last executing test programs: 2m4.698993682s ago: executing program 3 (id=589): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfff7fffb, 0x6, 0x0, 'queue0\x00', 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000640), 0x1, 0x451, &(0x7f00000001c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r5, r6, 0x0, 0x80000000007) 2m4.120460813s ago: executing program 3 (id=598): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYRES16], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000f7ff000010000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="38f206ea0090ec00"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) alarm(0xfffffffffffffffd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000c50000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, r6}, 0x40) syz_emit_ethernet(0x10c3, &(0x7f0000000540)=ANY=[], 0x0) 2m3.785534499s ago: executing program 3 (id=604): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r6 = syz_open_procfs(0x0, 0x0) openat2(r6, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000680)=0x81, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) sendmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef54086e0000000000000018df7028093cf8709632cad4866d74448d5385c80db3518564b1194247acfb3b463e0000000000000f3d1e51e1790748a23c3301974b905bbd18b3e54cb3cc90cb80fba7461df205e9837b06130349b207", 0x72}], 0x2}}, {{&(0x7f0000000840)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="5386a9f279d823237eec81a8e35aa178398046641f4d7c73ee3f04188760c16d6f38eba9f60aeb8f1c0a7e49ef98c4a7cfcb5a78f3eaddac1e690d1851529ef76c0b7e65cb2b59dee9a550dbdc234877f70d4996cdbbfb3fe1b274cf63ac08d9688e8594fcf59a2aafcaeeb701b3c4b8e08023392205f6c3b41bd448994cb56750f6467f024b928993a3c4ba", 0x8c}, {&(0x7f0000000980)="aaf43b5ca38e71ed6270d56df73a151ca43a3b666e106448b8720ec9ed58d6cb5566e7f690608e43cd7b3341935dee0bb8857d99e6c877bcdc316be40a3144493dd0c3d067d48b2d39ffffca58599f539bbc9ea9d43e87b5015b59afcc63c5cdc7bbb9044d41", 0x66}, {&(0x7f0000000a00)="70f8dc2e837ee962c3aa0ed90a17fcd315fefe963bcf88ef56236458af075cbc1f96e8ec41a801bf5856f6af198980f9110074d5a4", 0x35}, {&(0x7f0000000a40)="9a764945889cdb919dea3a8563ad32daf7605bb7e5e354413dfed7305b3bd52e9fe3204111911acd21a13bd719cefd450c51ef26571990856d4d6f1f319a8d5f6bc0d3534b1830a44c85e0caec96f6eb612796986bf58a19f4c0223ccc3cbb7f6055c8c74f3aad649a09ea683c01246514eeb42272a27206f115b27fb3a019283ff8a557a1b43096235c244f1d54ba86c995e3890870be2c0ac6", 0x9a}, {&(0x7f0000000b00)="35ac8d22326db76f1deec500bf76bf2684c7f5f28ad824311cb6679666d0c3bcef556ac2005722a46f", 0x29}], 0x5, &(0x7f0000000f40)=ANY=[@ANYBLOB="30000000000000008800000008000000f169e57f16550daf82f1430cc1a57682f24b04bfc86e95c1610000000000000080000000000000000901000006000000f8157dace5f94ab21138d51bed028eea02d497d1de52324957c18a7bb44432703c1e8fab753be03ff9dbbbe27190e0c0101fc4ca0e469932c829b449d69a1935b598b9a24a1f31bb4637c552b50f74d38d7ec57165f77ff308fc985669ca5d36a84dafcacfd063b13eac25307177714718c6000000000000000100000000000092010000133b0000e4c78b85791c735e8582dd6ee153b866e4152cbb7981b6c58ca24d3bdee06111142603e20c9b07eccf058eff347348df0e1e6fdf9dfd8469b16f0201a78269c57a62868d2fbc304f2d67951f7f263d045d0bd8d8938fa5296f6887ec28a2543abd3e31744827d3f6ec7980adb2fb4996a10d71fdfc923e3f5d4a6a08e1f13352a0f3a6cafc1b52c9798f63c0a4f81447053f999e4dcdd67fef2c8a43ec5e2d469d4118ff11127b8fc8f57ac2a5ad166cd9f9bacaa1bc85cabb7ba7dc93251dc2614a1522211f4c19a186a176f2d52fa18f8bc8337a9f8dbc01cf98f4cd9e7f39460ab3938ea272e19cf1670000000000a0000000000000000b0100000100000035261273856cd78adfa75a3134af6499d30cab1fcc250d76393845c2fe9589ca856d6384dc9c6df34ea1288616afb91be4418918d8ba7de02b6542dc01bcf9cd6dc39d843afa181928346a1bdb5a2b5efe524c3000aab066428c542db664abf343aae571a0090725713cf08411abf200d3884b81101cb7834bfe7889db92ecfb11bdb67ff5ea3fd9bdc1ceb9000000007800000000000000130100000200000059cee2b1a912c7776dbfeea52beeaaac19283a5fe40bc12eef0810ce2ea1949cba895d2e13a24633d9eb116f948132daf9d8fabbc6efcb3cc68b473308bc078067a501bbdf24e10960b11b3008f134f09a8b6f82149bda3dd96b50bb7bbe90ba9bc864705d8c7854"], 0x2c8}}], 0x2, 0x4000) close(r5) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') write$binfmt_elf64(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501", @ANYRES64=r5], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000640)=@req={0x28, &(0x7f00000003c0)={'bridge_slave_1\x00', @ifru_map={0x7, 0x1d38, 0xfff, 0x69, 0xff, 0x8}}}) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 2m3.7404838s ago: executing program 3 (id=605): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="770000001900000016000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 2m3.534965574s ago: executing program 3 (id=608): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r4 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @broadcast}, {0x306, @remote}, 0x30, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 'veth0_virt_wifi\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1010) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r3, 0x0, 0x3a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r6, @ANYRESOCT=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='f2fs_fiemap\x00', r7}, 0x18) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000080)={{0xff039010, 0x3}, {0xff039010, 0x10800402}, 0xc, 0x7}) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r10}, 0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0x2}) 2m3.201814091s ago: executing program 3 (id=613): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 2m3.163879692s ago: executing program 32 (id=613): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 1.973540911s ago: executing program 5 (id=3135): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000140)={[{@nodelalloc}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@noblock_validity}, {@nodioread_nolock}]}, 0xfe, 0x507, &(0x7f0000001cc0)="$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") 1.777204125s ago: executing program 5 (id=3138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 1.763978225s ago: executing program 4 (id=3139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 1.50261669s ago: executing program 0 (id=3146): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e24, 0x1, @mcast1, 0x7}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x8}, 0x18) r7 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) r10 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200283afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x4, 0x4) 1.423275642s ago: executing program 0 (id=3149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfff7fffb, 0x6, 0x0, 'queue0\x00', 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000640), 0x1, 0x451, &(0x7f00000001c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r6, r7, 0x0, 0x80000000007) 1.291373105s ago: executing program 2 (id=3152): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x8) write$cgroup_int(r1, &(0x7f0000000000)=0x4, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r4, 0x0, 0xffffffbf) read$watch_queue(r4, 0x0, 0x0) 1.263208585s ago: executing program 0 (id=3153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700be1fb900c529c137393e4ec7000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000080)={r7}, &(0x7f0000000140)=0x8) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010017"], 0x18}}, 0x2000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 915.317912ms ago: executing program 5 (id=3158): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540), 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) times(0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38be8810712bcabdfeae000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44047}, 0x810) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x5453, 0x7cb7562f2d67) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000000c0)=0xffffbdfe) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="57fec25f6150fa43bdabe6403be10e62c1b9da709bf29ca1792017f24e69f884555414789657f428f4ed3863f6589acc4d004952ef9ab4"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x1d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x95}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdaf}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xae6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000930000000d00ff00000000000010000000"], 0x14}}, 0x4008000) 906.524762ms ago: executing program 4 (id=3159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0/file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) mkdir(&(0x7f0000000000)='./control\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x3, 0xfffff370, 0x0, 0x0, 0x20000000, 0xfffffffd, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0xac0, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0x3, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xffffffff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0xb, 0xffffffff, 0x0, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0xfff, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0xfffffff8, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x1, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x894}}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000440)={[{@map_off}, {@overriderock, 0x0}, {@mode={'mode', 0x3d, 0xfffffffffffffffc}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x40000000058}}, {@block}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@nocompress}], [{@fowner_gt={'fowner>', 0xee01}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") 850.194503ms ago: executing program 5 (id=3160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r2) 833.464413ms ago: executing program 4 (id=3161): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x2}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000500)="8345522b07b881a0b7b7334d05556ce52dd8d4540fa616ddbb657105e0f545823e55a62779ca8aed27e3198a174a6e5bab33359b64ce1088ded705f4dc32b7f63f2edf7dda2589304807102182a2493e5097e87a232636", 0x57}, {&(0x7f0000000b80)="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", 0x16a}, {&(0x7f0000000640)="f271dd0a54b4e8d01ccbe281a70fa64c475a45229b558992c8926ae1", 0x1c}], 0x3, 0x0, 0x0, 0x40005}, 0x4008000) 833.045994ms ago: executing program 5 (id=3162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r7 = syz_open_procfs(0x0, 0x0) openat2(r7, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000680)=0x81, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) sendmmsg(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000840)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="5386a9f279d823237eec81a8e35aa178398046641f4d7c73ee3f04188760c16d6f38eba9f60aeb8f1c0a7e49ef98c4a7cfcb5a78f3eaddac1e690d1851529ef76c0b7e65cb2b59dee9a550dbdc234877f70d4996cdbbfb3fe1b274cf63ac08d9688e8594fcf59a2aafcaeeb701b3c4b8e08023392205f6c3b41bd448994cb56750f6467f024b928993a3c4ba", 0x8c}, {&(0x7f0000000980)="aaf43b5ca38e71ed6270d56df73a151ca43a3b666e106448b8720ec9ed58d6cb5566e7f690608e43cd7b3341935dee0bb8857d99e6c877bcdc316be40a3144493dd0c3d067d48b2d39ffffca58599f539bbc9ea9d43e87b5015b59afcc63c5cdc7bbb9044d41", 0x66}, {&(0x7f0000000a00)="70f8dc2e837ee962c3aa0ed90a17fcd315fefe963bcf88ef56236458af075cbc1f96e8ec41a801bf5856f6af198980f9110074d5a4", 0x35}, {&(0x7f0000000b00)="35ac8d22326db76f1deec500bf76bf2684c7f5f28ad824311cb6679666d0c3bcef556ac2", 0x24}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="30000000000000008800000008000000f169e57f16550daf82f1430cc1a57682f24b04bfc86e95c1610000000000000080000000000000000901000006000000f8157dace5f94ab21138d51bed028eea02d497d1de52324957c18a7bb44432703c1e8fab753be03ff9dbbbe27190e0c0101fc4ca0e469932c829b449d69a1935b598b9a24a1f31bb4637c552b50f74d38d7ec57165f77ff308fc985669ca5d36a84dafcacfd063b13eac25307177714718c6000000000000000100000000000092010000133b0000e4c78b85791c735e8582dd6ee153b866e4152cbb7981b6c58ca24d3bdee06111142603e20c9b07eccf058eff347348df0e1e6fdf9dfd8469b16f0201a78269c57a62868d2fbc304f2d67951f7f263d045d0bd8d8938fa5296f6887ec28a2543abd3e31744827d3f6ec7980adb2fb4996a10d71fdfc923e3f5d4a6a08e1f13352a0f3a6cafc1b52c9798f63c0a4f81447053f999e4dcdd67fef2c8a43ec5e2d469d4118ff11127b8fc8f57ac2a5ad166cd9f9bacaa1bc85cabb7ba7dc93251dc2614a1522211f4c19a186a176f2d52fa18f8bc8337a9f8dbc01cf98f4cd9e7f39460ab3938ea272e19cf1670000000000a0000000000000000b0100000100000035261273856cd78adfa75a3134af6499d30cab1fcc250d76393845c2fe9589ca856d6384dc9c6df34ea1288616afb91be4418918d8ba7de02b6542dc01bcf9cd6dc39d843afa181928346a1bdb5a2b5efe524c3000aab066428c542db664abf343aae571a0090725713cf08411abf200d3884b81101cb7834bfe7889db92ecfb11bdb67ff5ea3fd9bdc1ceb9000000007800000000000000130100000200000059cee2b1a912c7776dbfeea52bee"], 0x2c8}}], 0x2, 0x4000) close(r6) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') write$binfmt_elf64(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501", @ANYRES64=r6], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000640)=@req={0x28, &(0x7f00000003c0)={'bridge_slave_1\x00', @ifru_map={0x7, 0x1d38, 0xfff, 0x69, 0xff, 0x8}}}) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 787.698444ms ago: executing program 4 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000"], 0x9c}}, 0x0) 786.937454ms ago: executing program 5 (id=3164): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmmsg(r0, 0x0, 0x0, 0x200000d1) sendmmsg$inet(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)="f9d481b183c8f25196c4d85859a0e1b3a4da0c756cff8fe87ba4d4b9ddaa4d44b5fccb66806e407a5b849557f866a4571a9d4d2ef9a463c3e4859ab10dc3e6fbaaa3067217", 0x45}, {&(0x7f0000000980)="f64e2ede071efdd1c72786b2fe2d9cb6272c9eab7a815f2058971845d68915170f45b44661511f0b295f01deda46d10cf1647364e8a29d0963ebcea4b89176089519cd5c8d9ecf705b5218d1ff814233c7206d80afa2f652b29461f700a6071a1d8e98b380333e2c6073a25faeb332504459c4c4395d2d7ff35144c0d5df228e9b43524c0f61adb83b12a5220f8dc2e317256222c22319a0c7c131b806a7c901bd7b9d9db4ac8faabf431ce48755f6818bd241d02f2c45ce10a41780be9c3632e51cf3df5cdf4e92f953fa9760e239b256aa7542db53adb58bc1a29d099883ef3aa639b8cc260dd0fc770a3a9f465b1381e3", 0xf2}], 0x2}}], 0x2, 0x1) 773.972295ms ago: executing program 4 (id=3165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000000ffffac14143eac1414bb0000000000000000000000004e201000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x104}}, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 720.996066ms ago: executing program 4 (id=3168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 592.645589ms ago: executing program 1 (id=3173): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x2}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000500)="8345522b07b881a0b7b7334d05556ce52dd8d4540fa616ddbb657105e0f545823e55a62779ca8aed27e3198a174a6e5bab33359b64ce1088ded705f4dc32b7f63f2edf7dda2589304807102182a2493e5097e87a232636", 0x57}, {&(0x7f0000000b80)="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", 0x16a}, {&(0x7f0000000640)="f271dd0a54b4e8d01ccbe281a70fa64c475a45229b558992c8926ae1", 0x1c}], 0x3, 0x0, 0x0, 0x40005}, 0x4008000) 574.416149ms ago: executing program 1 (id=3174): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 557.451879ms ago: executing program 1 (id=3175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0x0) 523.38152ms ago: executing program 1 (id=3176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b40000000"], 0x9c}}, 0x0) 522.93681ms ago: executing program 1 (id=3177): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0xff, 0x2b1, &(0x7f0000000d00)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) read$snapshot(r2, &(0x7f0000000040)=""/36, 0x24) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 435.673912ms ago: executing program 2 (id=3178): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 402.343982ms ago: executing program 2 (id=3179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000000ffffac14143eac1414bb0000000000000000000000004e201000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x104}}, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 390.516242ms ago: executing program 0 (id=3180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a1"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pipe(&(0x7f0000000040)) 334.288453ms ago: executing program 2 (id=3181): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe(&(0x7f0000000040)) 276.298664ms ago: executing program 0 (id=3182): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000140)={[{@nodelalloc}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@noblock_validity}, {@nodioread_nolock}]}, 0xfe, 0x507, &(0x7f0000001cc0)="$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") 56.860948ms ago: executing program 1 (id=3183): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e24, 0x1, @mcast1, 0x7}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x8}, 0x18) r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) r9 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200283afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x4, 0x4) 56.313758ms ago: executing program 2 (id=3184): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x2}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000500)="8345522b07b881a0b7b7334d05556ce52dd8d4540fa616ddbb657105e0f545823e55a62779ca8aed27e3198a174a6e5bab33359b64ce1088ded705f4dc32b7f63f2edf7dda2589304807102182a2493e5097e87a232636", 0x57}, {&(0x7f0000000b80)="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", 0x16a}, {&(0x7f0000000640)="f271dd0a54b4e8d01ccbe281a70fa64c475a45229b558992c8926ae1", 0x1c}], 0x3, 0x0, 0x0, 0x40005}, 0x4008000) 3.75929ms ago: executing program 2 (id=3185): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 0s ago: executing program 0 (id=3186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000540)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r4, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.903671][T13026] RIP: 0033:0x7fe0482eec29 [ 180.903690][T13026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.903743][T13026] RSP: 002b:00007fe046d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.903762][T13026] RAX: ffffffffffffffda RBX: 00007fe048535fa0 RCX: 00007fe0482eec29 [ 180.903776][T13026] RDX: 0000000024000895 RSI: 0000200000000640 RDI: 0000000000000004 [ 180.903788][T13026] RBP: 00007fe046d57090 R08: 0000000000000000 R09: 0000000000000000 [ 180.903799][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.903811][T13026] R13: 00007fe048536038 R14: 00007fe048535fa0 R15: 00007ffebb207488 [ 180.903895][T13026] [ 181.150169][T13036] loop5: detected capacity change from 0 to 164 [ 181.158154][T13036] ISOFS: unable to read i-node block [ 181.163693][T13036] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 181.268228][T13063] loop5: detected capacity change from 0 to 512 [ 181.278460][T13063] EXT4-fs (loop5): orphan cleanup on readonly fs [ 181.295494][T13063] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2418: bad orphan inode 13 [ 181.313786][T13063] ext4_test_bit(bit=12, block=18) = 1 [ 181.319281][T13063] is_bad_inode(inode)=0 [ 181.323502][T13063] NEXT_ORPHAN(inode)=2130706432 [ 181.328366][T13063] max_ino=32 [ 181.331574][T13063] i_nlink=1 [ 181.362998][T13073] loop2: detected capacity change from 0 to 2048 [ 181.397130][T13079] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 181.407197][ T3311] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 181.411249][T13081] loop0: detected capacity change from 0 to 164 [ 181.424407][ T3311] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 181.437315][T13079] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2418: bg 0: block 248: padding at end of block bitmap is not set [ 181.454425][T13081] ISOFS: unable to read i-node block [ 181.459758][T13081] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 181.467899][T13079] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2418: Failed to acquire dquot type 1 [ 181.488937][T13079] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 181.504945][T13087] loop4: detected capacity change from 0 to 1024 [ 181.511946][T13087] journal_path: Lookup failure for './file1/../file0' [ 181.518751][T13087] EXT4-fs: error: could not find journal device path [ 181.667363][T13111] random: crng reseeded on system resumption [ 182.306966][T13154] loop4: detected capacity change from 0 to 512 [ 182.318952][T13154] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.350456][T13154] EXT4-fs (loop4): 1 truncate cleaned up [ 182.547124][T13179] tun0: tun_chr_ioctl cmd 1074812118 [ 182.556203][T13179] loop0: detected capacity change from 0 to 512 [ 182.563707][T13179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.576961][T13179] EXT4-fs (loop0): 1 truncate cleaned up [ 182.721916][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.825945][T13217] loop5: detected capacity change from 0 to 2048 [ 182.843402][T13221] tun0: tun_chr_ioctl cmd 1074812118 [ 182.858275][T13221] loop2: detected capacity change from 0 to 512 [ 182.865863][T13221] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 182.885837][T13230] tun0: tun_chr_ioctl cmd 1074812118 [ 182.890443][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 182.908201][ T5476] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 182.918875][T13221] EXT4-fs (loop2): 1 truncate cleaned up [ 182.953459][T13237] loop5: detected capacity change from 0 to 128 [ 183.152470][T13253] loop5: detected capacity change from 0 to 512 [ 183.183310][T13249] loop2: detected capacity change from 0 to 2048 [ 183.285297][ T3311] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 183.303797][ T3311] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 183.343243][T13279] tun0: tun_chr_ioctl cmd 1074812118 [ 183.371208][T13279] loop5: detected capacity change from 0 to 512 [ 183.380819][T13279] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.394306][T13279] EXT4-fs (loop5): 1 truncate cleaned up [ 183.410795][T13285] loop2: detected capacity change from 0 to 2048 [ 183.437976][T13292] loop4: detected capacity change from 0 to 1024 [ 183.465906][T13292] journal_path: Lookup failure for './file1/../file0' [ 183.472775][T13292] EXT4-fs: error: could not find journal device path [ 183.516144][ T3311] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 183.579125][ T3311] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 183.630730][T13309] netlink: 'syz.0.2490': attribute type 39 has an invalid length. [ 183.650301][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 183.650319][ T29] audit: type=1400 audit(183.620:8621): avc: denied { create } for pid=13311 comm="syz.5.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.670577][T13312] loop5: detected capacity change from 0 to 4096 [ 183.687656][T13312] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 183.702198][ T29] audit: type=1326 audit(183.680:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 183.725152][ T29] audit: type=1326 audit(183.680:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 183.748086][ T29] audit: type=1326 audit(183.680:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 183.771138][ T29] audit: type=1326 audit(183.680:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 183.794127][ T29] audit: type=1326 audit(183.680:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 183.817123][ T29] audit: type=1326 audit(183.680:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 183.840152][ T29] audit: type=1326 audit(183.680:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 183.845950][T13312] FAULT_INJECTION: forcing a failure. [ 183.845950][T13312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.863161][ T29] audit: type=1326 audit(183.680:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 183.876205][T13312] CPU: 1 UID: 0 PID: 13312 Comm: syz.5.2491 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.876287][T13312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.876305][T13312] Call Trace: [ 183.876315][T13312] [ 183.876327][T13312] __dump_stack+0x1d/0x30 [ 183.876378][T13312] dump_stack_lvl+0xe8/0x140 [ 183.876482][T13312] dump_stack+0x15/0x1b [ 183.876524][T13312] should_fail_ex+0x265/0x280 [ 183.876558][T13312] should_fail+0xb/0x20 [ 183.876658][T13312] should_fail_usercopy+0x1a/0x20 [ 183.876772][T13312] strncpy_from_user+0x25/0x230 [ 183.876835][T13312] ? kmem_cache_alloc_noprof+0x186/0x310 [ 183.876876][T13312] ? getname_flags+0x80/0x3b0 [ 183.876917][T13312] getname_flags+0xae/0x3b0 [ 183.876983][T13312] __se_sys_quotactl+0x16a/0x670 [ 183.877038][T13312] __x64_sys_quotactl+0x55/0x70 [ 183.877066][T13312] x64_sys_call+0x15d6/0x2ff0 [ 183.877096][T13312] do_syscall_64+0xd2/0x200 [ 183.877207][T13312] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.877244][T13312] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.877287][T13312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.877316][T13312] RIP: 0033:0x7f26531dec29 [ 183.877338][T13312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.877402][T13312] RSP: 002b:00007f2651c3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 183.877428][T13312] RAX: ffffffffffffffda RBX: 00007f2653425fa0 RCX: 00007f26531dec29 [ 183.877446][T13312] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000200 [ 183.877463][T13312] RBP: 00007f2651c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.877480][T13312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.877497][T13312] R13: 00007f2653426038 R14: 00007f2653425fa0 R15: 00007ffd24eb6f18 [ 183.877524][T13312] [ 184.086266][ T29] audit: type=1326 audit(183.680:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7473e3ec29 code=0x7ffc0000 [ 184.148555][T13334] loop2: detected capacity change from 0 to 2048 [ 184.177082][T13324] loop4: detected capacity change from 0 to 2048 [ 184.256635][T13347] tun0: tun_chr_ioctl cmd 1074812118 [ 184.257635][ T3301] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 184.277267][T13347] loop0: detected capacity change from 0 to 512 [ 184.284212][T13347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.298107][ T3301] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 184.308038][T13344] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 184.328625][T13347] EXT4-fs (loop0): 1 truncate cleaned up [ 184.338411][T13344] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 542 with error 28 [ 184.350899][T13344] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.350899][T13344] [ 184.360624][T13344] EXT4-fs (loop2): Total free blocks count 0 [ 184.366740][T13344] EXT4-fs (loop2): Free/Dirty block details [ 184.372672][T13344] EXT4-fs (loop2): free_blocks=2415919104 [ 184.378418][T13344] EXT4-fs (loop2): dirty_blocks=544 [ 184.383673][T13344] EXT4-fs (loop2): Block reservation details [ 184.389666][T13344] EXT4-fs (loop2): i_reserved_data_blocks=34 [ 184.439597][T13367] loop4: detected capacity change from 0 to 512 [ 184.544249][T13394] __nla_validate_parse: 11 callbacks suppressed [ 184.544270][T13394] netlink: 588 bytes leftover after parsing attributes in process `syz.4.2505'. [ 184.584367][T13396] binfmt_misc: register: failed to install interpreter file ./file2 [ 185.027683][T13414] random: crng reseeded on system resumption [ 185.064082][T13420] loop2: detected capacity change from 0 to 164 [ 185.071135][T13420] ISOFS: unable to read i-node block [ 185.076567][T13420] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 185.141386][T13433] loop5: detected capacity change from 0 to 2048 [ 185.146000][T13435] loop2: detected capacity change from 0 to 128 [ 185.276856][T13442] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 185.295027][T13442] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 185.307648][T13442] EXT4-fs (loop5): This should not happen!! Data will be lost [ 185.307648][T13442] [ 185.317401][T13442] EXT4-fs (loop5): Total free blocks count 0 [ 185.323435][T13442] EXT4-fs (loop5): Free/Dirty block details [ 185.329363][T13442] EXT4-fs (loop5): free_blocks=2415919104 [ 185.335098][T13442] EXT4-fs (loop5): dirty_blocks=2192 [ 185.340418][T13442] EXT4-fs (loop5): Block reservation details [ 185.346436][T13442] EXT4-fs (loop5): i_reserved_data_blocks=137 [ 185.426688][T13451] random: crng reseeded on system resumption [ 185.469435][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2533'. [ 185.537490][T13463] loop2: detected capacity change from 0 to 2048 [ 185.547418][ T3569] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 132 with error 28 [ 185.560199][ T3569] EXT4-fs (loop5): This should not happen!! Data will be lost [ 185.560199][ T3569] [ 185.618081][T13478] binfmt_misc: register: failed to install interpreter file ./file2 [ 185.632754][T13476] loop4: detected capacity change from 0 to 4096 [ 185.644325][ T3311] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 185.659478][T13476] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 185.659556][ T3311] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 185.712561][T13492] random: crng reseeded on system resumption [ 185.751352][T13496] loop2: detected capacity change from 0 to 512 [ 185.758031][T13497] loop4: detected capacity change from 0 to 128 [ 185.895958][T13519] loop0: detected capacity change from 0 to 1024 [ 185.903773][T13519] journal_path: Lookup failure for './file1/../file0' [ 185.910605][T13519] EXT4-fs: error: could not find journal device path [ 185.938947][T13519] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2552'. [ 185.948315][T13523] loop2: detected capacity change from 0 to 2048 [ 186.028912][ T3311] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 186.057370][ T3311] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 186.105878][T13555] loop4: detected capacity change from 0 to 512 [ 186.121542][T13557] loop2: detected capacity change from 0 to 1024 [ 186.130326][T13557] journal_path: Lookup failure for './file1/../file0' [ 186.137246][T13557] EXT4-fs: error: could not find journal device path [ 186.143190][T13560] loop5: detected capacity change from 0 to 1024 [ 186.154642][T13560] journal_path: Lookup failure for './file1/../file0' [ 186.161459][T13560] EXT4-fs: error: could not find journal device path [ 186.169779][T13557] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2564'. [ 186.183458][T13560] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2566'. [ 186.211570][T13571] loop0: detected capacity change from 0 to 2048 [ 186.246806][T13584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2572'. [ 186.284195][T13576] loop5: detected capacity change from 0 to 2048 [ 186.293555][T13591] FAULT_INJECTION: forcing a failure. [ 186.293555][T13591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.306973][T13591] CPU: 0 UID: 0 PID: 13591 Comm: syz.0.2573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.307003][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.307018][T13591] Call Trace: [ 186.307026][T13591] [ 186.307035][T13591] __dump_stack+0x1d/0x30 [ 186.307061][T13591] dump_stack_lvl+0xe8/0x140 [ 186.307086][T13591] dump_stack+0x15/0x1b [ 186.307123][T13591] should_fail_ex+0x265/0x280 [ 186.307153][T13591] should_fail+0xb/0x20 [ 186.307179][T13591] should_fail_usercopy+0x1a/0x20 [ 186.307211][T13591] strncpy_from_user+0x25/0x230 [ 186.307259][T13591] path_setxattrat+0xeb/0x310 [ 186.307323][T13591] __x64_sys_fsetxattr+0x6b/0x80 [ 186.307355][T13591] x64_sys_call+0x1ced/0x2ff0 [ 186.307426][T13591] do_syscall_64+0xd2/0x200 [ 186.307498][T13591] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 186.307531][T13591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 186.307581][T13591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.307609][T13591] RIP: 0033:0x7f524329ec29 [ 186.307627][T13591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.307673][T13591] RSP: 002b:00007f5241d07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 186.307696][T13591] RAX: ffffffffffffffda RBX: 00007f52434e5fa0 RCX: 00007f524329ec29 [ 186.307713][T13591] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000007 [ 186.307729][T13591] RBP: 00007f5241d07090 R08: 0000000000000000 R09: 0000000000000000 [ 186.307744][T13591] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 186.307760][T13591] R13: 00007f52434e6038 R14: 00007f52434e5fa0 R15: 00007ffe8b198c38 [ 186.307787][T13591] [ 186.325767][ C1] hrtimer: interrupt took 46160 ns [ 186.538856][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 186.557902][T13606] loop2: detected capacity change from 0 to 512 [ 186.571432][ T5476] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 186.637639][T13596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.663694][T13618] loop0: detected capacity change from 0 to 2048 [ 186.695975][T13632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2585'. [ 186.753633][T13636] loop0: detected capacity change from 0 to 1024 [ 186.764394][T13636] journal_path: Lookup failure for './file1/../file0' [ 186.771299][T13636] EXT4-fs: error: could not find journal device path [ 186.847420][T13653] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2586'. [ 186.863624][T13596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.909151][T13654] tun0: tun_chr_ioctl cmd 1074812118 [ 186.936008][T13638] loop2: detected capacity change from 0 to 512 [ 186.945601][T13638] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.964521][T13638] EXT4-fs (loop2): 1 truncate cleaned up [ 186.989167][T13672] loop0: detected capacity change from 0 to 2048 [ 187.028278][T13677] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2599'. [ 187.049047][T13678] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2597'. [ 187.069052][T13596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.097485][T13687] loop0: detected capacity change from 0 to 164 [ 187.105195][T13687] ISOFS: unable to read i-node block [ 187.110501][T13687] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 187.132026][T13677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13677 comm=syz.5.2599 [ 187.183302][T13596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.220548][T13703] loop0: detected capacity change from 0 to 2048 [ 187.239229][ T3574] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.261025][T13716] loop5: detected capacity change from 0 to 1024 [ 187.267975][T13716] journal_path: Lookup failure for './file1/../file0' [ 187.272483][ T3574] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.274861][T13716] EXT4-fs: error: could not find journal device path [ 187.300307][ T3574] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.308650][ T3574] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.349819][ T3574] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.366926][ T3574] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 216 with error 28 [ 187.376485][T13735] loop4: detected capacity change from 0 to 2048 [ 187.379517][ T3574] EXT4-fs (loop0): This should not happen!! Data will be lost [ 187.379517][ T3574] [ 187.395468][ T3574] EXT4-fs (loop0): Total free blocks count 0 [ 187.401490][ T3574] EXT4-fs (loop0): Free/Dirty block details [ 187.407455][ T3574] EXT4-fs (loop0): free_blocks=2415919104 [ 187.413202][ T3574] EXT4-fs (loop0): dirty_blocks=1072 [ 187.418498][ T3574] EXT4-fs (loop0): Block reservation details [ 187.424535][ T3574] EXT4-fs (loop0): i_reserved_data_blocks=89 [ 187.435289][T13733] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 187.447779][T13733] EXT4-fs (loop0): This should not happen!! Data will be lost [ 187.447779][T13733] [ 187.709727][T13772] loop4: detected capacity change from 0 to 1024 [ 187.726238][T13771] loop5: detected capacity change from 0 to 1024 [ 187.778169][T13771] journal_path: Lookup failure for './file1/../file0' [ 187.785099][T13771] EXT4-fs: error: could not find journal device path [ 187.923434][T13814] loop0: detected capacity change from 0 to 2048 [ 188.000645][T13829] tun0: tun_chr_ioctl cmd 1074812118 [ 188.111517][T13833] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.152020][T13833] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 748 with error 28 [ 188.164479][T13833] EXT4-fs (loop0): This should not happen!! Data will be lost [ 188.164479][T13833] [ 188.174229][T13833] EXT4-fs (loop0): Total free blocks count 0 [ 188.180275][T13833] EXT4-fs (loop0): Free/Dirty block details [ 188.186263][T13833] EXT4-fs (loop0): free_blocks=2415919104 [ 188.192003][T13833] EXT4-fs (loop0): dirty_blocks=752 [ 188.197332][T13833] EXT4-fs (loop0): Block reservation details [ 188.203487][T13833] EXT4-fs (loop0): i_reserved_data_blocks=47 [ 188.288516][T13842] loop2: detected capacity change from 0 to 2048 [ 188.377066][T13849] loop2: detected capacity change from 0 to 1024 [ 188.412419][T13849] journal_path: Lookup failure for './file1/../file0' [ 188.419306][T13849] EXT4-fs: error: could not find journal device path [ 188.662373][ T3599] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 188.674722][ T3599] EXT4-fs (loop0): This should not happen!! Data will be lost [ 188.674722][ T3599] [ 188.955577][T13872] loop2: detected capacity change from 0 to 2048 [ 189.133984][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 189.134002][ T29] audit: type=1400 audit(189.110:8972): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.168330][T13882] loop0: detected capacity change from 0 to 512 [ 189.175568][ T29] audit: type=1400 audit(189.110:8973): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.199095][ T29] audit: type=1400 audit(189.110:8974): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.206223][T13876] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, [ 189.224256][ T29] audit: type=1400 audit(189.120:8975): avc: denied { map } for pid=13871 comm="syz.2.2644" path="/528/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 189.232632][T13876] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 189.235400][T13876] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 860 with error 28 [ 189.255974][ T29] audit: type=1400 audit(189.120:8976): avc: denied { read write } for pid=13871 comm="syz.2.2644" path="/528/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 189.256019][ T29] audit: type=1400 audit(189.150:8977): avc: denied { mounton } for pid=13881 comm="+}[@" path="/508/file2" dev="tmpfs" ino=2798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 189.264995][T13876] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.264995][T13876] [ 189.301403][ T29] audit: type=1400 audit(189.160:8978): avc: denied { create } for pid=13884 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.322670][T13876] EXT4-fs (loop2): Total free blocks count 0 [ 189.332368][ T29] audit: type=1400 audit(189.160:8979): avc: denied { write } for pid=13884 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.351504][T13876] EXT4-fs (loop2): Free/Dirty block details [ 189.382559][T13876] EXT4-fs (loop2): free_blocks=2415919104 [ 189.383719][ T29] audit: type=1400 audit(189.360:8980): avc: denied { map_create } for pid=13884 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 189.388310][T13876] EXT4-fs (loop2): dirty_blocks=864 [ 189.388329][T13876] EXT4-fs (loop2): Block reservation details [ 189.388343][T13876] EXT4-fs (loop2): i_reserved_data_blocks=54 [ 189.407090][ T29] audit: type=1400 audit(189.360:8981): avc: denied { map_read map_write } for pid=13884 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 189.498100][T13882] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 189.521518][T13896] loop5: detected capacity change from 0 to 1024 [ 189.528468][T13896] journal_path: Lookup failure for './file1/../file0' [ 189.529833][T13882] EXT4-fs (loop0): orphan cleanup on readonly fs [ 189.535303][T13896] EXT4-fs: error: could not find journal device path [ 189.568247][T13882] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 189.583887][T13904] loop4: detected capacity change from 0 to 512 [ 189.588498][T13882] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 189.617045][T13882] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 189.622814][T13896] __nla_validate_parse: 10 callbacks suppressed [ 189.622883][T13896] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2649'. [ 189.626208][T13882] EXT4-fs (loop0): 1 truncate cleaned up [ 189.649561][ T3580] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 189.661929][ T3580] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.661929][ T3580] [ 189.924091][T13951] loop0: detected capacity change from 0 to 1024 [ 189.944339][T13954] loop2: detected capacity change from 0 to 512 [ 189.968086][T13951] journal_path: Lookup failure for './file1/../file0' [ 189.974978][T13951] EXT4-fs: error: could not find journal device path [ 190.011203][T13954] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 190.024580][T13954] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.069538][T13951] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2666'. [ 190.089048][T13954] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 190.121160][T13962] loop5: detected capacity change from 0 to 2048 [ 190.145184][T13954] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 190.224341][T13954] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 190.291052][T13954] EXT4-fs (loop2): 1 truncate cleaned up [ 190.309441][T13969] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.382932][T13969] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 420 with error 28 [ 190.389840][T13972] tipc: Enabling of bearer rejected, failed to enable media [ 190.395468][T13969] EXT4-fs (loop5): This should not happen!! Data will be lost [ 190.395468][T13969] [ 190.395488][T13969] EXT4-fs (loop5): Total free blocks count 0 [ 190.395504][T13969] EXT4-fs (loop5): Free/Dirty block details [ 190.426340][T13969] EXT4-fs (loop5): free_blocks=2415919104 [ 190.432110][T13969] EXT4-fs (loop5): dirty_blocks=432 [ 190.437332][T13969] EXT4-fs (loop5): Block reservation details [ 190.443363][T13969] EXT4-fs (loop5): i_reserved_data_blocks=27 [ 190.479269][T13979] loop2: detected capacity change from 0 to 164 [ 190.488677][T13979] ISOFS: unable to read i-node block [ 190.494128][T13979] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 190.509262][T13982] loop0: detected capacity change from 0 to 1024 [ 190.516927][T13982] journal_path: Lookup failure for './file1/../file0' [ 190.523842][T13982] EXT4-fs: error: could not find journal device path [ 190.538958][T13982] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2672'. [ 190.668075][T14001] loop2: detected capacity change from 0 to 1024 [ 190.688791][T14003] loop0: detected capacity change from 0 to 128 [ 190.703243][T14003] EXT4-fs mount: 163 callbacks suppressed [ 190.703260][T14003] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.753478][T14001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.836051][T14017] loop4: detected capacity change from 0 to 164 [ 190.854306][T14017] ISOFS: unable to read i-node block [ 190.859660][T14017] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 190.925939][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 191.556531][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.597778][T14083] loop0: detected capacity change from 0 to 512 [ 191.634539][T14083] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 191.648397][T14082] loop5: detected capacity change from 0 to 2048 [ 191.669308][T14083] EXT4-fs (loop0): orphan cleanup on readonly fs [ 191.678088][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.683966][T14082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.702146][T14083] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2694: Failed to acquire dquot type 1 [ 191.721969][T14083] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2694: bg 0: block 40: padding at end of block bitmap is not set [ 191.742441][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.761442][T14083] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 191.778196][T14083] EXT4-fs (loop0): 1 truncate cleaned up [ 191.801679][T14104] loop5: detected capacity change from 0 to 1024 [ 191.808607][T14104] journal_path: Lookup failure for './file1/../file0' [ 191.815428][T14104] EXT4-fs: error: could not find journal device path [ 191.829579][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2698'. [ 191.845384][T14083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.849233][T14104] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2701'. [ 191.915874][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.945275][T14119] loop4: detected capacity change from 0 to 512 [ 191.947244][T14118] random: crng reseeded on system resumption [ 191.964012][T14119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.018204][T14131] loop0: detected capacity change from 0 to 1024 [ 192.030104][T14131] journal_path: Lookup failure for './file1/../file0' [ 192.037333][T14131] EXT4-fs: error: could not find journal device path [ 192.083619][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.211187][T14153] loop5: detected capacity change from 0 to 2048 [ 192.596976][T14171] loop4: detected capacity change from 0 to 1024 [ 192.626419][T14171] journal_path: Lookup failure for './file1/../file0' [ 192.633267][T14171] EXT4-fs: error: could not find journal device path [ 192.645153][T14153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.668826][T14171] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2727'. [ 192.702996][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 192.713808][T14184] loop4: detected capacity change from 0 to 512 [ 192.726968][ T5476] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 192.728201][T14184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 192.744644][T14184] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2731: bad orphan inode 13 [ 192.754935][T14184] ext4_test_bit(bit=12, block=18) = 1 [ 192.760332][T14184] is_bad_inode(inode)=0 [ 192.764550][T14184] NEXT_ORPHAN(inode)=2130706432 [ 192.769487][T14184] max_ino=32 [ 192.772724][T14184] i_nlink=1 [ 192.777108][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.786393][T14184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.859323][T14199] loop0: detected capacity change from 0 to 2048 [ 192.889615][T14203] loop2: detected capacity change from 0 to 1024 [ 192.896811][T14204] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 192.906459][T14203] journal_path: Lookup failure for './file1/../file0' [ 192.913431][T14203] EXT4-fs: error: could not find journal device path [ 192.923652][T14199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 192.954546][T14204] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2731: bg 0: block 248: padding at end of block bitmap is not set [ 192.979190][T14204] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2731: Failed to acquire dquot type 1 [ 193.009426][T14204] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.038525][T14219] loop5: detected capacity change from 0 to 2048 [ 193.056075][T14219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.101490][T14221] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 193.105476][T14231] loop2: detected capacity change from 0 to 512 [ 193.117130][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 193.122893][T14221] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1220 with error 28 [ 193.139686][ T5476] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 193.149569][T14221] EXT4-fs (loop0): This should not happen!! Data will be lost [ 193.149569][T14221] [ 193.168210][T14221] EXT4-fs (loop0): Total free blocks count 0 [ 193.174304][T14221] EXT4-fs (loop0): Free/Dirty block details [ 193.175543][T14231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.180225][T14221] EXT4-fs (loop0): free_blocks=2415919104 [ 193.197955][T14221] EXT4-fs (loop0): dirty_blocks=1232 [ 193.203427][T14221] EXT4-fs (loop0): Block reservation details [ 193.209443][T14221] EXT4-fs (loop0): i_reserved_data_blocks=77 [ 193.216701][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.234014][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.270470][ T3580] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 193.294568][T14244] loop2: detected capacity change from 0 to 128 [ 193.303431][T14244] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.554595][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.575422][T14259] loop4: detected capacity change from 0 to 1024 [ 193.582871][T14259] journal_path: Lookup failure for './file1/../file0' [ 193.589819][T14259] EXT4-fs: error: could not find journal device path [ 193.667476][T14268] loop4: detected capacity change from 0 to 2048 [ 193.705449][T14268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.725686][T14275] tun0: tun_chr_ioctl cmd 1074812118 [ 193.741380][T14275] loop0: detected capacity change from 0 to 512 [ 193.749282][T14275] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.749451][ T3301] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 193.774607][ T3301] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 193.788256][T14275] EXT4-fs (loop0): 1 truncate cleaned up [ 193.796297][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.807389][T14275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.963635][T14298] random: crng reseeded on system resumption [ 193.970651][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.142014][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 194.142032][ T29] audit: type=1326 audit(194.120:9979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26531d5be7 code=0x7ffc0000 [ 194.173673][ T29] audit: type=1326 audit(194.150:9980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f265317ae09 code=0x7ffc0000 [ 194.196638][ T29] audit: type=1326 audit(194.150:9981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26531d5be7 code=0x7ffc0000 [ 194.219820][ T29] audit: type=1326 audit(194.150:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f265317ae09 code=0x7ffc0000 [ 194.242715][ T29] audit: type=1326 audit(194.150:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f26531dec29 code=0x7ffc0000 [ 194.269338][ T29] audit: type=1326 audit(194.170:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26531d5be7 code=0x7ffc0000 [ 194.284681][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.292152][ T29] audit: type=1326 audit(194.170:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f265317ae09 code=0x7ffc0000 [ 194.323895][ T29] audit: type=1326 audit(194.170:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f26531dec29 code=0x7ffc0000 [ 194.346693][ T29] audit: type=1326 audit(194.180:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26531d5be7 code=0x7ffc0000 [ 194.369823][ T29] audit: type=1326 audit(194.180:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f265317ae09 code=0x7ffc0000 [ 194.400971][T14325] random: crng reseeded on system resumption [ 194.468563][T14341] loop5: detected capacity change from 0 to 1024 [ 194.474592][T14340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2780'. [ 194.519456][T14341] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 194.528212][T14336] syzkaller0: entered promiscuous mode [ 194.530452][T14341] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 194.536006][T14336] syzkaller0: entered allmulticast mode [ 194.548783][T14341] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 194.559905][T14341] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 194.600040][T14348] loop5: detected capacity change from 0 to 512 [ 194.621046][T14348] EXT4-fs (loop5): orphan cleanup on readonly fs [ 194.630794][T14348] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2781: bad orphan inode 13 [ 194.655861][T14348] ext4_test_bit(bit=12, block=18) = 1 [ 194.661382][T14348] is_bad_inode(inode)=0 [ 194.665688][T14348] NEXT_ORPHAN(inode)=2130706432 [ 194.670604][T14348] max_ino=32 [ 194.673838][T14348] i_nlink=1 [ 194.747171][T14348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.836985][T14369] loop0: detected capacity change from 0 to 512 [ 194.857391][T14378] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 194.896451][T14378] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2781: bg 0: block 248: padding at end of block bitmap is not set [ 194.931048][T14378] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2781: Failed to acquire dquot type 1 [ 194.959623][T14378] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.977265][T14369] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 194.990811][T14369] EXT4-fs (loop0): orphan cleanup on readonly fs [ 194.999684][T14369] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 195.011755][T14369] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 195.026331][T14369] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 195.035755][T14369] EXT4-fs (loop0): 1 truncate cleaned up [ 195.042928][T14369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.071250][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.201357][T14401] random: crng reseeded on system resumption [ 195.312653][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2788'. [ 195.321576][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2788'. [ 195.339968][T14416] loop2: detected capacity change from 0 to 1024 [ 195.341039][T14414] loop4: detected capacity change from 0 to 2048 [ 195.351243][T14416] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 195.363704][T14416] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 195.373616][T14416] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 195.382448][T14416] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 195.395453][T14414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 195.441410][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.574060][T14433] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.603872][T14433] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 922 with error 28 [ 195.616330][T14433] EXT4-fs (loop4): This should not happen!! Data will be lost [ 195.616330][T14433] [ 195.626049][T14433] EXT4-fs (loop4): Total free blocks count 0 [ 195.632074][T14433] EXT4-fs (loop4): Free/Dirty block details [ 195.637974][T14433] EXT4-fs (loop4): free_blocks=2415919104 [ 195.643735][T14433] EXT4-fs (loop4): dirty_blocks=928 [ 195.648946][T14433] EXT4-fs (loop4): Block reservation details [ 195.655010][T14433] EXT4-fs (loop4): i_reserved_data_blocks=58 [ 195.857455][T14454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2806'. [ 196.010637][T14464] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2809'. [ 196.085747][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 196.094756][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 196.167278][ T3574] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 196.314541][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2822'. [ 196.367021][T14504] tun0: tun_chr_ioctl cmd 1074812118 [ 196.375526][T14504] loop2: detected capacity change from 0 to 512 [ 196.383134][T14504] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.413366][T14504] EXT4-fs (loop2): 1 truncate cleaned up [ 196.455192][T14504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.666703][T14528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2834'. [ 196.704242][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.768382][T14537] loop4: detected capacity change from 0 to 2048 [ 196.791154][T14539] loop5: detected capacity change from 0 to 1024 [ 196.798137][T14539] EXT4-fs: Ignoring removed orlov option [ 196.804101][T14539] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 196.815004][T14539] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 196.825529][T14539] JBD2: no valid journal superblock found [ 196.826289][T14537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 196.831274][T14539] EXT4-fs (loop5): Could not load journal inode [ 196.918776][T14548] loop2: detected capacity change from 0 to 512 [ 196.933970][T14548] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 196.974716][T14548] EXT4-fs (loop2): orphan cleanup on readonly fs [ 197.003726][T14553] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.030595][T14548] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 197.044140][T14548] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 197.057998][T14553] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 740 with error 28 [ 197.070423][T14553] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.070423][T14553] [ 197.080304][T14553] EXT4-fs (loop4): Total free blocks count 0 [ 197.086621][T14553] EXT4-fs (loop4): Free/Dirty block details [ 197.092584][T14553] EXT4-fs (loop4): free_blocks=2415919104 [ 197.098496][T14553] EXT4-fs (loop4): dirty_blocks=752 [ 197.103855][T14553] EXT4-fs (loop4): Block reservation details [ 197.109920][T14553] EXT4-fs (loop4): i_reserved_data_blocks=47 [ 197.127277][T14548] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 197.137464][T14573] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2845'. [ 197.162080][T14548] EXT4-fs (loop2): 1 truncate cleaned up [ 197.169297][T14573] netlink: 'syz.5.2845': attribute type 1 has an invalid length. [ 197.177653][T14548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.214066][T14573] ip6erspan0: entered promiscuous mode [ 197.241682][T14573] loop5: detected capacity change from 0 to 128 [ 197.249161][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.262501][T14573] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.277085][T14573] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.286922][T14582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2848'. [ 197.368431][ T3599] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.514741][T14616] loop5: detected capacity change from 0 to 2048 [ 197.543045][T14616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.579322][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 197.631998][ T5476] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 197.670775][ T3599] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 197.689924][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.873190][T14641] lo speed is unknown, defaulting to 1000 [ 197.889808][T14664] loop2: detected capacity change from 0 to 512 [ 197.905211][T14664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.915318][T14641] lo speed is unknown, defaulting to 1000 [ 197.935999][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.951386][ T3589] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.972394][T14641] lo speed is unknown, defaulting to 1000 [ 197.993970][T14679] loop0: detected capacity change from 0 to 2048 [ 198.013425][ T3589] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.039637][T14641] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 198.051093][T14641] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 198.051428][T14679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.067792][T14641] lo speed is unknown, defaulting to 1000 [ 198.093152][T14641] lo speed is unknown, defaulting to 1000 [ 198.099611][ T3589] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.111669][ T3314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 198.126667][ T3314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 198.132483][T14641] lo speed is unknown, defaulting to 1000 [ 198.152021][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.173238][ T3589] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.185191][T14641] lo speed is unknown, defaulting to 1000 [ 198.191428][T14641] lo speed is unknown, defaulting to 1000 [ 198.198103][T14641] lo speed is unknown, defaulting to 1000 [ 198.210486][T14637] chnl_net:caif_netlink_parms(): no params data found [ 198.220582][T14641] lo speed is unknown, defaulting to 1000 [ 198.267233][T14826] netlink: 'syz.2.2874': attribute type 1 has an invalid length. [ 198.267870][T14820] loop5: detected capacity change from 0 to 1024 [ 198.282372][T14820] journal_path: Lookup failure for './file1/../file0' [ 198.289182][T14820] EXT4-fs: error: could not find journal device path [ 198.314881][T14826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.355745][T14826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.372503][T14826] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.384366][T14826] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 198.405789][T14897] loop2: detected capacity change from 0 to 128 [ 198.412715][T14897] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.441387][T14897] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.465045][T14911] tun0: tun_chr_ioctl cmd 1074812118 [ 198.494845][T14911] loop5: detected capacity change from 0 to 512 [ 198.505570][T14637] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.512717][T14637] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.527304][T14911] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.537668][T14637] bridge_slave_0: entered allmulticast mode [ 198.544298][T14637] bridge_slave_0: entered promiscuous mode [ 198.551081][ T3589] bridge_slave_1: left allmulticast mode [ 198.556815][ T3589] bridge_slave_1: left promiscuous mode [ 198.562703][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.579668][ T3599] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.579728][T14911] EXT4-fs (loop5): 1 truncate cleaned up [ 198.599955][ T3589] bridge_slave_0: left allmulticast mode [ 198.605733][ T3589] bridge_slave_0: left promiscuous mode [ 198.611500][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.621740][T14911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.627654][T14955] random: crng reseeded on system resumption [ 198.807655][ T3589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.824561][T14973] loop0: detected capacity change from 0 to 512 [ 198.833648][T14973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.847770][ T3589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.857942][ T3589] bond0 (unregistering): Released all slaves [ 198.869407][T14637] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.876577][T14637] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.883974][T14637] bridge_slave_1: entered allmulticast mode [ 198.887524][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.890928][T14637] bridge_slave_1: entered promiscuous mode [ 198.923157][T14637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.932339][ T3589] tipc: Left network mode [ 198.942634][T14637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.966374][T15010] FAULT_INJECTION: forcing a failure. [ 198.966374][T15010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.979595][T15010] CPU: 0 UID: 0 PID: 15010 Comm: syz.0.2890 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.979626][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.979642][T15010] Call Trace: [ 198.979649][T15010] [ 198.979663][T15010] __dump_stack+0x1d/0x30 [ 198.979751][T15010] dump_stack_lvl+0xe8/0x140 [ 198.979775][T15010] dump_stack+0x15/0x1b [ 198.979857][T15010] should_fail_ex+0x265/0x280 [ 198.979895][T15010] should_fail+0xb/0x20 [ 198.979920][T15010] should_fail_usercopy+0x1a/0x20 [ 198.979993][T15010] _copy_from_user+0x1c/0xb0 [ 198.980033][T15010] memdup_user+0x5e/0xd0 [ 198.980066][T15010] security_setselfattr+0x8d/0x260 [ 198.980099][T15010] __x64_sys_lsm_set_self_attr+0x51/0x60 [ 198.980130][T15010] x64_sys_call+0x2c6b/0x2ff0 [ 198.980158][T15010] do_syscall_64+0xd2/0x200 [ 198.980196][T15010] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.980283][T15010] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.980335][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.980359][T15010] RIP: 0033:0x7f524329ec29 [ 198.980396][T15010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.980513][T15010] RSP: 002b:00007f5241d07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 198.980597][T15010] RAX: ffffffffffffffda RBX: 00007f52434e5fa0 RCX: 00007f524329ec29 [ 198.980612][T15010] RDX: 000000000000006a RSI: 0000200000000140 RDI: 0000000000000067 [ 198.980625][T15010] RBP: 00007f5241d07090 R08: 0000000000000000 R09: 0000000000000000 [ 198.980636][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.980647][T15010] R13: 00007f52434e6038 R14: 00007f52434e5fa0 R15: 00007ffe8b198c38 [ 198.980667][T15010] [ 199.165372][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.194686][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 199.194703][ T29] audit: type=1400 audit(199.171:10393): avc: denied { kexec_image_load } for pid=15012 comm="syz.2.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 199.222696][T14637] team0: Port device team_slave_0 added [ 199.236670][ T3589] hsr_slave_0: left promiscuous mode [ 199.242502][ T3589] hsr_slave_1: left promiscuous mode [ 199.248348][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.255876][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.263869][ T29] audit: type=1400 audit(199.201:10394): avc: denied { create } for pid=15026 comm="syz.5.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.282913][ T29] audit: type=1400 audit(199.201:10395): avc: denied { bind } for pid=15026 comm="syz.5.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.301841][ T29] audit: type=1400 audit(199.201:10396): avc: denied { write } for pid=15026 comm="syz.5.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.321538][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.329017][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.344047][ T3589] veth1_macvtap: left promiscuous mode [ 199.345223][T15051] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 199.349572][ T29] audit: type=1400 audit(199.321:10397): avc: denied { bind } for pid=15050 comm="syz.1.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.357265][T15051] audit: out of memory in audit_log_start [ 199.376148][ T29] audit: type=1400 audit(199.321:10398): avc: denied { name_bind } for pid=15050 comm="syz.1.2898" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 199.376156][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.376264][ T29] audit: type=1400 audit(199.321:10399): avc: denied { node_bind } for pid=15050 comm="syz.1.2898" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 199.388683][ T3589] veth0_macvtap: left promiscuous mode [ 199.414146][ T29] audit: type=1400 audit(199.361:10400): avc: denied { name_connect } for pid=15050 comm="syz.1.2898" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 199.460596][ T3589] veth1_vlan: left promiscuous mode [ 199.466132][ T3589] veth0_vlan: left promiscuous mode [ 199.477108][T15056] loop0: detected capacity change from 0 to 512 [ 199.485705][T15056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.515276][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.549419][T15062] loop0: detected capacity change from 0 to 1024 [ 199.556721][T15062] journal_path: Lookup failure for './file1/../file0' [ 199.563809][T15062] EXT4-fs: error: could not find journal device path [ 199.584351][T14637] team0: Port device team_slave_1 added [ 199.613527][T15046] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.620677][T15046] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.717801][T14637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.724904][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.751129][T14637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.775591][T15095] loop5: detected capacity change from 0 to 2048 [ 199.784980][ T3599] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.793996][ T3599] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.803945][T14637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.811156][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.819259][T15103] loop2: detected capacity change from 0 to 512 [ 199.837223][T14637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.849619][T15095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.878844][T15103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.901737][ T3599] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.910785][ T3599] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 199.913611][T15119] loop0: detected capacity change from 0 to 2048 [ 199.939051][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 199.945553][T14637] hsr_slave_0: entered promiscuous mode [ 199.955897][ T5476] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 199.963061][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.971924][T14637] hsr_slave_1: entered promiscuous mode [ 199.980291][T15119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.983522][ T3599] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.003616][ T3599] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.013316][ T3599] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.022307][ T3599] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.034198][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.071505][T15164] loop5: detected capacity change from 0 to 512 [ 200.080563][ T3314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 200.097610][T15164] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 200.100417][ T3314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 200.113905][T15164] EXT4-fs (loop5): orphan cleanup on readonly fs [ 200.122671][T15164] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 200.135682][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.139111][T15164] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 200.158945][T15164] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 200.168507][T15164] EXT4-fs (loop5): 1 truncate cleaned up [ 200.174903][T15164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.213208][ T5476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.224548][T15214] loop0: detected capacity change from 0 to 2048 [ 200.253211][T15214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.284135][T15230] loop5: detected capacity change from 0 to 512 [ 200.302205][T15230] EXT4-fs (loop5): orphan cleanup on readonly fs [ 200.313086][T15230] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2912: bad orphan inode 13 [ 200.327005][T15230] ext4_test_bit(bit=12, block=18) = 1 [ 200.329311][ T3314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 200.332520][T15230] is_bad_inode(inode)=0 [ 200.349435][ T3314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 200.351128][T15230] NEXT_ORPHAN(inode)=2130706432 [ 200.351202][T15230] max_ino=32 [ 200.351208][T15230] i_nlink=1 [ 200.352523][T15230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.385735][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.402007][ T3589] ------------[ cut here ]------------ [ 200.407635][ T3589] WARNING: CPU: 0 PID: 3589 at net/xfrm/xfrm_state.c:3308 xfrm_state_fini+0x1a0/0x1f0 [ 200.417313][ T3589] Modules linked in: [ 200.421297][ T3589] CPU: 0 UID: 0 PID: 3589 Comm: kworker/u8:53 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.426602][T15256] loop0: detected capacity change from 0 to 1024 [ 200.431444][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.440406][T15256] journal_path: Lookup failure for './file1/../file0' [ 200.448004][ T3589] Workqueue: netns cleanup_net [ 200.448033][ T3589] RIP: 0010:xfrm_state_fini+0x1a0/0x1f0 [ 200.454845][T15256] EXT4-fs: error: could not find journal device path [ 200.459588][ T3589] Code: a1 fc 90 0f 0b 90 e9 d9 fe ff ff e8 2a ed a1 fc 90 0f 0b 90 4c 89 f7 e8 6e aa bc fc 4d 8b 3e e9 06 ff ff ff e8 11 ed a1 fc 90 <0f> 0b 90 4c 89 f7 e8 55 aa bc fc 4d 8b 3e e9 24 ff ff ff e8 f8 ec [ 200.459609][ T3589] RSP: 0018:ffffc9000281bc60 EFLAGS: 00010293 [ 200.459625][ T3589] RAX: ffffffff84b60c3f RBX: ffff88810b270000 RCX: ffff88811b193180 [ 200.459637][ T3589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888115f732c0 [ 200.459650][ T3589] RBP: 0000000000000040 R08: 000188810b270e27 R09: 0000000000000000 [ 200.521871][ T3589] R10: ffff888115f73340 R11: 0001888115f7333f R12: ffffffff86c8b9a0 [ 200.529905][ T3589] R13: ffff88810b270028 R14: ffff88810b270e20 R15: ffff888115f732c0 [ 200.537965][ T3589] FS: 0000000000000000(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 200.547105][ T3589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.553715][ T3589] CR2: 0000001b33419ff8 CR3: 0000000120964000 CR4: 00000000003506f0 [ 200.561691][ T3589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.569729][ T3589] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 200.577744][ T3589] Call Trace: [ 200.581110][ T3589] [ 200.584110][ T3589] xfrm_net_exit+0x2d/0x60 [ 200.588530][ T3589] ops_undo_list+0x27b/0x410 [ 200.593197][ T3589] cleanup_net+0x2de/0x4d0 [ 200.597711][ T3589] process_scheduled_works+0x4cb/0x9d0 [ 200.603259][ T3589] worker_thread+0x582/0x770 [ 200.607896][ T3589] kthread+0x489/0x510 [ 200.612165][ T3589] ? finish_task_switch+0xad/0x2b0 [ 200.617299][ T3589] ? __pfx_worker_thread+0x10/0x10 [ 200.622446][ T3589] ? __pfx_kthread+0x10/0x10 [ 200.627132][ T3589] ret_from_fork+0x11f/0x1b0 [ 200.631732][ T3589] ? __pfx_kthread+0x10/0x10 [ 200.636454][ T3589] ret_from_fork_asm+0x1a/0x30 [ 200.641238][ T3589] [ 200.644289][ T3589] ---[ end trace 0000000000000000 ]--- [ 200.657358][T15260] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 200.688710][T15260] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2912: bg 0: block 248: padding at end of block bitmap is not set [ 200.705369][T15260] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2912: Failed to acquire dquot type 1 [ 200.731645][T15260] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.749810][T15268] loop0: detected capacity change from 0 to 1024 [ 200.757715][T15268] journal_path: Lookup failure for './file1/../file0' [ 200.764655][T15268] EXT4-fs: error: could not find journal device path [ 200.782879][T15268] __nla_validate_parse: 14 callbacks suppressed [ 200.782898][T15268] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2916'. [ 200.817046][T14637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.826059][T14637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.836348][T14637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.847219][T14637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.910430][T14637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.925069][T14637] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.939591][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.946718][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.967765][T14637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.978366][T14637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.991236][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.993812][T15302] loop0: detected capacity change from 0 to 1024 [ 200.998344][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.028114][T15302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.049354][T15310] loop2: detected capacity change from 0 to 512 [ 201.068271][T15310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.126172][T14637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.188109][T15328] loop2: detected capacity change from 0 to 1024 [ 201.199909][T15329] loop5: detected capacity change from 0 to 512 [ 201.212936][T15328] journal_path: Lookup failure for './file1/../file0' [ 201.219775][T15328] EXT4-fs: error: could not find journal device path [ 201.276487][T15302] lo speed is unknown, defaulting to 1000 [ 201.333207][T15358] loop5: detected capacity change from 0 to 2048 [ 201.344182][T15364] loop2: detected capacity change from 0 to 512 [ 201.384761][T15364] EXT4-fs (loop2): orphan cleanup on readonly fs [ 201.391579][T15364] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2927: bad orphan inode 13 [ 201.402449][T15364] ext4_test_bit(bit=12, block=18) = 1 [ 201.407851][T15364] is_bad_inode(inode)=0 [ 201.412068][T15364] NEXT_ORPHAN(inode)=2130706432 [ 201.416980][T15364] max_ino=32 [ 201.420202][T15364] i_nlink=1 [ 201.421102][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 201.463883][ T5476] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 201.502267][T15387] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 201.516509][T14637] veth0_vlan: entered promiscuous mode [ 201.522884][T15387] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2927: bg 0: block 248: padding at end of block bitmap is not set [ 201.538177][T15387] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2927: Failed to acquire dquot type 1 [ 201.553361][T15387] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.569128][T14637] veth1_vlan: entered promiscuous mode [ 201.600216][T14637] veth0_macvtap: entered promiscuous mode [ 201.609366][T14637] veth1_macvtap: entered promiscuous mode [ 201.620567][T14637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.629522][T14637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.646634][ T3589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.664391][ T3589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.674431][ T3589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.675842][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'. [ 201.696624][ T3589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.768284][T15408] loop4: detected capacity change from 0 to 1024 [ 201.845228][T15416] loop0: detected capacity change from 0 to 1024 [ 201.859336][T15416] journal_path: Lookup failure for './file1/../file0' [ 201.866194][T15416] EXT4-fs: error: could not find journal device path [ 201.926686][T15431] loop0: detected capacity change from 0 to 2048 [ 201.960016][T15434] loop4: detected capacity change from 0 to 1024 [ 201.976010][ T3314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 201.998906][ T3314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 202.088335][ T3589] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.125966][T15434] lo speed is unknown, defaulting to 1000 [ 202.150157][ T3589] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.201471][T15421] lo speed is unknown, defaulting to 1000 [ 202.218388][ T3589] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.276674][ T3589] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.318577][T15504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2942'. [ 202.343369][ T3589] bridge_slave_1: left allmulticast mode [ 202.349041][ T3589] bridge_slave_1: left promiscuous mode [ 202.354828][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.362901][ T3589] bridge_slave_0: left allmulticast mode [ 202.368568][ T3589] bridge_slave_0: left promiscuous mode [ 202.374329][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.403294][ T3589] bond_slave_0: left promiscuous mode [ 202.408788][ T3589] bond_slave_1: left promiscuous mode [ 202.502238][T15598] loop5: detected capacity change from 0 to 512 [ 202.510025][T15598] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 202.518079][T15602] loop4: detected capacity change from 0 to 1024 [ 202.519187][T15598] EXT4-fs (loop5): orphan cleanup on readonly fs [ 202.527349][T15602] journal_path: Lookup failure for './file1/../file0' [ 202.537841][T15602] EXT4-fs: error: could not find journal device path [ 202.538180][T15598] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 202.555827][T15598] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 202.569792][T15598] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 202.579250][T15598] EXT4-fs (loop5): 1 truncate cleaned up [ 202.612273][T15610] loop5: detected capacity change from 0 to 2048 [ 202.634334][ T3589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.644399][ T3589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.653863][ T3589] bond0 (unregistering): Released all slaves [ 202.669120][T15421] chnl_net:caif_netlink_parms(): no params data found [ 202.754842][T15617] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 202.771444][T15617] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 796 with error 28 [ 202.777173][T15421] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.783915][T15617] EXT4-fs (loop5): This should not happen!! Data will be lost [ 202.783915][T15617] [ 202.790911][T15421] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.800538][T15617] EXT4-fs (loop5): Total free blocks count 0 [ 202.800556][T15617] EXT4-fs (loop5): Free/Dirty block details [ 202.800571][T15617] EXT4-fs (loop5): free_blocks=2415919104 [ 202.800586][T15617] EXT4-fs (loop5): dirty_blocks=800 [ 202.800597][T15617] EXT4-fs (loop5): Block reservation details [ 202.800607][T15617] EXT4-fs (loop5): i_reserved_data_blocks=50 [ 202.846934][T15421] bridge_slave_0: entered allmulticast mode [ 202.854348][T15421] bridge_slave_0: entered promiscuous mode [ 202.861442][T15421] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.868633][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.875944][T15421] bridge_slave_1: entered allmulticast mode [ 202.882675][T15421] bridge_slave_1: entered promiscuous mode [ 202.903727][ T3589] hsr_slave_0: left promiscuous mode [ 202.910339][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 202.919269][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 202.930699][ T3589] hsr_slave_1: left promiscuous mode [ 202.936632][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.944077][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.952208][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.959646][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.970039][ T3589] veth1_macvtap: left promiscuous mode [ 202.975875][ T3589] veth0_macvtap: left promiscuous mode [ 203.033469][ T3589] team0 (unregistering): Port device team_slave_1 removed [ 203.043933][ T3589] team0 (unregistering): Port device team_slave_0 removed [ 203.104443][T15421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.126803][T15421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.186451][T15421] team0: Port device team_slave_0 added [ 203.193348][T15717] tun0: tun_chr_ioctl cmd 1074812118 [ 203.199904][T15421] team0: Port device team_slave_1 added [ 203.217869][T15717] loop2: detected capacity change from 0 to 512 [ 203.228218][T15717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.240711][T15717] EXT4-fs (loop2): 1 truncate cleaned up [ 203.247404][T15421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.254410][T15421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.280645][T15421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.293090][T15421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.300060][T15421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.326120][T15421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.358441][T15421] hsr_slave_0: entered promiscuous mode [ 203.365256][T15421] hsr_slave_1: entered promiscuous mode [ 203.371118][T15421] debugfs: 'hsr0' already exists in 'hsr' [ 203.376882][T15421] Cannot create hsr debugfs directory [ 203.392249][T15775] loop0: detected capacity change from 0 to 2048 [ 203.458936][ T3314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 203.479679][ T3314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 203.489375][ T3571] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 203.501841][ T3571] EXT4-fs (loop5): This should not happen!! Data will be lost [ 203.501841][ T3571] [ 203.529006][T15866] loop2: detected capacity change from 0 to 1024 [ 203.537397][T15866] EXT4-fs: Ignoring removed orlov option [ 203.562333][T15866] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.573280][T15866] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 203.580781][T15882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2958'. [ 203.587592][T15866] JBD2: no valid journal superblock found [ 203.597835][T15866] EXT4-fs (loop2): Could not load journal inode [ 203.722132][T15906] loop0: detected capacity change from 0 to 512 [ 203.731638][T15927] loop2: detected capacity change from 0 to 512 [ 203.736523][T15906] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2962: casefold flag without casefold feature [ 203.751183][T15906] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2962: couldn't read orphan inode 15 (err -117) [ 203.834779][T15945] loop2: detected capacity change from 0 to 2048 [ 203.853021][T15421] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.862277][T15421] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.871200][T15421] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.891236][T15421] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.911712][T15969] random: crng reseeded on system resumption [ 203.952306][T15421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.973446][T15421] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.985393][T15974] loop0: detected capacity change from 0 to 128 [ 203.997788][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.004946][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.008401][T15972] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.025089][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.033512][T15972] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1732 with error 28 [ 204.034019][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.046395][T15972] EXT4-fs (loop2): This should not happen!! Data will be lost [ 204.046395][T15972] [ 204.063295][T15972] EXT4-fs (loop2): Total free blocks count 0 [ 204.069281][T15972] EXT4-fs (loop2): Free/Dirty block details [ 204.075273][T15972] EXT4-fs (loop2): free_blocks=2415919104 [ 204.081011][T15972] EXT4-fs (loop2): dirty_blocks=1744 [ 204.086391][T15972] EXT4-fs (loop2): Block reservation details [ 204.089011][T15421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.092411][T15972] EXT4-fs (loop2): i_reserved_data_blocks=109 [ 204.108857][T15421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.196677][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2971'. [ 204.227368][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 204.227383][ T29] audit: type=1400 audit(204.201:11158): avc: denied { validate_trans } for pid=15985 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 204.229941][T15421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.235658][ T29] audit: type=1400 audit(204.221:11159): avc: denied { create } for pid=15985 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 204.285901][ T29] audit: type=1400 audit(204.261:11160): avc: denied { write } for pid=15985 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 204.328219][ T29] audit: type=1326 audit(204.301:11161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd42ec29 code=0x7ffc0000 [ 204.357385][T15421] veth0_vlan: entered promiscuous mode [ 204.359473][ T29] audit: type=1326 audit(204.331:11162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6ecd42ec29 code=0x7ffc0000 [ 204.367220][T15421] veth1_vlan: entered promiscuous mode [ 204.386073][ T29] audit: type=1326 audit(204.331:11163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd42ec29 code=0x7ffc0000 [ 204.412484][T15421] veth0_macvtap: entered promiscuous mode [ 204.414414][ T29] audit: type=1326 audit(204.331:11164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd42ec29 code=0x7ffc0000 [ 204.426877][T15421] veth1_macvtap: entered promiscuous mode [ 204.443016][ T29] audit: type=1326 audit(204.331:11165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6ecd42ec29 code=0x7ffc0000 [ 204.471665][ T29] audit: type=1326 audit(204.331:11166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd42ec29 code=0x7ffc0000 [ 204.494782][ T29] audit: type=1326 audit(204.331:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.4.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecd42ec29 code=0x7ffc0000 [ 204.522878][T15421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.533375][T15421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.550117][ T3589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.558934][ T3589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.569325][ T3589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.587319][ T3589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.626000][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2934'. [ 204.676929][ T3571] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 204.689411][ T3571] EXT4-fs (loop2): This should not happen!! Data will be lost [ 204.689411][ T3571] [ 204.788340][T16016] binfmt_misc: register: failed to install interpreter file ./file2 [ 204.845255][ T3574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.875033][T16031] loop0: detected capacity change from 0 to 512 [ 204.884506][ T3574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.932959][ T3574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.996229][ T3574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 205.020638][T16017] chnl_net:caif_netlink_parms(): no params data found [ 205.071245][T16017] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.078572][T16017] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.086812][T16017] bridge_slave_0: entered allmulticast mode [ 205.093579][T16017] bridge_slave_0: entered promiscuous mode [ 205.100569][T16017] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.107743][T16017] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.116803][T16017] bridge_slave_1: entered allmulticast mode [ 205.123690][T16017] bridge_slave_1: entered promiscuous mode [ 205.155391][T16017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.169305][ T3574] bridge_slave_1: left allmulticast mode [ 205.175076][ T3574] bridge_slave_1: left promiscuous mode [ 205.180730][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.188653][ T3574] bridge_slave_0: left allmulticast mode [ 205.194354][ T3574] bridge_slave_0: left promiscuous mode [ 205.200020][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.255525][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.265434][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.274936][ T3574] bond0 (unregistering): Released all slaves [ 205.285178][ T3574] bond1 (unregistering): Released all slaves [ 205.294391][T16017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.334153][T16017] team0: Port device team_slave_0 added [ 205.341326][T16017] team0: Port device team_slave_1 added [ 205.346285][T16262] loop4: detected capacity change from 0 to 2048 [ 205.378968][T16017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.386091][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.412023][T16017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.424463][T16017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.431424][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.457427][T16017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.470496][ T3574] hsr_slave_0: left promiscuous mode [ 205.478603][ T3574] hsr_slave_1: left promiscuous mode [ 205.524440][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 205.534851][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 205.589960][T16017] hsr_slave_0: entered promiscuous mode [ 205.605510][T16017] hsr_slave_1: entered promiscuous mode [ 205.612829][T16017] debugfs: 'hsr0' already exists in 'hsr' [ 205.618617][T16017] Cannot create hsr debugfs directory [ 205.778358][T16397] loop5: detected capacity change from 0 to 1024 [ 205.783958][T16400] tun0: tun_chr_ioctl cmd 1074812118 [ 205.787966][T16397] journal_path: Lookup failure for './file1/../file0' [ 205.797088][T16397] EXT4-fs: error: could not find journal device path [ 205.800291][T16400] loop0: detected capacity change from 0 to 512 [ 205.812245][T16400] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.847791][T16400] EXT4-fs (loop0): 1 truncate cleaned up [ 205.868454][T16415] binfmt_misc: register: failed to install interpreter file ./file2 [ 205.916793][T16425] loop5: detected capacity change from 0 to 512 [ 205.951706][T16436] loop5: detected capacity change from 0 to 512 [ 205.985295][T16017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.997394][T16017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.010041][T16017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.027128][T16017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.085884][T16017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.109237][T16017] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.131181][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.138303][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.152196][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.159302][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.196038][T16017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.200193][T16481] loop5: detected capacity change from 0 to 512 [ 206.280389][T16494] loop4: detected capacity change from 0 to 1024 [ 206.294330][T16494] EXT4-fs: Ignoring removed orlov option [ 206.305967][T16017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.307150][T16494] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 206.323743][T16494] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 206.342452][T16494] JBD2: no valid journal superblock found [ 206.348298][T16494] EXT4-fs (loop4): Could not load journal inode [ 206.426572][T16017] veth0_vlan: entered promiscuous mode [ 206.443982][T16017] veth1_vlan: entered promiscuous mode [ 206.479070][T16017] veth0_macvtap: entered promiscuous mode [ 206.487162][T16017] veth1_macvtap: entered promiscuous mode [ 206.506751][T16017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.518867][T16017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.531332][ T3589] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.542424][ T3589] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.551184][ T3589] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.563922][ T3589] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.588165][T16521] loop5: detected capacity change from 0 to 2048 [ 206.645792][T16533] loop2: detected capacity change from 0 to 512 [ 206.686700][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 206.695780][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 206.748376][T16544] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3026'. [ 206.796921][T16547] loop2: detected capacity change from 0 to 1024 [ 206.807271][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 206.861572][T16558] loop4: detected capacity change from 0 to 128 [ 206.970372][T16584] loop0: detected capacity change from 0 to 512 [ 207.006882][T16584] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 207.015040][T16584] EXT4-fs (loop0): orphan cleanup on readonly fs [ 207.022231][T16584] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3030: Failed to acquire dquot type 1 [ 207.034151][T16584] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3030: bg 0: block 40: padding at end of block bitmap is not set [ 207.051863][T16584] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 207.082448][T16584] EXT4-fs (loop0): 1 truncate cleaned up [ 207.165838][T16597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3033'. [ 207.241186][T16606] loop2: detected capacity change from 0 to 512 [ 207.250618][T16606] EXT4-fs (loop2): orphan cleanup on readonly fs [ 207.259553][T16606] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3036: bad orphan inode 13 [ 207.271083][T16606] ext4_test_bit(bit=12, block=18) = 1 [ 207.276518][T16606] is_bad_inode(inode)=0 [ 207.280751][T16606] NEXT_ORPHAN(inode)=2130706432 [ 207.285717][T16606] max_ino=32 [ 207.288924][T16606] i_nlink=1 [ 207.311651][T16612] loop0: detected capacity change from 0 to 512 [ 207.318329][T16610] loop4: detected capacity change from 0 to 1024 [ 207.325891][T16610] EXT4-fs: Ignoring removed bh option [ 207.363337][T16619] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 207.382258][T16619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3036: bg 0: block 248: padding at end of block bitmap is not set [ 207.398841][T16619] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3036: Failed to acquire dquot type 1 [ 207.410541][T16619] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.028207][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3041'. [ 208.037180][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3041'. [ 208.097438][T16709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3045'. [ 208.286324][T16726] loop2: detected capacity change from 0 to 1024 [ 208.293616][T16726] journal_path: Lookup failure for './file1/../file0' [ 208.300464][T16726] EXT4-fs: error: could not find journal device path [ 208.319188][T16726] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3053'. [ 208.340844][T16731] loop5: detected capacity change from 0 to 512 [ 208.364769][T16731] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 208.374892][T16731] EXT4-fs (loop5): orphan cleanup on readonly fs [ 208.381703][T16731] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3054: Failed to acquire dquot type 1 [ 208.395594][T16731] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3054: bg 0: block 40: padding at end of block bitmap is not set [ 208.410639][T16731] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 208.425661][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3056'. [ 208.439958][T16731] EXT4-fs (loop5): 1 truncate cleaned up [ 208.510063][T16748] loop4: detected capacity change from 0 to 512 [ 208.617530][T16765] loop0: detected capacity change from 0 to 512 [ 208.665262][T16773] loop0: detected capacity change from 0 to 512 [ 208.672711][T16773] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.704843][T16773] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3065: Failed to acquire dquot type 1 [ 208.716802][T16773] EXT4-fs (loop0): 1 truncate cleaned up [ 208.729303][T16773] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3065: Failed to acquire dquot type 1 [ 208.830017][T16786] loop0: detected capacity change from 0 to 1024 [ 208.837232][T16786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.844773][T16786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.870580][T16786] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3069: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 208.931918][T16786] Invalid logical block size (6) [ 209.027323][T16801] loop0: detected capacity change from 0 to 2048 [ 209.067337][ T3314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 209.082756][ T3314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 209.137513][T16816] loop0: detected capacity change from 0 to 2048 [ 209.233999][ T29] kauditd_printk_skb: 1283 callbacks suppressed [ 209.234018][ T29] audit: type=1400 audit(209.211:12441): avc: denied { open } for pid=16826 comm="syz.0.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 209.259447][ T29] audit: type=1400 audit(209.211:12442): avc: denied { kernel } for pid=16826 comm="syz.0.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 209.278591][ T29] audit: type=1400 audit(209.211:12443): avc: denied { tracepoint } for pid=16826 comm="syz.0.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 209.298004][ T29] audit: type=1326 audit(209.211:12444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26531d5be7 code=0x7ffc0000 [ 209.321392][ T29] audit: type=1326 audit(209.211:12445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f265317ae09 code=0x7ffc0000 [ 209.344468][ T29] audit: type=1326 audit(209.211:12446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f26531dec29 code=0x7ffc0000 [ 209.367487][ T29] audit: type=1326 audit(209.241:12447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26531d5be7 code=0x7ffc0000 [ 209.393818][ T29] audit: type=1326 audit(209.241:12448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f265317ae09 code=0x7ffc0000 [ 209.416813][ T29] audit: type=1326 audit(209.241:12449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f26531dec29 code=0x7ffc0000 [ 209.439801][ T29] audit: type=1326 audit(209.261:12450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26531d5be7 code=0x7ffc0000 [ 209.630834][T16841] loop4: detected capacity change from 0 to 2048 [ 209.750301][T16850] FAULT_INJECTION: forcing a failure. [ 209.750301][T16850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.763474][T16850] CPU: 0 UID: 0 PID: 16850 Comm: syz.5.3088 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.763507][T16850] Tainted: [W]=WARN [ 209.763579][T16850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.763592][T16850] Call Trace: [ 209.763599][T16850] [ 209.763609][T16850] __dump_stack+0x1d/0x30 [ 209.763635][T16850] dump_stack_lvl+0xe8/0x140 [ 209.763659][T16850] dump_stack+0x15/0x1b [ 209.763680][T16850] should_fail_ex+0x265/0x280 [ 209.763779][T16850] should_fail+0xb/0x20 [ 209.763805][T16850] should_fail_usercopy+0x1a/0x20 [ 209.763836][T16850] _copy_from_iter+0xd2/0xe80 [ 209.763876][T16850] ? alloc_pages_mpol+0x201/0x250 [ 209.763915][T16850] copy_page_from_iter+0x178/0x2a0 [ 209.764021][T16850] tun_get_user+0x679/0x2680 [ 209.764058][T16850] ? ref_tracker_alloc+0x1f2/0x2f0 [ 209.764096][T16850] tun_chr_write_iter+0x15e/0x210 [ 209.764121][T16850] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 209.764185][T16850] vfs_write+0x527/0x960 [ 209.764280][T16850] ksys_write+0xda/0x1a0 [ 209.764304][T16850] __x64_sys_write+0x40/0x50 [ 209.764337][T16850] x64_sys_call+0x27fe/0x2ff0 [ 209.764363][T16850] do_syscall_64+0xd2/0x200 [ 209.764523][T16850] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 209.764553][T16850] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 209.764585][T16850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.764656][T16850] RIP: 0033:0x7f26531dd6df [ 209.764678][T16850] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 209.764700][T16850] RSP: 002b:00007f2651c3f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 209.764720][T16850] RAX: ffffffffffffffda RBX: 00007f2653425fa0 RCX: 00007f26531dd6df [ 209.764732][T16850] RDX: 000000000000007e RSI: 00002000000002c0 RDI: 00000000000000c8 [ 209.764743][T16850] RBP: 00007f2651c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.764755][T16850] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 209.764769][T16850] R13: 00007f2653426038 R14: 00007f2653425fa0 R15: 00007ffd24eb6f18 [ 209.764820][T16850] [ 210.072538][T16853] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.104112][T16867] loop0: detected capacity change from 0 to 512 [ 210.144246][T16877] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12 sclass=netlink_xfrm_socket pid=16877 comm=syz.0.3095 [ 210.217888][T16885] loop0: detected capacity change from 0 to 1024 [ 210.225112][T16885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.232381][T16885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.470451][ T3589] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.495393][T16934] loop4: detected capacity change from 0 to 512 [ 210.533781][ T3589] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.556924][T16895] chnl_net:caif_netlink_parms(): no params data found [ 210.566101][T17020] FAULT_INJECTION: forcing a failure. [ 210.566101][T17020] name failslab, interval 1, probability 0, space 0, times 0 [ 210.578923][T17020] CPU: 1 UID: 0 PID: 17020 Comm: syz.4.3107 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.578984][T17020] Tainted: [W]=WARN [ 210.578993][T17020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.579009][T17020] Call Trace: [ 210.579018][T17020] [ 210.579025][T17020] __dump_stack+0x1d/0x30 [ 210.579046][T17020] dump_stack_lvl+0xe8/0x140 [ 210.579072][T17020] dump_stack+0x15/0x1b [ 210.579090][T17020] should_fail_ex+0x265/0x280 [ 210.579170][T17020] ? sf_setstate+0x188/0x300 [ 210.579208][T17020] should_failslab+0x8c/0xb0 [ 210.579238][T17020] __kmalloc_cache_noprof+0x4c/0x320 [ 210.579279][T17020] sf_setstate+0x188/0x300 [ 210.579307][T17020] ip_mc_del_src+0x31b/0x480 [ 210.579393][T17020] ip_mc_drop_socket+0x145/0x1e0 [ 210.579428][T17020] inet_release+0x31/0xf0 [ 210.579458][T17020] sock_close+0x6b/0x150 [ 210.579496][T17020] ? __pfx_sock_close+0x10/0x10 [ 210.579595][T17020] __fput+0x29b/0x650 [ 210.579704][T17020] ____fput+0x1c/0x30 [ 210.579741][T17020] task_work_run+0x12e/0x1a0 [ 210.579773][T17020] exit_to_user_mode_loop+0xe4/0x100 [ 210.579801][T17020] do_syscall_64+0x1d6/0x200 [ 210.579883][T17020] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 210.579906][T17020] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.579939][T17020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.580027][T17020] RIP: 0033:0x7f6ecd42ec29 [ 210.580045][T17020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.580139][T17020] RSP: 002b:00007f6ecbe8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 210.580157][T17020] RAX: 0000000000000000 RBX: 00007f6ecd675fa0 RCX: 00007f6ecd42ec29 [ 210.580169][T17020] RDX: 0100000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 210.580184][T17020] RBP: 00007f6ecbe8f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.580199][T17020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.580276][T17020] R13: 00007f6ecd676038 R14: 00007f6ecd675fa0 R15: 00007ffeae59c3d8 [ 210.580302][T17020] [ 210.799282][ T3589] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.821306][T17048] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12 sclass=netlink_xfrm_socket pid=17048 comm=syz.4.3109 [ 210.859276][ T3589] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.887970][T16895] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.895238][T16895] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.905960][T16895] bridge_slave_0: entered allmulticast mode [ 210.912662][T16895] bridge_slave_0: entered promiscuous mode [ 210.919967][T16895] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.927139][T16895] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.934526][T16895] bridge_slave_1: entered allmulticast mode [ 210.940985][T16895] bridge_slave_1: entered promiscuous mode [ 211.004867][T16895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.018116][T16895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.041518][ T3589] bridge_slave_1: left allmulticast mode [ 211.047563][ T3589] bridge_slave_1: left promiscuous mode [ 211.053302][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.065343][T17138] loop4: detected capacity change from 0 to 2048 [ 211.074369][ T3589] bridge_slave_0: left promiscuous mode [ 211.080042][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.119092][T17149] loop5: detected capacity change from 0 to 512 [ 211.135941][T17149] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 211.145202][T17149] EXT4-fs (loop5): orphan cleanup on readonly fs [ 211.153790][T17149] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 211.166053][T17149] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 211.169068][T17138] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.180457][T17149] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 211.195560][T17138] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1122 with error 28 [ 211.205678][T17149] EXT4-fs (loop5): 1 truncate cleaned up [ 211.216029][T17138] EXT4-fs (loop4): This should not happen!! Data will be lost [ 211.216029][T17138] [ 211.216140][T17138] EXT4-fs (loop4): Total free blocks count 0 [ 211.216153][T17138] EXT4-fs (loop4): Free/Dirty block details [ 211.216165][T17138] EXT4-fs (loop4): free_blocks=2415919104 [ 211.216177][T17138] EXT4-fs (loop4): dirty_blocks=1136 [ 211.254575][T17138] EXT4-fs (loop4): Block reservation details [ 211.261142][T17138] EXT4-fs (loop4): i_reserved_data_blocks=71 [ 211.326374][ T3589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.342983][ T3589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.349256][T17159] binfmt_misc: register: failed to install interpreter file ./file2 [ 211.361141][ T3589] bond0 (unregistering): Released all slaves [ 211.382716][T17168] loop4: detected capacity change from 0 to 512 [ 211.394222][T16895] team0: Port device team_slave_0 added [ 211.401415][T16895] team0: Port device team_slave_1 added [ 211.417510][ T3589] tipc: Disabling bearer [ 211.422623][ T3589] tipc: Left network mode [ 211.434275][T16895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.441249][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.467427][T16895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.484348][T16895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.491310][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.517420][T16895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.530821][ T3589] hsr_slave_0: left promiscuous mode [ 211.538622][ T3589] hsr_slave_1: left promiscuous mode [ 211.545872][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.553348][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.561195][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.568629][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.577874][ T3589] veth1_macvtap: left promiscuous mode [ 211.583468][ T3589] veth0_macvtap: left promiscuous mode [ 211.589007][ T3589] veth1_vlan: left promiscuous mode [ 211.594398][ T3589] veth0_vlan: left promiscuous mode [ 211.659467][ T3589] team0 (unregistering): Port device team_slave_1 removed [ 211.669389][ T3589] team0 (unregistering): Port device team_slave_0 removed [ 211.728007][T16895] hsr_slave_0: entered promiscuous mode [ 211.734047][T16895] hsr_slave_1: entered promiscuous mode [ 211.739980][T16895] debugfs: 'hsr0' already exists in 'hsr' [ 211.745747][T16895] Cannot create hsr debugfs directory [ 211.938800][T17304] loop2: detected capacity change from 0 to 512 [ 211.947151][T17304] EXT4-fs (loop2): orphan cleanup on readonly fs [ 211.954127][T17304] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3122: bad orphan inode 13 [ 211.964418][T17304] ext4_test_bit(bit=12, block=18) = 1 [ 211.969825][T17304] is_bad_inode(inode)=0 [ 211.974149][T17304] NEXT_ORPHAN(inode)=2130706432 [ 211.979079][T17304] max_ino=32 [ 211.982355][T17304] i_nlink=1 [ 212.040495][T17313] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 212.052702][T17313] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3122: bg 0: block 248: padding at end of block bitmap is not set [ 212.068419][T17313] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3122: Failed to acquire dquot type 1 [ 212.080054][T17313] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 212.113159][T16895] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.121847][T16895] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.130580][T16895] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.139608][T16895] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.167309][T17334] __nla_validate_parse: 8 callbacks suppressed [ 212.167329][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3123'. [ 212.203317][T16895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.225631][T16895] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.242593][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.249740][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.269815][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.276963][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.300584][T17344] loop4: detected capacity change from 0 to 2048 [ 212.315892][T17341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=17341 comm=syz.1.3127 [ 212.329883][T17346] loop5: detected capacity change from 0 to 1024 [ 212.348358][T16895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.358986][T16895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.388407][T17346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.398563][T17346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.409430][T17344] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 212.424909][T17344] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 632 with error 28 [ 212.437479][T17344] EXT4-fs (loop4): This should not happen!! Data will be lost [ 212.437479][T17344] [ 212.447263][T17344] EXT4-fs (loop4): Total free blocks count 0 [ 212.453329][T17344] EXT4-fs (loop4): Free/Dirty block details [ 212.459246][T17344] EXT4-fs (loop4): free_blocks=2415919104 [ 212.465014][T17344] EXT4-fs (loop4): dirty_blocks=640 [ 212.470236][T17344] EXT4-fs (loop4): Block reservation details [ 212.476268][T17344] EXT4-fs (loop4): i_reserved_data_blocks=40 [ 212.507149][T16895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.516202][T17346] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3129: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 212.569919][T17370] loop4: detected capacity change from 0 to 512 [ 212.592704][T17346] Invalid logical block size (6) [ 212.624387][T16895] veth0_vlan: entered promiscuous mode [ 212.634806][T16895] veth1_vlan: entered promiscuous mode [ 212.640495][T17387] loop5: detected capacity change from 0 to 512 [ 212.649036][T17387] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 212.658047][T17387] EXT4-fs (loop5): orphan cleanup on readonly fs [ 212.665843][T17387] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 212.671205][T16895] veth0_macvtap: entered promiscuous mode [ 212.685496][T17387] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 212.700689][T17387] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 212.701662][T16895] veth1_macvtap: entered promiscuous mode [ 212.714372][T17387] EXT4-fs (loop5): 1 truncate cleaned up [ 212.721368][T16895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.733997][T16895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.745799][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.755200][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.764428][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.777765][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.851296][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 212.884221][T17411] loop0: detected capacity change from 0 to 1024 [ 212.891245][T17411] EXT4-fs: Ignoring removed orlov option [ 212.897839][T17411] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 212.908912][T17411] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 212.919517][T17411] JBD2: no valid journal superblock found [ 212.925380][T17411] EXT4-fs (loop0): Could not load journal inode [ 212.976328][T17422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3143'. [ 213.017669][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3140'. [ 213.026622][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3140'. [ 213.182211][T17438] tun0: tun_chr_ioctl cmd 1074812118 [ 213.191611][T17438] loop0: detected capacity change from 0 to 512 [ 213.192931][T17443] loop2: detected capacity change from 0 to 512 [ 213.205058][T17438] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.216265][T17443] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 213.222508][T17438] EXT4-fs (loop0): 1 truncate cleaned up [ 213.226852][T17443] EXT4-fs (loop2): orphan cleanup on readonly fs [ 213.236859][T17443] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 213.249707][T17443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 213.264056][T17443] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 213.273539][T17443] EXT4-fs (loop2): 1 truncate cleaned up [ 213.332930][T17457] loop0: detected capacity change from 0 to 512 [ 213.341162][T17457] EXT4-fs (loop0): orphan cleanup on readonly fs [ 213.347934][T17457] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3153: bad orphan inode 13 [ 213.358462][T17457] ext4_test_bit(bit=12, block=18) = 1 [ 213.363944][T17457] is_bad_inode(inode)=0 [ 213.368266][T17457] NEXT_ORPHAN(inode)=2130706432 [ 213.373232][T17457] max_ino=32 [ 213.376462][T17457] i_nlink=1 [ 213.395322][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3154'. [ 213.439412][T17464] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 213.453096][T17464] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3153: bg 0: block 248: padding at end of block bitmap is not set [ 213.468084][T17464] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3153: Failed to acquire dquot type 1 [ 213.480181][T17464] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.691568][T17475] loop4: detected capacity change from 0 to 1024 [ 213.693864][T17470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3157'. [ 213.699013][T17475] EXT4-fs: Ignoring removed bh option [ 213.707030][T17470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3157'. [ 213.785154][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3163'. [ 213.819019][T17501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3165'. [ 214.209248][T17537] loop0: detected capacity change from 0 to 512 [ 214.250371][ T29] kauditd_printk_skb: 953 callbacks suppressed [ 214.250389][ T29] audit: type=1400 audit(214.221:13394): avc: denied { mounton } for pid=17536 comm="syz.0.3180" path="/9/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.289740][T17542] loop2: detected capacity change from 0 to 512 [ 214.317508][ T29] audit: type=1400 audit(214.261:13395): avc: denied { mount } for pid=17536 comm="syz.0.3180" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 214.334235][T17548] loop0: detected capacity change from 0 to 512 [ 214.338918][ T29] audit: type=1400 audit(214.281:13396): avc: denied { add_name } for pid=17536 comm="syz.0.3180" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.365867][ T29] audit: type=1400 audit(214.281:13397): avc: denied { create } for pid=17536 comm="syz.0.3180" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.386280][ T29] audit: type=1400 audit(214.281:13398): avc: denied { read append open } for pid=17536 comm="syz.0.3180" path="/9/file0/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.409975][ T29] audit: type=1400 audit(214.281:13399): avc: denied { map } for pid=17536 comm="syz.0.3180" path="/9/file0/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.432537][ T29] audit: type=1400 audit(214.281:13400): avc: denied { write } for pid=17536 comm="syz.0.3180" path="/9/file0/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.463835][T17548] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 214.472541][T17548] EXT4-fs (loop0): orphan cleanup on readonly fs [ 214.479955][T17548] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 214.490187][T17548] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 214.499660][T17548] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3182: Failed to acquire dquot type 1 [ 214.513526][T17548] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3182: bg 0: block 40: padding at end of block bitmap is not set [ 214.530919][T17548] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 214.541298][T17548] EXT4-fs (loop0): 1 truncate cleaned up [ 214.547068][ T29] audit: type=1400 audit(214.521:13401): avc: denied { create } for pid=17554 comm="syz.1.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.595336][T17556] ================================================================== [ 214.603463][T17556] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 214.610768][T17556] [ 214.613096][T17556] write to 0xffffffff88e85ce8 of 4 bytes by task 17558 on cpu 1: [ 214.620819][T17556] avc_ss_reset+0x20c/0x240 [ 214.625346][T17556] security_set_bools+0x301/0x340 [ 214.630383][T17556] sel_commit_bools_write+0x1ea/0x270 [ 214.635859][T17556] vfs_writev+0x406/0x8b0 [ 214.640203][T17556] do_writev+0xe7/0x210 [ 214.644371][T17556] __x64_sys_writev+0x45/0x50 [ 214.649070][T17556] x64_sys_call+0x1e9a/0x2ff0 [ 214.653758][T17556] do_syscall_64+0xd2/0x200 [ 214.658292][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.664198][T17556] [ 214.666529][T17556] read to 0xffffffff88e85ce8 of 4 bytes by task 17556 on cpu 0: [ 214.674176][T17556] avc_policy_seqno+0x15/0x30 [ 214.678872][T17556] selinux_file_permission+0x1cd/0x320 [ 214.684344][T17556] security_file_permission+0x3e/0x80 [ 214.689738][T17556] rw_verify_area+0x8d/0x160 [ 214.694353][T17556] __io_read+0x3d7/0xc20 [ 214.698611][T17556] io_read+0x1c/0x60 [ 214.702520][T17556] __io_issue_sqe+0xfb/0x2e0 [ 214.707119][T17556] io_issue_sqe+0x53/0x970 [ 214.711544][T17556] io_submit_sqes+0x675/0x1060 [ 214.716324][T17556] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 214.721890][T17556] __x64_sys_io_uring_enter+0x78/0x90 [ 214.727274][T17556] x64_sys_call+0x2de1/0x2ff0 [ 214.731958][T17556] do_syscall_64+0xd2/0x200 [ 214.736485][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.742390][T17556] [ 214.744746][T17556] value changed: 0x00000011 -> 0x00000012 [ 214.750468][T17556] [ 214.752791][T17556] Reported by Kernel Concurrency Sanitizer on: [ 214.758950][T17556] CPU: 0 UID: 0 PID: 17556 Comm: syz.1.3183 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.770518][T17556] Tainted: [W]=WARN [ 214.774321][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.784390][T17556] ================================================================== [ 214.845507][T17563] loop0: detected capacity change from 0 to 2048 [ 214.883012][T16895] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 214.897743][T16895] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem