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.526376][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.534105][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.541809][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.549550][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.557311][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.564995][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.572753][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.580493][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.588225][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.595990][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.603820][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.611604][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.619279][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.627126][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.634859][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.642636][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.650305][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.658023][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.665721][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.673535][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.681310][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.688983][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.696731][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.704439][ T3603] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 166.712262][T10714] EXT4-fs (loop4): mount failed [ 166.719807][ T3603] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 166.749033][ T4580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.813057][T10727] hub 9-0:1.0: USB hub found [ 166.826378][T10727] hub 9-0:1.0: 8 ports detected [ 166.850690][T10712] ip6gretap0: entered promiscuous mode [ 166.859625][T10712] macsec0: entered allmulticast mode [ 166.865089][T10712] ip6gretap0: entered allmulticast mode [ 166.873098][T10712] ip6gretap0: left allmulticast mode [ 166.878470][T10712] ip6gretap0: left promiscuous mode [ 166.924279][T10731] loop5: detected capacity change from 0 to 128 [ 166.958659][T10731] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.011354][T10731] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.039813][T10737] loop2: detected capacity change from 0 to 512 [ 167.077246][T10737] EXT4-fs (loop2): too many log groups per flexible block group [ 167.085037][T10737] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 167.101019][T10737] EXT4-fs (loop2): mount failed [ 167.156756][T10741] loop4: detected capacity change from 0 to 1024 [ 167.177875][T10744] loop3: detected capacity change from 0 to 1024 [ 167.186805][T10741] EXT4-fs: Ignoring removed orlov option [ 167.194205][T10744] ext4: Bad value for 'mb_optimize_scan' [ 167.201201][T10741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.227642][T10745] hub 4-0:1.0: USB hub found [ 167.248033][T10745] hub 4-0:1.0: 8 ports detected [ 167.252439][T10752] loop1: detected capacity change from 0 to 2048 [ 167.298978][T10750] loop3: detected capacity change from 0 to 512 [ 167.306059][T10750] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.317561][T10756] netlink: 'syz.1.2251': attribute type 10 has an invalid length. [ 167.318794][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.337474][T10750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.372280][T10750] EXT4-fs (loop3): 1 truncate cleaned up [ 167.397390][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 167.397408][ T29] audit: type=1326 audit(1752008952.692:14289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.412248][T10750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.440466][T10759] hub 9-0:1.0: USB hub found [ 167.454362][T10759] hub 9-0:1.0: 8 ports detected [ 167.454569][ T29] audit: type=1326 audit(1752008952.732:14290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.465370][ T4580] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.482893][ T29] audit: type=1326 audit(1752008952.732:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.515738][ T29] audit: type=1326 audit(1752008952.732:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.539361][ T29] audit: type=1326 audit(1752008952.732:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.545346][T10761] hub 9-0:1.0: USB hub found [ 167.563038][ T29] audit: type=1326 audit(1752008952.732:14294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.563078][ T29] audit: type=1326 audit(1752008952.732:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.563113][ T29] audit: type=1326 audit(1752008952.732:14296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.563147][ T29] audit: type=1326 audit(1752008952.732:14297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.580439][T10761] hub 9-0:1.0: 8 ports detected [ 167.591360][ T29] audit: type=1326 audit(1752008952.732:14298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10757 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdd37e929 code=0x7ffc0000 [ 167.797637][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2253'. [ 167.842539][T10782] loop5: detected capacity change from 0 to 1024 [ 167.849872][T10783] loop2: detected capacity change from 0 to 1024 [ 167.850548][T10782] EXT4-fs: Ignoring removed orlov option [ 167.859214][T10783] ext4: Bad value for 'mb_optimize_scan' [ 167.890668][ T2997] udevd[2997]: worker [6827] terminated by signal 33 (Unknown signal 33) [ 167.903419][ T2997] udevd[2997]: worker [6827] failed while handling '/devices/virtual/block/loop5' [ 167.939932][T10782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.979228][T10793] loop2: detected capacity change from 0 to 128 [ 168.009458][T10793] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.022190][T10793] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.085946][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.195163][T10799] hub 9-0:1.0: USB hub found [ 168.199906][T10799] hub 9-0:1.0: 8 ports detected [ 168.246647][T10797] loop3: detected capacity change from 0 to 512 [ 168.261683][T10797] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.302783][T10797] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.322036][T10797] EXT4-fs (loop3): 1 truncate cleaned up [ 168.328312][T10804] hub 9-0:1.0: USB hub found [ 168.339029][T10797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.348976][T10804] hub 9-0:1.0: 8 ports detected [ 168.378721][ T4580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.448375][T10812] loop5: detected capacity change from 0 to 2048 [ 168.457053][T10797] tipc: Enabling of bearer rejected, already enabled [ 168.497814][T10812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.510765][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2270'. [ 168.512149][T10812] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.533567][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.543404][T10812] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2269: corrupted xattr block 128: bad e_name length [ 168.583047][T10812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 168.596722][T10821] loop1: detected capacity change from 0 to 1024 [ 168.604455][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.618358][T10812] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2269: corrupted xattr block 128: bad e_name length [ 168.634087][T10821] ext4: Bad value for 'mb_optimize_scan' [ 168.640081][T10812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 168.649339][T10812] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2269: corrupted xattr block 128: bad e_name length [ 168.678863][T10812] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 168.685069][T10828] loop2: detected capacity change from 0 to 2048 [ 168.701969][T10825] loop4: detected capacity change from 0 to 1024 [ 168.725035][T10832] loop1: detected capacity change from 0 to 2048 [ 168.738329][ T4580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.781375][T10825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.801584][T10832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.836954][T10845] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2278'. [ 168.855320][T10842] hub 9-0:1.0: USB hub found [ 168.860264][T10832] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.871482][T10825] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2274'. [ 168.880715][T10842] hub 9-0:1.0: 8 ports detected [ 168.909056][T10832] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2277: corrupted xattr block 128: bad e_name length [ 168.929599][T10850] loop5: detected capacity change from 0 to 128 [ 168.940776][T10832] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 168.946970][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.956691][T10832] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2277: corrupted xattr block 128: bad e_name length [ 168.977566][T10850] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.998108][T10832] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 169.019340][T10850] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.032539][T10855] loop2: detected capacity change from 0 to 164 [ 169.040183][T10853] loop3: detected capacity change from 0 to 164 [ 169.049241][T10832] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2277: corrupted xattr block 128: bad e_name length [ 169.132834][T10832] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 169.163579][T10859] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2286'. [ 169.219261][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.303244][T10867] loop1: detected capacity change from 0 to 1024 [ 169.352069][T10866] loop4: detected capacity change from 0 to 2048 [ 169.369462][T10869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.387173][T10867] ext4: Bad value for 'mb_optimize_scan' [ 169.425336][T10869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.449433][T10866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.485274][T10871] loop3: detected capacity change from 0 to 256 [ 169.494597][T10869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.550984][T10866] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.569877][T10879] loop1: detected capacity change from 0 to 164 [ 169.584142][T10869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.623446][T10866] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2289: corrupted xattr block 128: bad e_name length [ 169.637480][T10866] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 169.646813][T10866] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2289: corrupted xattr block 128: bad e_name length [ 169.673019][ T4580] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.682496][T10866] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 169.692796][T10866] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2289: corrupted xattr block 128: bad e_name length [ 169.728318][T10866] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 169.879844][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.954783][T10869] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.955852][T10887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.979064][T10885] loop1: detected capacity change from 0 to 512 [ 170.024949][T10889] loop4: detected capacity change from 0 to 512 [ 170.033220][T10869] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.045830][T10869] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.054245][T10885] EXT4-fs (loop1): too many log groups per flexible block group [ 170.058156][T10869] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.061982][T10885] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 170.079035][T10893] loop5: detected capacity change from 0 to 2048 [ 170.086357][T10885] EXT4-fs (loop1): mount failed [ 170.099611][T10889] EXT4-fs (loop4): too many log groups per flexible block group [ 170.107629][T10889] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 170.147369][T10893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.173548][T10889] EXT4-fs (loop4): mount failed [ 170.176887][T10893] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.191773][T10893] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2298: corrupted xattr block 128: bad e_name length [ 170.209297][T10903] loop1: detected capacity change from 0 to 2048 [ 170.252391][T10893] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 170.275189][T10903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.294647][T10893] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2298: corrupted xattr block 128: bad e_name length [ 170.316108][T10903] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.342622][T10893] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 170.357457][T10893] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2298: corrupted xattr block 128: bad e_name length [ 170.373676][T10903] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2301: corrupted xattr block 128: bad e_name length [ 170.397873][T10916] hub 9-0:1.0: USB hub found [ 170.402865][T10916] hub 9-0:1.0: 8 ports detected [ 170.520816][T10923] loop4: detected capacity change from 0 to 2048 [ 170.535058][T10903] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 170.544392][T10903] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2301: corrupted xattr block 128: bad e_name length [ 170.558558][T10893] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 170.594208][ T4580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.605765][T10903] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 170.622340][T10923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.641969][T10903] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2301: corrupted xattr block 128: bad e_name length [ 170.657199][T10923] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.664294][T10928] loop2: detected capacity change from 0 to 2048 [ 170.670244][T10923] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2307: corrupted xattr block 128: bad e_name length [ 170.688651][T10923] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 170.698090][T10903] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 170.707587][T10923] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2307: corrupted xattr block 128: bad e_name length [ 170.723963][T10923] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 170.742555][T10923] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2307: corrupted xattr block 128: bad e_name length [ 170.777304][T10923] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 170.777957][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.851435][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.854083][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.868435][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.876197][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.878994][T10938] loop5: detected capacity change from 0 to 1024 [ 170.884022][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.898123][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.905867][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.908774][T10938] ext4: Bad value for 'mb_optimize_scan' [ 170.913561][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.913591][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.934898][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.936518][T10934] loop1: detected capacity change from 0 to 512 [ 170.942644][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.956619][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.964436][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.972129][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.979870][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.987588][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 170.995390][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.003132][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.010825][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.018574][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.026305][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.032407][T10934] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.034015][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.053407][T10934] EXT4-fs (loop1): mount failed [ 171.056250][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.068877][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.076632][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.084415][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.092128][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.099806][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.107751][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.115468][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.123222][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.131018][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.138705][ T2960] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 171.187941][ T2960] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 171.220324][T10945] loop4: detected capacity change from 0 to 1024 [ 171.230321][T10945] EXT4-fs: Ignoring removed nobh option [ 171.236040][T10945] EXT4-fs: Ignoring removed bh option [ 171.250679][T10948] hub 9-0:1.0: USB hub found [ 171.270163][T10946] fido_id[10946]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.294585][T10948] hub 9-0:1.0: 8 ports detected [ 171.303578][T10945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.320378][T10945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.367357][T10959] loop2: detected capacity change from 0 to 2048 [ 171.411283][T10959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.415087][T10967] hub 9-0:1.0: USB hub found [ 171.427280][T10959] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.443697][T10967] hub 9-0:1.0: 8 ports detected [ 171.480972][T10971] FAULT_INJECTION: forcing a failure. [ 171.480972][T10971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.494116][T10971] CPU: 1 UID: 0 PID: 10971 Comm: syz.5.2324 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 171.494210][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.494223][T10971] Call Trace: [ 171.494229][T10971] [ 171.494237][T10971] __dump_stack+0x1d/0x30 [ 171.494261][T10971] dump_stack_lvl+0xe8/0x140 [ 171.494287][T10971] dump_stack+0x15/0x1b [ 171.494309][T10971] should_fail_ex+0x265/0x280 [ 171.494422][T10971] should_fail+0xb/0x20 [ 171.494449][T10971] should_fail_usercopy+0x1a/0x20 [ 171.494558][T10971] _copy_from_user+0x1c/0xb0 [ 171.494647][T10971] perf_copy_attr+0x145/0x610 [ 171.494758][T10971] __se_sys_perf_event_open+0x67/0x11c0 [ 171.494794][T10971] ? vfs_write+0x75e/0x8e0 [ 171.494833][T10971] ? __rcu_read_unlock+0x4f/0x70 [ 171.494930][T10971] __x64_sys_perf_event_open+0x67/0x80 [ 171.494968][T10971] x64_sys_call+0x27ec/0x2fb0 [ 171.494996][T10971] do_syscall_64+0xd2/0x200 [ 171.495099][T10971] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.495134][T10971] ? clear_bhb_loop+0x40/0x90 [ 171.495161][T10971] ? clear_bhb_loop+0x40/0x90 [ 171.495184][T10971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.495286][T10971] RIP: 0033:0x7fea2386e929 [ 171.495306][T10971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.495325][T10971] RSP: 002b:00007fea21ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 171.495368][T10971] RAX: ffffffffffffffda RBX: 00007fea23a95fa0 RCX: 00007fea2386e929 [ 171.495382][T10971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 171.495398][T10971] RBP: 00007fea21ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.495413][T10971] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 171.495428][T10971] R13: 0000000000000000 R14: 00007fea23a95fa0 R15: 00007fff354d6218 [ 171.495448][T10971] [ 171.593268][T10959] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2321: corrupted xattr block 128: bad e_name length [ 171.705117][T10959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.717850][T10959] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2321: corrupted xattr block 128: bad e_name length [ 171.738336][T10959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.745878][T10965] ip6gretap0: entered promiscuous mode [ 171.753393][T10965] macsec0: entered allmulticast mode [ 171.758738][T10965] ip6gretap0: entered allmulticast mode [ 171.760784][T10959] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2321: corrupted xattr block 128: bad e_name length [ 171.779305][T10965] ip6gretap0: left allmulticast mode [ 171.782362][T10959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.784681][T10965] ip6gretap0: left promiscuous mode [ 171.845945][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.203362][T11001] hub 9-0:1.0: USB hub found [ 172.208288][T11001] hub 9-0:1.0: 8 ports detected [ 172.315012][T11006] loop1: detected capacity change from 0 to 1024 [ 172.332578][T11006] ext4: Bad value for 'mb_optimize_scan' [ 172.526430][T11016] loop1: detected capacity change from 0 to 1024 [ 172.534107][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 172.534122][ T29] audit: type=1326 audit(1752008957.832:14993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.564157][ T29] audit: type=1326 audit(1752008957.832:14994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.583914][T11018] hub 4-0:1.0: USB hub found [ 172.588116][ T29] audit: type=1326 audit(1752008957.832:14995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.601053][T11018] hub 4-0:1.0: 8 ports detected [ 172.616275][ T29] audit: type=1326 audit(1752008957.832:14996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.644789][ T29] audit: type=1326 audit(1752008957.832:14997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.686645][ T29] audit: type=1326 audit(1752008957.832:14998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.710349][ T29] audit: type=1326 audit(1752008957.832:14999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.734134][ T29] audit: type=1326 audit(1752008957.832:15000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.757777][ T29] audit: type=1326 audit(1752008957.832:15001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.781457][ T29] audit: type=1326 audit(1752008957.832:15002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.3.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5278f7e929 code=0x7ffc0000 [ 172.822648][T11016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.860027][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.868000][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.875726][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.883423][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.891144][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.898838][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.906658][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.914531][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.922315][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.929982][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.937867][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.945734][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.953431][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.961134][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.968915][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.976636][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.984481][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 172.992350][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.000038][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.007818][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.015557][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.023294][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.031023][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.038692][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.046387][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.054184][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.061920][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.069617][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.077551][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.085460][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.093191][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.101149][ T3395] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 173.159613][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.171161][ T3395] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 173.239957][T11041] fido_id[11041]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.241390][T11043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.283813][T11046] hub 4-0:1.0: USB hub found [ 173.306234][T11046] hub 4-0:1.0: 8 ports detected [ 173.424800][T11058] loop2: detected capacity change from 0 to 256 [ 173.654618][T11051] ip6gretap0: entered promiscuous mode [ 173.660188][T11051] macsec0: entered allmulticast mode [ 173.665556][T11051] ip6gretap0: entered allmulticast mode [ 173.705499][T11051] ip6gretap0: left allmulticast mode [ 173.710874][T11051] ip6gretap0: left promiscuous mode [ 173.745817][T11077] hub 9-0:1.0: USB hub found [ 173.750614][T11077] hub 9-0:1.0: 8 ports detected [ 173.810712][T11085] loop1: detected capacity change from 0 to 164 [ 173.812890][T11083] hub 9-0:1.0: USB hub found [ 173.823116][T11083] hub 9-0:1.0: 8 ports detected [ 173.823355][T11085] syz.1.2367: attempt to access beyond end of device [ 173.823355][T11085] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 173.844680][T11085] syz.1.2367: attempt to access beyond end of device [ 173.844680][T11085] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 173.860590][T11081] loop3: detected capacity change from 0 to 512 [ 173.887856][T11081] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.913225][T11081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.923390][T11089] loop4: detected capacity change from 0 to 128 [ 173.941519][T11089] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.963071][T11081] EXT4-fs (loop3): 1 truncate cleaned up [ 173.984197][T11081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.019746][T11089] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.059690][T11081] tipc: Enabling of bearer rejected, already enabled [ 174.226166][T11112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.265130][T11116] loop2: detected capacity change from 0 to 256 [ 174.314834][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.476750][T11131] hub 9-0:1.0: USB hub found [ 174.481987][T11131] hub 9-0:1.0: 8 ports detected [ 174.485739][T11129] hub 4-0:1.0: USB hub found [ 174.491932][T11129] hub 4-0:1.0: 8 ports detected [ 174.530425][T11133] loop4: detected capacity change from 0 to 2048 [ 174.543081][T11133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.559841][T11133] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.572744][T11133] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2386: corrupted xattr block 128: bad e_name length [ 174.599037][T11133] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 174.617547][T11133] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2386: corrupted xattr block 128: bad e_name length [ 174.635510][T11143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.655472][T11133] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 174.665359][T11133] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2386: corrupted xattr block 128: bad e_name length [ 174.679550][T11133] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 174.719269][T11149] loop3: detected capacity change from 0 to 1024 [ 174.726563][T11149] EXT4-fs: Ignoring removed nobh option [ 174.732245][T11149] EXT4-fs: Ignoring removed bh option [ 174.743276][T11151] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2393'. [ 174.852185][T11162] FAULT_INJECTION: forcing a failure. [ 174.852185][T11162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.865369][T11162] CPU: 0 UID: 0 PID: 11162 Comm: syz.3.2397 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 174.865417][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.865434][T11162] Call Trace: [ 174.865441][T11162] [ 174.865450][T11162] __dump_stack+0x1d/0x30 [ 174.865475][T11162] dump_stack_lvl+0xe8/0x140 [ 174.865498][T11162] dump_stack+0x15/0x1b [ 174.865519][T11162] should_fail_ex+0x265/0x280 [ 174.865581][T11162] should_fail+0xb/0x20 [ 174.865614][T11162] should_fail_usercopy+0x1a/0x20 [ 174.865732][T11162] _copy_from_user+0x1c/0xb0 [ 174.865757][T11162] ___sys_sendmsg+0xc1/0x1d0 [ 174.865818][T11162] __x64_sys_sendmsg+0xd4/0x160 [ 174.865860][T11162] x64_sys_call+0x2999/0x2fb0 [ 174.865882][T11162] do_syscall_64+0xd2/0x200 [ 174.865915][T11162] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.865949][T11162] ? clear_bhb_loop+0x40/0x90 [ 174.866016][T11162] ? clear_bhb_loop+0x40/0x90 [ 174.866073][T11162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.866100][T11162] RIP: 0033:0x7f5278f7e929 [ 174.866120][T11162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.866192][T11162] RSP: 002b:00007f52775e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.866217][T11162] RAX: ffffffffffffffda RBX: 00007f52791a5fa0 RCX: 00007f5278f7e929 [ 174.866234][T11162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 174.866250][T11162] RBP: 00007f52775e7090 R08: 0000000000000000 R09: 0000000000000000 [ 174.866266][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.866283][T11162] R13: 0000000000000000 R14: 00007f52791a5fa0 R15: 00007ffdf3891028 [ 174.866304][T11162] [ 175.114645][T11166] hub 4-0:1.0: USB hub found [ 175.119413][T11166] hub 4-0:1.0: 8 ports detected [ 175.169817][T11171] hub 9-0:1.0: USB hub found [ 175.174669][T11171] hub 9-0:1.0: 8 ports detected [ 175.373746][T11187] loop4: detected capacity change from 0 to 512 [ 175.380854][T11187] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.388693][T11187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.409415][T11187] EXT4-fs (loop4): 1 truncate cleaned up [ 175.417180][T11187] tipc: Enabling of bearer rejected, already enabled [ 175.492200][T11197] FAULT_INJECTION: forcing a failure. [ 175.492200][T11197] name failslab, interval 1, probability 0, space 0, times 0 [ 175.505036][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.1.2412 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 175.505069][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.505081][T11197] Call Trace: [ 175.505087][T11197] [ 175.505095][T11197] __dump_stack+0x1d/0x30 [ 175.505186][T11197] dump_stack_lvl+0xe8/0x140 [ 175.505212][T11197] dump_stack+0x15/0x1b [ 175.505233][T11197] should_fail_ex+0x265/0x280 [ 175.505272][T11197] should_failslab+0x8c/0xb0 [ 175.505298][T11197] kmem_cache_alloc_noprof+0x50/0x310 [ 175.505432][T11197] ? getname_flags+0x80/0x3b0 [ 175.505457][T11197] getname_flags+0x80/0x3b0 [ 175.505485][T11197] __se_sys_newstat+0x4b/0x280 [ 175.505553][T11197] ? fput+0x8f/0xc0 [ 175.505580][T11197] ? ksys_write+0x192/0x1a0 [ 175.505621][T11197] __x64_sys_newstat+0x31/0x40 [ 175.505704][T11197] x64_sys_call+0x781/0x2fb0 [ 175.505732][T11197] do_syscall_64+0xd2/0x200 [ 175.505768][T11197] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.505838][T11197] ? clear_bhb_loop+0x40/0x90 [ 175.505872][T11197] ? clear_bhb_loop+0x40/0x90 [ 175.505899][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.505993][T11197] RIP: 0033:0x7f682b6de929 [ 175.506012][T11197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.506034][T11197] RSP: 002b:00007f6829d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 175.506087][T11197] RAX: ffffffffffffffda RBX: 00007f682b905fa0 RCX: 00007f682b6de929 [ 175.506099][T11197] RDX: 0000000000000000 RSI: 0000200000003140 RDI: 0000200000003100 [ 175.506114][T11197] RBP: 00007f6829d47090 R08: 0000000000000000 R09: 0000000000000000 [ 175.506130][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.506145][T11197] R13: 0000000000000000 R14: 00007f682b905fa0 R15: 00007ffc48e783d8 [ 175.506249][T11197] [ 175.512576][T11199] hub 9-0:1.0: USB hub found [ 175.592454][T11201] loop4: detected capacity change from 0 to 1024 [ 175.596621][T11199] hub 9-0:1.0: 8 ports detected [ 175.643712][T11204] loop1: detected capacity change from 0 to 1024 [ 175.662846][T11201] EXT4-fs: Ignoring removed nobh option [ 175.679143][T11204] ext4: Bad value for 'mb_optimize_scan' [ 175.684204][T11201] EXT4-fs: Ignoring removed bh option [ 175.799363][T11214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.879645][T11219] loop4: detected capacity change from 0 to 1024 [ 175.891796][T11219] EXT4-fs: Ignoring removed orlov option [ 176.416981][T11229] ip6gretap0: entered promiscuous mode [ 176.423936][T11229] macsec0: entered allmulticast mode [ 176.429295][T11229] ip6gretap0: entered allmulticast mode [ 176.437535][T11229] ip6gretap0: left allmulticast mode [ 176.442996][T11229] ip6gretap0: left promiscuous mode [ 176.545970][T11237] loop4: detected capacity change from 0 to 1024 [ 176.575508][T11240] loop1: detected capacity change from 0 to 512 [ 176.612203][T11240] EXT4-fs (loop1): too many log groups per flexible block group [ 176.620086][T11240] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 176.630997][T11240] EXT4-fs (loop1): mount failed [ 176.769308][T11252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.893867][T11264] loop1: detected capacity change from 0 to 164 [ 176.924136][T11267] loop2: detected capacity change from 0 to 512 [ 176.976660][T11270] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2439'. [ 177.023339][T11274] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2440'. [ 177.039044][T11267] EXT4-fs (loop2): too many log groups per flexible block group [ 177.046877][T11267] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 177.061281][T11267] EXT4-fs (loop2): mount failed [ 177.126761][T11280] hub 9-0:1.0: USB hub found [ 177.131553][T11280] hub 9-0:1.0: 8 ports detected [ 177.212824][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2442'. [ 177.261624][T11292] loop5: detected capacity change from 0 to 2048 [ 177.274154][T11292] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.289848][T11292] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2446: corrupted xattr block 128: bad e_name length [ 177.304969][T11292] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 177.314836][T11292] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2446: corrupted xattr block 128: bad e_name length [ 177.351970][T11292] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 177.412180][T11292] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2446: corrupted xattr block 128: bad e_name length [ 177.463185][T11292] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 177.511882][T11307] loop5: detected capacity change from 0 to 164 [ 177.546477][ T29] kauditd_printk_skb: 886 callbacks suppressed [ 177.546495][ T29] audit: type=1326 audit(1752008962.842:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c57ae929 code=0x7ffc0000 [ 177.579689][T11309] loop4: detected capacity change from 0 to 164 [ 177.601197][ T29] audit: type=1326 audit(1752008962.872:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f29c57ae929 code=0x7ffc0000 [ 177.624993][ T29] audit: type=1326 audit(1752008962.872:15891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29c57ae963 code=0x7ffc0000 [ 177.649338][ T29] audit: type=1326 audit(1752008962.872:15892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29c57ad3df code=0x7ffc0000 [ 177.673123][ T29] audit: type=1326 audit(1752008962.872:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f29c57ae9b7 code=0x7ffc0000 [ 177.696670][ T29] audit: type=1326 audit(1752008962.872:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29c57ad290 code=0x7ffc0000 [ 177.724297][ T29] audit: type=1326 audit(1752008962.872:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29c57ae52b code=0x7ffc0000 [ 177.747869][ T29] audit: type=1326 audit(1752008962.882:15896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29c57ad58a code=0x7ffc0000 [ 177.771333][ T29] audit: type=1326 audit(1752008962.882:15897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29c57ad58a code=0x7ffc0000 [ 177.794753][ T29] audit: type=1326 audit(1752008962.882:15898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.4.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f29c57ad197 code=0x7ffc0000 [ 177.915304][T11316] loop4: detected capacity change from 0 to 512 [ 177.925173][T11316] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.934070][T11316] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.947100][T11316] EXT4-fs (loop4): 1 truncate cleaned up [ 178.043198][T11336] openvswitch: netlink: Message has 6 unknown bytes. [ 178.052908][T11335] loop2: detected capacity change from 0 to 1024 [ 178.053223][T11335] EXT4-fs: Ignoring removed orlov option [ 178.105785][T11318] loop3: detected capacity change from 0 to 128 [ 178.113664][T11318] msdos: Unknown parameter '0' [ 178.264816][T11343] loop1: detected capacity change from 0 to 1024 [ 178.291567][T11343] EXT4-fs: Ignoring removed nobh option [ 178.297285][T11343] EXT4-fs: Ignoring removed bh option [ 178.313133][T11345] loop3: detected capacity change from 0 to 512 [ 178.332831][T11345] EXT4-fs (loop3): too many log groups per flexible block group [ 178.333966][T11347] loop5: detected capacity change from 0 to 2048 [ 178.340562][T11345] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 178.364451][T11345] EXT4-fs (loop3): mount failed [ 178.400041][T11347] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.420078][T11347] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2463: corrupted xattr block 128: bad e_name length [ 178.435911][T11355] netlink: 'syz.4.2464': attribute type 29 has an invalid length. [ 178.469824][T11355] netlink: 'syz.4.2464': attribute type 29 has an invalid length. [ 178.499477][T11357] loop1: detected capacity change from 0 to 2048 [ 178.507878][T11347] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 178.517417][T11355] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2464'. [ 178.519809][T11347] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2463: corrupted xattr block 128: bad e_name length [ 178.546211][T11363] loop3: detected capacity change from 0 to 1024 [ 178.552737][T11347] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 178.561873][T11347] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2463: corrupted xattr block 128: bad e_name length [ 178.581357][T11355] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11355 comm=syz.4.2464 [ 178.594194][T11355] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11355 comm=syz.4.2464 [ 178.615036][T11363] EXT4-fs: Ignoring removed orlov option [ 178.617161][T11367] loop1: detected capacity change from 0 to 256 [ 178.627661][T11347] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 179.090421][T11391] loop4: detected capacity change from 0 to 512 [ 179.122639][T11391] EXT4-fs (loop4): too many log groups per flexible block group [ 179.130505][T11391] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 179.164040][T11391] EXT4-fs (loop4): mount failed [ 179.258787][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 179.283217][T11405] loop4: detected capacity change from 0 to 2048 [ 179.343137][T11413] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2484'. [ 179.418024][T11420] loop4: detected capacity change from 0 to 128 [ 179.438095][T11417] netlink: 'syz.3.2487': attribute type 3 has an invalid length. [ 179.448415][T11420] ext4 filesystem being mounted at /495/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.484853][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.492606][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.500311][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.508039][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.515890][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.523846][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.531575][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.539424][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.547237][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.555082][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.562881][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.570866][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.578628][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.586449][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.594247][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.602289][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.610206][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.617944][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.625644][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.633413][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.641199][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.648981][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.656744][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.664440][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.672237][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.679923][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.687653][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.695503][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.703274][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.711167][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.718906][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.726770][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 179.735346][ T3395] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 179.787532][T11436] fido_id[11436]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.864099][T11441] hub 4-0:1.0: USB hub found [ 179.869660][T11441] hub 4-0:1.0: 8 ports detected [ 179.921531][T11451] loop3: detected capacity change from 0 to 512 [ 179.947752][T11456] loop2: detected capacity change from 0 to 2048 [ 179.972498][T11451] EXT4-fs (loop3): too many log groups per flexible block group [ 179.980270][T11451] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 179.987965][T11451] EXT4-fs (loop3): mount failed [ 180.010527][T11456] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.053089][T11456] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2501: corrupted xattr block 128: bad e_name length [ 180.073010][T11456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 180.096632][T11469] loop4: detected capacity change from 0 to 1024 [ 180.100181][T11456] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2501: corrupted xattr block 128: bad e_name length [ 180.117590][T11469] EXT4-fs: Ignoring removed orlov option [ 180.128359][T11456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 180.213646][T11456] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2501: corrupted xattr block 128: bad e_name length [ 180.276542][T11456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 180.342701][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.350427][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.358326][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.366133][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.373842][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.381591][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.389535][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.397403][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.405255][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.412989][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.421157][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.428846][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.436606][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.444366][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.452142][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.459924][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.467624][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.475482][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.483333][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.491065][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.498882][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.506593][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.514335][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.522079][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.529758][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.537712][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.545697][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.553409][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.561187][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.568892][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.576583][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.584297][ T36] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 180.592591][ T36] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 180.636276][T11485] fido_id[11485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.667677][T11488] hub 9-0:1.0: USB hub found [ 180.675432][T11488] hub 9-0:1.0: 8 ports detected [ 180.858722][T11504] loop1: detected capacity change from 0 to 1024 [ 181.016146][T11504] EXT4-fs: Ignoring removed orlov option [ 181.045712][T11513] loop3: detected capacity change from 0 to 1024 [ 181.068737][T11513] ext4: Bad value for 'mb_optimize_scan' [ 181.113058][T11516] loop2: detected capacity change from 0 to 1024 [ 181.119919][T11516] EXT4-fs: Ignoring removed nobh option [ 181.125770][T11516] EXT4-fs: Ignoring removed bh option [ 181.204048][T11527] hub 9-0:1.0: USB hub found [ 181.252740][T11527] hub 9-0:1.0: 8 ports detected [ 181.373088][T11536] loop3: detected capacity change from 0 to 2048 [ 181.403673][T11540] loop4: detected capacity change from 0 to 512 [ 181.415624][T11542] loop2: detected capacity change from 0 to 2048 [ 181.446113][T11540] EXT4-fs (loop4): too many log groups per flexible block group [ 181.453869][T11540] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 181.462102][T11542] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.469882][T11540] EXT4-fs (loop4): mount failed [ 181.478054][T11542] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2531: corrupted xattr block 128: bad e_name length [ 181.504936][T11542] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 181.519090][T11548] loop3: detected capacity change from 0 to 1024 [ 181.534700][T11542] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2531: corrupted xattr block 128: bad e_name length [ 181.549035][T11548] ext4: Bad value for 'mb_optimize_scan' [ 181.574322][T11542] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 181.586900][T11542] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2531: corrupted xattr block 128: bad e_name length [ 181.618463][T11550] loop4: detected capacity change from 0 to 1024 [ 181.625505][T11542] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 181.647853][T11550] EXT4-fs: Ignoring removed orlov option [ 181.677320][T11555] loop3: detected capacity change from 0 to 1024 [ 181.713343][T11555] ext4: Bad value for 'mb_optimize_scan' [ 181.737344][T11557] loop4: detected capacity change from 0 to 1024 [ 181.761545][T11557] EXT4-fs: Ignoring removed nobh option [ 181.767294][T11557] EXT4-fs: Ignoring removed bh option [ 181.860065][T11569] loop3: detected capacity change from 0 to 1024 [ 181.877757][T11569] EXT4-fs: Ignoring removed orlov option [ 181.981879][T11581] loop5: detected capacity change from 0 to 2048 [ 182.015322][T11581] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.032143][T11581] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2545: corrupted xattr block 128: bad e_name length [ 182.047934][T11581] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 182.059597][T11581] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2545: corrupted xattr block 128: bad e_name length [ 182.090759][T11584] loop2: detected capacity change from 0 to 1024 [ 182.100207][T11584] EXT4-fs: Ignoring removed orlov option [ 182.125244][T11581] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 182.137934][T11591] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2548'. [ 182.151432][T11581] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2545: corrupted xattr block 128: bad e_name length [ 182.168819][T11581] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 182.245354][T11597] loop4: detected capacity change from 0 to 512 [ 182.280515][T11598] FAULT_INJECTION: forcing a failure. [ 182.280515][T11598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.293780][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.1.2551 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 182.293814][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.293901][T11598] Call Trace: [ 182.293910][T11598] [ 182.293919][T11598] __dump_stack+0x1d/0x30 [ 182.293944][T11598] dump_stack_lvl+0xe8/0x140 [ 182.293970][T11598] dump_stack+0x15/0x1b [ 182.293989][T11598] should_fail_ex+0x265/0x280 [ 182.294024][T11598] should_fail+0xb/0x20 [ 182.294054][T11598] should_fail_usercopy+0x1a/0x20 [ 182.294133][T11598] strncpy_from_user+0x25/0x230 [ 182.294160][T11598] ? kmem_cache_alloc_noprof+0x186/0x310 [ 182.294230][T11598] ? getname_flags+0x80/0x3b0 [ 182.294260][T11598] getname_flags+0xae/0x3b0 [ 182.294287][T11598] io_symlinkat_prep+0x127/0x1d0 [ 182.294317][T11598] io_submit_sqes+0x5e5/0xfd0 [ 182.294372][T11598] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 182.294469][T11598] ? 0xffffffff81000000 [ 182.294482][T11598] ? __rcu_read_unlock+0x4f/0x70 [ 182.294509][T11598] ? get_pid_task+0x96/0xd0 [ 182.294533][T11598] ? proc_fail_nth_write+0x12d/0x160 [ 182.294632][T11598] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.294673][T11598] ? vfs_write+0x75e/0x8e0 [ 182.294711][T11598] ? __rcu_read_unlock+0x4f/0x70 [ 182.294738][T11598] ? __fget_files+0x184/0x1c0 [ 182.294764][T11598] ? fput+0x8f/0xc0 [ 182.294809][T11598] __x64_sys_io_uring_enter+0x78/0x90 [ 182.294847][T11598] x64_sys_call+0x28c8/0x2fb0 [ 182.294869][T11598] do_syscall_64+0xd2/0x200 [ 182.294931][T11598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.294963][T11598] ? clear_bhb_loop+0x40/0x90 [ 182.294986][T11598] ? clear_bhb_loop+0x40/0x90 [ 182.295009][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.295056][T11598] RIP: 0033:0x7f682b6de929 [ 182.295071][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.295090][T11598] RSP: 002b:00007f6829d26038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 182.295110][T11598] RAX: ffffffffffffffda RBX: 00007f682b906080 RCX: 00007f682b6de929 [ 182.295123][T11598] RDX: 000000000000f2bb RSI: 00000000000048e9 RDI: 0000000000000003 [ 182.295136][T11598] RBP: 00007f6829d26090 R08: 0000000000000000 R09: 0000000000000000 [ 182.295148][T11598] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 182.295209][T11598] R13: 0000000000000000 R14: 00007f682b906080 R15: 00007ffc48e783d8 [ 182.295229][T11598] [ 182.568779][T11597] EXT4-fs (loop4): too many log groups per flexible block group [ 182.576566][T11597] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 182.599196][T11597] EXT4-fs (loop4): mount failed [ 182.658640][T11611] loop5: detected capacity change from 0 to 2048 [ 182.681061][T11611] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.732964][T11611] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2555: corrupted xattr block 128: bad e_name length [ 182.748991][ T29] kauditd_printk_skb: 989 callbacks suppressed [ 182.749023][ T29] audit: type=1326 audit(1752008968.052:16886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11614 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c57ae929 code=0x7ffc0000 [ 182.749706][T11611] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 182.755712][ T29] audit: type=1326 audit(1752008968.052:16887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11614 comm="syz.4.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f29c57ae929 code=0x7ffc0000 [ 182.813671][T11611] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2555: corrupted xattr block 128: bad e_name length [ 182.827455][T11611] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 182.836752][T11611] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2555: corrupted xattr block 128: bad e_name length [ 182.872591][T11611] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 182.943045][ T29] audit: type=1326 audit(1752008968.242:16888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2386e929 code=0x7ffc0000 [ 182.979919][ T29] audit: type=1326 audit(1752008968.272:16889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2386e929 code=0x7ffc0000 [ 183.003707][ T29] audit: type=1326 audit(1752008968.272:16890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2386e929 code=0x7ffc0000 [ 183.027362][ T29] audit: type=1326 audit(1752008968.272:16891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2386e929 code=0x7ffc0000 [ 183.051083][ T29] audit: type=1326 audit(1752008968.272:16892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2386e929 code=0x7ffc0000 [ 183.074943][ T29] audit: type=1326 audit(1752008968.272:16893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2386e929 code=0x7ffc0000 [ 183.098650][ T29] audit: type=1326 audit(1752008968.272:16894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2386e929 code=0x7ffc0000 [ 183.122448][ T29] audit: type=1326 audit(1752008968.272:16895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fea2386e929 code=0x7ffc0000 [ 183.180682][T11637] loop5: detected capacity change from 0 to 512 [ 183.217575][T11637] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.327860][T11647] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.2565: corrupted inode contents [ 183.342551][T11647] EXT4-fs (loop5): Remounting filesystem read-only [ 183.349305][T11647] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 183.419839][T11652] loop2: detected capacity change from 0 to 512 [ 183.453421][T11652] EXT4-fs (loop2): too many log groups per flexible block group [ 183.461243][T11652] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 183.468484][T11652] EXT4-fs (loop2): mount failed [ 183.501228][T11656] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2571'. [ 183.525629][T11662] FAULT_INJECTION: forcing a failure. [ 183.525629][T11662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.538877][T11662] CPU: 1 UID: 0 PID: 11662 Comm: syz.2.2574 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 183.538926][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.538941][T11662] Call Trace: [ 183.538948][T11662] [ 183.538957][T11662] __dump_stack+0x1d/0x30 [ 183.538985][T11662] dump_stack_lvl+0xe8/0x140 [ 183.539085][T11662] dump_stack+0x15/0x1b [ 183.539108][T11662] should_fail_ex+0x265/0x280 [ 183.539149][T11662] should_fail+0xb/0x20 [ 183.539232][T11662] should_fail_usercopy+0x1a/0x20 [ 183.539275][T11662] _copy_from_iter+0xcf/0xe40 [ 183.539315][T11662] ? __build_skb_around+0x1a0/0x200 [ 183.539422][T11662] ? __alloc_skb+0x223/0x320 [ 183.539461][T11662] netlink_sendmsg+0x471/0x6b0 [ 183.539515][T11662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.539618][T11662] __sock_sendmsg+0x142/0x180 [ 183.539650][T11662] ____sys_sendmsg+0x31e/0x4e0 [ 183.539694][T11662] ___sys_sendmsg+0x17b/0x1d0 [ 183.539748][T11662] __x64_sys_sendmsg+0xd4/0x160 [ 183.539803][T11662] x64_sys_call+0x2999/0x2fb0 [ 183.539831][T11662] do_syscall_64+0xd2/0x200 [ 183.539868][T11662] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.539895][T11662] ? clear_bhb_loop+0x40/0x90 [ 183.539983][T11662] ? clear_bhb_loop+0x40/0x90 [ 183.540005][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.540034][T11662] RIP: 0033:0x7effdd37e929 [ 183.540053][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.540144][T11662] RSP: 002b:00007effdb9e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.540165][T11662] RAX: ffffffffffffffda RBX: 00007effdd5a5fa0 RCX: 00007effdd37e929 [ 183.540182][T11662] RDX: 0000000020024090 RSI: 0000200000000040 RDI: 0000000000000003 [ 183.540198][T11662] RBP: 00007effdb9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.540215][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.540231][T11662] R13: 0000000000000000 R14: 00007effdd5a5fa0 R15: 00007ffcb07616a8 [ 183.540254][T11662] [ 183.802130][T11667] FAULT_INJECTION: forcing a failure. [ 183.802130][T11667] name failslab, interval 1, probability 0, space 0, times 0 [ 183.814835][T11667] CPU: 1 UID: 0 PID: 11667 Comm: syz.4.2577 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 183.814871][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.814887][T11667] Call Trace: [ 183.814898][T11667] [ 183.814908][T11667] __dump_stack+0x1d/0x30 [ 183.814933][T11667] dump_stack_lvl+0xe8/0x140 [ 183.814955][T11667] dump_stack+0x15/0x1b [ 183.814972][T11667] should_fail_ex+0x265/0x280 [ 183.815009][T11667] ? assoc_array_delete+0x58/0x950 [ 183.815033][T11667] should_failslab+0x8c/0xb0 [ 183.815059][T11667] __kmalloc_cache_noprof+0x4c/0x320 [ 183.815129][T11667] assoc_array_delete+0x58/0x950 [ 183.815148][T11667] ? security_key_permission+0x27/0x80 [ 183.815202][T11667] ? key_task_permission+0x2ac/0x2c0 [ 183.815314][T11667] ? key_validate+0xad/0xd0 [ 183.815345][T11667] key_move+0x11a/0x550 [ 183.815372][T11667] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 183.815441][T11667] ? __pfx_keyring_search_iterator+0x10/0x10 [ 183.815512][T11667] keyctl_keyring_move+0xd6/0x110 [ 183.815546][T11667] __se_sys_keyctl+0x5f7/0xb80 [ 183.815572][T11667] ? __rcu_read_unlock+0x4f/0x70 [ 183.815634][T11667] ? __fget_files+0x184/0x1c0 [ 183.815656][T11667] ? fput+0x8f/0xc0 [ 183.815682][T11667] __x64_sys_keyctl+0x67/0x80 [ 183.815714][T11667] x64_sys_call+0x2e7f/0x2fb0 [ 183.815743][T11667] do_syscall_64+0xd2/0x200 [ 183.815784][T11667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.815828][T11667] ? clear_bhb_loop+0x40/0x90 [ 183.815849][T11667] ? clear_bhb_loop+0x40/0x90 [ 183.815872][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.815914][T11667] RIP: 0033:0x7f29c57ae929 [ 183.815933][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.815965][T11667] RSP: 002b:00007f29c3e17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 183.815984][T11667] RAX: ffffffffffffffda RBX: 00007f29c59d5fa0 RCX: 00007f29c57ae929 [ 183.815998][T11667] RDX: fffffffffffffffe RSI: 000000001dd335e0 RDI: 000000000000001e [ 183.816014][T11667] RBP: 00007f29c3e17090 R08: 0000000000000000 R09: 0000000000000000 [ 183.816028][T11667] R10: 000000001dd335e0 R11: 0000000000000246 R12: 0000000000000001 [ 183.816041][T11667] R13: 0000000000000000 R14: 00007f29c59d5fa0 R15: 00007ffd5c2f7808 [ 183.816062][T11667] [ 183.859891][T11671] loop4: detected capacity change from 0 to 1024 [ 183.865283][T11671] EXT4-fs: Ignoring removed orlov option [ 183.877549][T11673] loop3: detected capacity change from 0 to 256 [ 184.121916][T11686] loop5: detected capacity change from 0 to 512 [ 184.217883][T11688] loop4: detected capacity change from 0 to 512 [ 184.248001][T11686] EXT4-fs (loop5): too many log groups per flexible block group [ 184.255946][T11686] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 184.271207][T11686] EXT4-fs (loop5): mount failed [ 184.278056][T11688] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 184.323278][T11688] EXT4-fs (loop4): 1 truncate cleaned up [ 184.468315][T11695] FAULT_INJECTION: forcing a failure. [ 184.468315][T11695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.481654][T11695] CPU: 1 UID: 0 PID: 11695 Comm: syz.3.2585 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 184.481694][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.481733][T11695] Call Trace: [ 184.481742][T11695] [ 184.481805][T11695] __dump_stack+0x1d/0x30 [ 184.481828][T11695] dump_stack_lvl+0xe8/0x140 [ 184.481886][T11695] dump_stack+0x15/0x1b [ 184.481903][T11695] should_fail_ex+0x265/0x280 [ 184.481970][T11695] should_fail+0xb/0x20 [ 184.482093][T11695] should_fail_usercopy+0x1a/0x20 [ 184.482187][T11695] _copy_from_user+0x1c/0xb0 [ 184.482208][T11695] memdup_user_nul+0x5f/0xe0 [ 184.482233][T11695] sel_write_validatetrans+0x19c/0x370 [ 184.482267][T11695] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 184.482373][T11695] vfs_write+0x266/0x8e0 [ 184.482444][T11695] ? __rcu_read_unlock+0x4f/0x70 [ 184.482467][T11695] ? __fget_files+0x184/0x1c0 [ 184.482489][T11695] ksys_write+0xda/0x1a0 [ 184.482597][T11695] __x64_sys_write+0x40/0x50 [ 184.482631][T11695] x64_sys_call+0x2cdd/0x2fb0 [ 184.482660][T11695] do_syscall_64+0xd2/0x200 [ 184.482718][T11695] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 184.482799][T11695] ? clear_bhb_loop+0x40/0x90 [ 184.482821][T11695] ? clear_bhb_loop+0x40/0x90 [ 184.482844][T11695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.482866][T11695] RIP: 0033:0x7f5278f7e929 [ 184.482884][T11695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.482952][T11695] RSP: 002b:00007f52775e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.482972][T11695] RAX: ffffffffffffffda RBX: 00007f52791a5fa0 RCX: 00007f5278f7e929 [ 184.482986][T11695] RDX: 000000000000007d RSI: 0000200000000080 RDI: 0000000000000003 [ 184.482999][T11695] RBP: 00007f52775e7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.483090][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.483102][T11695] R13: 0000000000000000 R14: 00007f52791a5fa0 R15: 00007ffdf3891028 [ 184.483134][T11695] [ 184.510574][T11698] hub 9-0:1.0: USB hub found [ 184.724886][T11698] hub 9-0:1.0: 8 ports detected [ 184.771155][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'. [ 184.818003][T11713] loop2: detected capacity change from 0 to 256 [ 184.840741][T11717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2593'. [ 184.971623][T11721] loop1: detected capacity change from 0 to 256 [ 185.206569][T11719] ip6gretap0: entered promiscuous mode [ 185.232817][T11719] macsec0: entered allmulticast mode [ 185.238189][T11719] ip6gretap0: entered allmulticast mode [ 185.246869][T11719] ip6gretap0: left allmulticast mode [ 185.252302][T11719] ip6gretap0: left promiscuous mode [ 185.327638][T11738] hub 9-0:1.0: USB hub found [ 185.338870][T11738] hub 9-0:1.0: 8 ports detected [ 185.339920][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.351570][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.359241][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.366939][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.374767][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.382769][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.390632][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.398781][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.406551][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.414316][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.422018][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.429783][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.437496][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.445186][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.452896][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.460583][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.468503][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.476243][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.484103][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.491908][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.499614][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.507326][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.515201][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.523015][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.530796][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.538562][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.546330][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.554212][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.562227][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.570083][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.577812][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.585623][ T3395] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 185.598740][ T3395] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 185.729846][T11762] loop5: detected capacity change from 0 to 256 [ 185.746394][T11760] loop1: detected capacity change from 0 to 512 [ 185.785749][T11760] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.805678][T11760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.831699][T11760] EXT4-fs (loop1): 1 truncate cleaned up [ 185.855808][T11760] tipc: Enabling of bearer rejected, already enabled [ 185.954252][T11772] loop2: detected capacity change from 0 to 2048 [ 185.980469][T11775] hub 9-0:1.0: USB hub found [ 185.992751][T11772] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.000566][T11775] hub 9-0:1.0: 8 ports detected [ 186.041783][T11772] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2615: corrupted xattr block 128: bad e_name length [ 186.060773][T11772] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 186.070980][T11770] ================================================================== [ 186.079089][T11770] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 186.086417][T11770] [ 186.088763][T11770] write to 0xffff888119761548 of 4 bytes by task 11773 on cpu 0: [ 186.096498][T11770] touch_atime+0x1e8/0x340 [ 186.100958][T11770] shmem_file_read_iter+0x477/0x540 [ 186.106193][T11770] copy_splice_read+0x3c4/0x5f0 [ 186.111070][T11770] splice_direct_to_actor+0x290/0x680 [ 186.116511][T11770] do_splice_direct+0xda/0x150 [ 186.121331][T11770] do_sendfile+0x380/0x650 [ 186.125772][T11770] __x64_sys_sendfile64+0x105/0x150 [ 186.131005][T11770] x64_sys_call+0xb39/0x2fb0 [ 186.135627][T11770] do_syscall_64+0xd2/0x200 [ 186.140179][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.146106][T11770] [ 186.148453][T11770] read to 0xffff888119761548 of 4 bytes by task 11770 on cpu 1: [ 186.156100][T11770] atime_needs_update+0x25f/0x3e0 [ 186.161155][T11770] touch_atime+0x4a/0x340 [ 186.165629][T11770] shmem_file_read_iter+0x477/0x540 [ 186.170870][T11770] copy_splice_read+0x3c4/0x5f0 [ 186.175767][T11770] splice_direct_to_actor+0x290/0x680 [ 186.181189][T11770] do_splice_direct+0xda/0x150 [ 186.185992][T11770] do_sendfile+0x380/0x650 [ 186.190610][T11770] __x64_sys_sendfile64+0x105/0x150 [ 186.195834][T11770] x64_sys_call+0xb39/0x2fb0 [ 186.200442][T11770] do_syscall_64+0xd2/0x200 [ 186.204979][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.210890][T11770] [ 186.213226][T11770] value changed: 0x159d6df9 -> 0x16360479 [ 186.218954][T11770] [ 186.221299][T11770] Reported by Kernel Concurrency Sanitizer on: [ 186.227571][T11770] CPU: 1 UID: 0 PID: 11770 Comm: syz.4.2614 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 186.240096][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.250171][T11770] ================================================================== [ 186.259050][T11772] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2615: corrupted xattr block 128: bad e_name length [ 186.275258][T11772] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 186.294339][T11772] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2615: corrupted xattr block 128: bad e_name length [ 186.325108][T11772] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15