last executing test programs: 2m8.17290096s ago: executing program 3 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m8.092089683s ago: executing program 3 (id=1033): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2m8.021719866s ago: executing program 3 (id=1036): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x20002}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x4, 0x0, @void}, 0x10) 2m7.972212788s ago: executing program 3 (id=1037): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 2m7.828991355s ago: executing program 3 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m7.212061381s ago: executing program 3 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 2m7.211902011s ago: executing program 32 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 1m52.424412958s ago: executing program 5 (id=1405): r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002, 0x4, 0x43}, 0x0, 0x0) 1m52.36431568s ago: executing program 5 (id=1409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000080)="051a3018b64b673868a6b7afa2a700000e8000658f06000000000000", 0x1c}], 0x2) 1m52.260603155s ago: executing program 5 (id=1410): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0)={[], 0x1000000}, &(0x7f0000000200), 0x0) 1m52.235619796s ago: executing program 5 (id=1411): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m52.131409161s ago: executing program 5 (id=1413): bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x68040200) mmap(&(0x7f0000a65000/0x1000)=nil, 0x1000, 0x2000009, 0x8031, 0xffffffffffffffff, 0xe36b9000) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffbe, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e12080005007f3704d373000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x4040010) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m51.790708855s ago: executing program 5 (id=1421): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 1m51.773540046s ago: executing program 33 (id=1421): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 1m16.016130656s ago: executing program 2 (id=2166): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x4004820) unshare(0x6a040000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 1m13.992526173s ago: executing program 2 (id=2226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'veth1_vlan\x00', 0x200}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) 1m13.752015724s ago: executing program 2 (id=2232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}, {&(0x7f0000003000)="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", 0x1000}], 0x8}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd80}, &(0x7f0000000300)=0x40) 1m13.751666503s ago: executing program 2 (id=2234): r0 = gettid() socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800714, &(0x7f0000000000)={[{}]}, 0xff, 0x490, &(0x7f0000000640)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000000020, 0x8005, 0x0, 0x0, 0x11, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71efdd23dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syncfs(r1) 1m13.440020677s ago: executing program 2 (id=2238): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x3ff}, 0x8) 1m13.256374095s ago: executing program 2 (id=2240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) semop(0x0, &(0x7f00000001c0), 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000100)=""/174, 0xae) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) semop(0x0, 0x0, 0x0) 1m13.223853636s ago: executing program 34 (id=2240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) semop(0x0, &(0x7f00000001c0), 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000100)=""/174, 0xae) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) semop(0x0, 0x0, 0x0) 10.562491797s ago: executing program 7 (id=3668): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 9.720384723s ago: executing program 7 (id=3703): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 9.650454986s ago: executing program 7 (id=3706): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 9.603958918s ago: executing program 7 (id=3708): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000002c0)={[{@sysvgroups}, {@jqfmt_vfsv0}]}, 0x1, 0x4b4, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4) rmdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 9.31323593s ago: executing program 7 (id=3718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000040)) 8.688640507s ago: executing program 7 (id=3730): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x85\x99\xab\xa7AkQ\x16$\x15\xcf\x14#\xad\x1f\xce}K\xea\x90.!\xd6z\x9e\xc3\xe5\xbf\xc2c\x02\xdc\x86\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xdc)\x82\xeb\b\xa9\x14\xf86\xdc\x8e$B\xa0\x12Zqeo\xb8Z\xa1{\x9ewcbQ[O\xf3y\x99\xc7\xd29\xb7R\xc4:5wV\x86\xef\x95\xa8\x8f2TmN]0\xb8K\x95vP~\xbd\f>m\n\xb3\xe5\x94\xa7\xd3\xc3_\xc9\xcc\xa0nN\xc14k\xcd\xad\x9d}\xd5$\xaaf\xe8\xdd\xcf\t\xb8\x89\xb5\x94t_\xf0\xfc\x18\xa2\xa2rm@\x9b1~3\xbc8\xde\xe3n~\xd2\xd2') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000415, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) 8.639318659s ago: executing program 35 (id=3730): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x85\x99\xab\xa7AkQ\x16$\x15\xcf\x14#\xad\x1f\xce}K\xea\x90.!\xd6z\x9e\xc3\xe5\xbf\xc2c\x02\xdc\x86\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xdc)\x82\xeb\b\xa9\x14\xf86\xdc\x8e$B\xa0\x12Zqeo\xb8Z\xa1{\x9ewcbQ[O\xf3y\x99\xc7\xd29\xb7R\xc4:5wV\x86\xef\x95\xa8\x8f2TmN]0\xb8K\x95vP~\xbd\f>m\n\xb3\xe5\x94\xa7\xd3\xc3_\xc9\xcc\xa0nN\xc14k\xcd\xad\x9d}\xd5$\xaaf\xe8\xdd\xcf\t\xb8\x89\xb5\x94t_\xf0\xfc\x18\xa2\xa2rm@\x9b1~3\xbc8\xde\xe3n~\xd2\xd2') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000415, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) 2.175034777s ago: executing program 6 (id=3891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.87544269s ago: executing program 6 (id=3893): write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x18) fsync(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="14"], &(0x7f0000001300), 0x600) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000041) 1.787460234s ago: executing program 6 (id=3897): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) close(r0) 1.473989657s ago: executing program 0 (id=3906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1.390482911s ago: executing program 0 (id=3910): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) 1.312588254s ago: executing program 0 (id=3913): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.272051166s ago: executing program 0 (id=3916): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r0}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 1.215877238s ago: executing program 0 (id=3918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 920.049081ms ago: executing program 6 (id=3929): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 881.025593ms ago: executing program 6 (id=3932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 713.203179ms ago: executing program 4 (id=3938): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 601.373134ms ago: executing program 8 (id=3940): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) epoll_create1(0x80000) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 579.793285ms ago: executing program 6 (id=3942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 516.028168ms ago: executing program 8 (id=3943): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) 515.560188ms ago: executing program 8 (id=3944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, 0x5394b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x24000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 506.926078ms ago: executing program 8 (id=3945): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001"], 0x110}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18) 420.018582ms ago: executing program 1 (id=3947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 418.603652ms ago: executing program 4 (id=3948): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x4000000080000000}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000300)}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 383.445064ms ago: executing program 1 (id=3949): r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 378.289714ms ago: executing program 8 (id=3950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x7fff}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f0000002240)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x5d) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 361.801935ms ago: executing program 0 (id=3951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 303.827507ms ago: executing program 4 (id=3952): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 303.366477ms ago: executing program 4 (id=3953): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000e89000/0x3000)=nil, 0x3000, 0x2, 0x50, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 302.996017ms ago: executing program 1 (id=3954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x40012, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 285.943908ms ago: executing program 4 (id=3955): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 218.478221ms ago: executing program 4 (id=3956): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321", 0x12) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 198.594261ms ago: executing program 1 (id=3957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r3 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 197.557941ms ago: executing program 8 (id=3958): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="020300031a0000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000015000000000107000000000000000a00080008"], 0xd0}, 0x1, 0x7}, 0x14) 141.925784ms ago: executing program 1 (id=3959): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) kernel console output (not intermixed with test programs): d disabled state [ 154.711972][T11831] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.891773][T11831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.920879][T11831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.084817][T11846] syz_tun: entered allmulticast mode [ 155.137946][ T4661] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.162444][ T4661] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.195692][T11830] syz_tun: left allmulticast mode [ 155.217308][T11864] random: crng reseeded on system resumption [ 155.230185][ T4661] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.284948][T11867] atomic_op ffff888132e9b128 conn xmit_atomic 0000000000000000 [ 155.287630][ T4661] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.486579][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.508754][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2699'. [ 155.518265][T11883] netem: change failed [ 155.551781][T11888] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2700'. [ 155.630989][T11898] loop7: detected capacity change from 0 to 128 [ 155.836518][T11920] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2714'. [ 155.883193][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 155.883211][ T29] audit: type=1326 audit(1764465180.016:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 155.945526][ T29] audit: type=1326 audit(1764465180.056:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 155.969157][ T29] audit: type=1326 audit(1764465180.056:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 155.992877][ T29] audit: type=1326 audit(1764465180.056:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 156.016491][ T29] audit: type=1326 audit(1764465180.056:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 156.031809][T11908] syz.7.2704: attempt to access beyond end of device [ 156.031809][T11908] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 156.040038][ T29] audit: type=1326 audit(1764465180.056:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 156.040094][ T29] audit: type=1326 audit(1764465180.056:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 156.040197][ T29] audit: type=1326 audit(1764465180.056:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 156.040234][ T29] audit: type=1326 audit(1764465180.056:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 156.040267][ T29] audit: type=1326 audit(1764465180.056:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11923 comm="syz.6.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 156.177781][T11908] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 156.191133][T11898] syz.7.2704: attempt to access beyond end of device [ 156.191133][T11898] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 156.205583][T11898] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 156.226703][T11908] syz.7.2704: attempt to access beyond end of device [ 156.226703][T11908] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 156.241328][T11908] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 156.507644][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.520200][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.653374][T11965] lo speed is unknown, defaulting to 1000 [ 156.736729][T11971] wg2: left promiscuous mode [ 156.741474][T11971] wg2: left allmulticast mode [ 156.749540][T11971] wg2: entered promiscuous mode [ 156.754531][T11971] wg2: entered allmulticast mode [ 156.781107][T11974] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2737'. [ 156.832806][T11979] loop0: detected capacity change from 0 to 1024 [ 156.841011][T11979] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.852970][T11979] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 156.861974][T11979] EXT4-fs (loop0): orphan cleanup on readonly fs [ 156.869438][T11979] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2739: Freeing blocks not in datazone - block = 0, count = 4096 [ 156.883965][T11979] EXT4-fs (loop0): 1 orphan inode deleted [ 156.891398][T11979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.219523][T11996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.386464][T12014] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2754'. [ 157.399022][T12012] loop1: detected capacity change from 0 to 8192 [ 157.411991][T12012] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.442034][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.454970][T12020] loop6: detected capacity change from 0 to 512 [ 157.481696][T12020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.496186][T12020] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.511110][T12029] netlink: 'syz.1.2760': attribute type 30 has an invalid length. [ 157.542121][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.620129][T12038] loop0: detected capacity change from 0 to 2048 [ 157.652092][T12038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.698612][T12055] loop4: detected capacity change from 0 to 164 [ 157.772532][T12037] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 157.804078][T12037] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 10 with error 28 [ 157.816480][T12037] EXT4-fs (loop0): This should not happen!! Data will be lost [ 157.816480][T12037] [ 157.826147][T12037] EXT4-fs (loop0): Total free blocks count 0 [ 157.832167][T12037] EXT4-fs (loop0): Free/Dirty block details [ 157.838138][T12037] EXT4-fs (loop0): free_blocks=2415919504 [ 157.843938][T12037] EXT4-fs (loop0): dirty_blocks=16 [ 157.849123][T12037] EXT4-fs (loop0): Block reservation details [ 157.855115][T12037] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 157.861620][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2771'. [ 157.884325][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.949296][T12067] loop6: detected capacity change from 0 to 1024 [ 157.970611][T12067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.008416][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.471467][T12094] loop0: detected capacity change from 0 to 512 [ 158.488899][T12094] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 158.489644][T12096] netlink: 212892 bytes leftover after parsing attributes in process `syz.6.2786'. [ 158.623201][T12102] loop7: detected capacity change from 0 to 1024 [ 158.638592][T12102] EXT4-fs: Ignoring removed orlov option [ 158.654870][T12102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.733285][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.769036][T12109] netlink: 'syz.7.2792': attribute type 1 has an invalid length. [ 158.783594][T12109] bond1: entered promiscuous mode [ 158.790305][T12109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.838536][T12109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.853290][T12109] bond1: (slave bond2): making interface the new active one [ 158.860649][T12109] bond2: entered promiscuous mode [ 158.866642][T12109] bond1: (slave bond2): Enslaving as an active interface with an up link [ 158.945192][T12113] lo speed is unknown, defaulting to 1000 [ 159.081280][T12127] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.088957][T12127] vhci_hcd: invalid port number 253 [ 159.091010][T12129] loop0: detected capacity change from 0 to 764 [ 159.094193][T12127] vhci_hcd: invalid port number 253 [ 159.273460][T12137] loop7: detected capacity change from 0 to 512 [ 159.306327][T12137] EXT4-fs (loop7): orphan cleanup on readonly fs [ 159.371371][T12137] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.2802: bad orphan inode 13 [ 159.432407][T12137] ext4_test_bit(bit=12, block=18) = 1 [ 159.437895][T12137] is_bad_inode(inode)=0 [ 159.442070][T12137] NEXT_ORPHAN(inode)=2130706432 [ 159.447075][T12137] max_ino=32 [ 159.450307][T12137] i_nlink=1 [ 159.569803][T12137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.611236][T12137] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 159.642094][T12137] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 159.682899][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.771665][T12165] loop6: detected capacity change from 0 to 164 [ 159.778922][T12165] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.794379][T12165] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.803525][T12165] rock: directory entry would overflow storage [ 159.809742][T12165] rock: sig=0x4f50, size=4, remaining=3 [ 159.815346][T12165] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 160.041474][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2818'. [ 160.079714][T12185] loop7: detected capacity change from 0 to 128 [ 160.088300][T12187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2821'. [ 160.098696][T12187] netem: change failed [ 160.188997][T12185] syz.7.2820: attempt to access beyond end of device [ 160.188997][T12185] loop7: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 160.203946][T12185] syz.7.2820: attempt to access beyond end of device [ 160.203946][T12185] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 160.239954][T12202] loop0: detected capacity change from 0 to 764 [ 160.245096][T12185] syz.7.2820: attempt to access beyond end of device [ 160.245096][T12185] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 160.249672][T12195] lo speed is unknown, defaulting to 1000 [ 160.261145][T12185] syz.7.2820: attempt to access beyond end of device [ 160.261145][T12185] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 160.279447][T12202] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 160.280356][T12185] syz.7.2820: attempt to access beyond end of device [ 160.280356][T12185] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 160.301475][T12185] syz.7.2820: attempt to access beyond end of device [ 160.301475][T12185] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 160.315127][T12185] syz.7.2820: attempt to access beyond end of device [ 160.315127][T12185] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 160.339851][T12202] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 160.609908][T12214] loop0: detected capacity change from 0 to 512 [ 160.621999][T12217] ip6t_srh: unknown srh match flags 4000 [ 160.650673][T12214] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 160.685192][T12214] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.2832: iget: bad i_size value: 12154757448730 [ 160.731348][T12214] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2832: couldn't read orphan inode 13 (err -117) [ 160.767228][T12214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.838989][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.964089][T12236] sch_fq: defrate 0 ignored. [ 161.265302][T12251] loop6: detected capacity change from 0 to 512 [ 161.272792][T12251] EXT4-fs: Ignoring removed i_version option [ 161.279024][T12251] EXT4-fs: Ignoring removed bh option [ 161.355189][T12260] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2849'. [ 161.460717][T12262] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2853'. [ 161.484915][T12251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.498920][T12251] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.581337][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.597985][T12268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12268 comm=syz.1.2855 [ 161.679845][T12280] syzkaller0: entered allmulticast mode [ 161.686722][T12280] syzkaller0: entered promiscuous mode [ 161.694152][T12280] syzkaller0 (unregistering): left allmulticast mode [ 161.702009][T12280] syzkaller0 (unregistering): left promiscuous mode [ 161.769406][T12287] loop1: detected capacity change from 0 to 164 [ 161.790058][T12287] bio_check_eod: 100 callbacks suppressed [ 161.790074][T12287] syz.1.2863: attempt to access beyond end of device [ 161.790074][T12287] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 161.829513][T12287] syz.1.2863: attempt to access beyond end of device [ 161.829513][T12287] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 161.879415][T12296] loop7: detected capacity change from 0 to 1024 [ 161.887386][T12294] loop0: detected capacity change from 0 to 1024 [ 161.894458][T12296] EXT4-fs: inline encryption not supported [ 161.901332][T12296] EXT4-fs: Ignoring removed i_version option [ 161.909256][T12298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12298 comm=syz.1.2869 [ 161.923834][T12296] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.940043][T12294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.953722][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 161.953739][ T29] audit: type=1400 audit(1764465186.089:5197): avc: denied { append } for pid=12295 comm="syz.7.2868" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.991953][T12294] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.2866: inode #183: comm syz.0.2866: iget: illegal inode # [ 162.009748][T12294] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2866: error while reading EA inode 183 err=-117 [ 162.037835][ T29] audit: type=1400 audit(1764465186.179:5198): avc: denied { read } for pid=12309 comm="syz.7.2873" path="socket:[32330]" dev="sockfs" ino=32330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.065485][T12313] loop1: detected capacity change from 0 to 512 [ 162.072699][T12313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.081502][T12313] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.109803][T12313] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2872: Allocating blocks 41-42 which overlap fs metadata [ 162.130227][T12313] Quota error (device loop1): write_blk: dquota write failed [ 162.137754][T12313] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 162.147482][T12313] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2872: Allocating blocks 41-42 which overlap fs metadata [ 162.195571][ T29] audit: type=1326 audit(1764465186.329:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12328 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 162.219216][ T29] audit: type=1326 audit(1764465186.329:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12328 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 162.222841][T12313] Quota error (device loop1): write_blk: dquota write failed [ 162.242881][ T29] audit: type=1326 audit(1764465186.329:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12328 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 162.242917][ T29] audit: type=1326 audit(1764465186.329:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12328 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 162.242985][ T29] audit: type=1326 audit(1764465186.329:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12328 comm="syz.0.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 162.325133][T12313] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2872: Failed to acquire dquot type 1 [ 162.339169][T12313] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 162.346315][T12334] netlink: 'syz.7.2881': attribute type 7 has an invalid length. [ 162.357496][T12313] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.2872: corrupted inode contents [ 162.361517][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2881'. [ 162.374776][T12313] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.2872: mark_inode_dirty error [ 162.395873][T12313] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.2872: corrupted inode contents [ 162.417807][T12313] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2872: mark_inode_dirty error [ 162.433821][T12337] loop7: detected capacity change from 0 to 256 [ 162.444305][T12313] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.2872: corrupted inode contents [ 162.459900][T12338] loop6: detected capacity change from 0 to 512 [ 162.463633][T12337] FAT-fs (loop7): Directory bread(block 64) failed [ 162.473762][T12337] FAT-fs (loop7): Directory bread(block 65) failed [ 162.481362][T12337] FAT-fs (loop7): Directory bread(block 66) failed [ 162.488493][T12313] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 162.497155][T12337] FAT-fs (loop7): Directory bread(block 67) failed [ 162.503742][T12337] FAT-fs (loop7): Directory bread(block 68) failed [ 162.511700][T12313] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.2872: corrupted inode contents [ 162.546511][T12337] FAT-fs (loop7): Directory bread(block 69) failed [ 162.553079][T12337] FAT-fs (loop7): Directory bread(block 70) failed [ 162.566713][T12313] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.2872: mark_inode_dirty error [ 162.578719][T12337] FAT-fs (loop7): Directory bread(block 71) failed [ 162.578760][T12337] FAT-fs (loop7): Directory bread(block 72) failed [ 162.578861][T12337] FAT-fs (loop7): Directory bread(block 73) failed [ 162.613574][T12313] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 162.627702][T12313] EXT4-fs (loop1): 1 truncate cleaned up [ 162.627768][T12337] syz.7.2883: attempt to access beyond end of device [ 162.627768][T12337] loop7: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 162.726470][T12344] pim6reg1: entered promiscuous mode [ 162.731831][T12344] pim6reg1: entered allmulticast mode [ 162.806897][T11691] IPVS: starting estimator thread 0... [ 162.817605][T12350] syzkaller0: entered promiscuous mode [ 162.823217][T12350] syzkaller0: entered allmulticast mode [ 162.896216][T12353] IPVS: using max 2688 ests per chain, 134400 per kthread [ 162.910634][T12357] loop6: detected capacity change from 0 to 8192 [ 162.936315][T12355] lo speed is unknown, defaulting to 1000 [ 163.070463][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2897'. [ 163.092202][T12369] loop0: detected capacity change from 0 to 1764 [ 163.163196][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2900'. [ 163.199688][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2900'. [ 163.233499][T12379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2902'. [ 163.290629][T12388] loop4: detected capacity change from 0 to 512 [ 163.305375][T12388] EXT4-fs: Ignoring removed i_version option [ 163.311478][T12388] EXT4-fs: Ignoring removed bh option [ 163.342027][T12388] ext4 filesystem being mounted at /605/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.342607][T12386] loop7: detected capacity change from 0 to 8192 [ 163.655588][T12409] loop7: detected capacity change from 0 to 2048 [ 163.750967][T12408] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 163.774911][T12408] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 12 with error 28 [ 163.787407][T12408] EXT4-fs (loop7): This should not happen!! Data will be lost [ 163.787407][T12408] [ 163.797125][T12408] EXT4-fs (loop7): Total free blocks count 0 [ 163.803152][T12408] EXT4-fs (loop7): Free/Dirty block details [ 163.809099][T12408] EXT4-fs (loop7): free_blocks=2415919504 [ 163.814896][T12408] EXT4-fs (loop7): dirty_blocks=16 [ 163.820446][T12408] EXT4-fs (loop7): Block reservation details [ 163.826491][T12408] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 163.864923][T12427] loop7: detected capacity change from 0 to 512 [ 163.871743][T12427] EXT4-fs: Ignoring removed i_version option [ 163.877898][T12427] EXT4-fs: Ignoring removed bh option [ 163.911776][T12427] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.017279][T12437] loop7: detected capacity change from 0 to 512 [ 164.027113][T12437] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.279598][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2925'. [ 164.402725][T12459] loop1: detected capacity change from 0 to 512 [ 164.431746][T12465] netlink: 360 bytes leftover after parsing attributes in process `+}[@'. [ 164.449264][T12459] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2931: bg 0: block 248: padding at end of block bitmap is not set [ 164.467188][T12459] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2931: Failed to acquire dquot type 1 [ 164.483168][T12459] EXT4-fs (loop1): 1 truncate cleaned up [ 164.492682][T12459] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.512687][T12459] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2931: Failed to acquire dquot type 1 [ 164.566087][T12459] .`: (slave dummy0): Releasing backup interface [ 164.586535][T12459] .`: (slave 77ÿ): Releasing backup interface [ 164.605762][T12459] .`: (slave bond_slave_1): Releasing backup interface [ 164.620197][T12459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.629206][T12459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.653139][T12459] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.828460][T12488] ip6gre1: entered allmulticast mode [ 165.019016][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2945'. [ 165.032416][T12495] loop1: detected capacity change from 0 to 512 [ 165.040105][T12495] EXT4-fs: Ignoring removed i_version option [ 165.042012][T12496] syzkaller0: entered allmulticast mode [ 165.047382][T12495] EXT4-fs: Ignoring removed bh option [ 165.058091][T12496] syzkaller0: entered promiscuous mode [ 165.065529][T12496] syzkaller0 (unregistering): left allmulticast mode [ 165.072332][T12496] syzkaller0 (unregistering): left promiscuous mode [ 165.080931][T12495] ext4 filesystem being mounted at /559/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.094678][T12500] loop6: detected capacity change from 0 to 764 [ 165.102117][T12500] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 165.113762][T12500] Symlink component flag not implemented [ 165.119849][T12500] Symlink component flag not implemented (7) [ 165.147314][T12505] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 165.197398][T12512] loop4: detected capacity change from 0 to 512 [ 165.209773][T12514] bridge: RTM_NEWNEIGH with invalid ether address [ 165.228640][T12512] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2951: bg 0: block 248: padding at end of block bitmap is not set [ 165.245057][T12512] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2951: Failed to acquire dquot type 1 [ 165.258075][T12512] EXT4-fs (loop4): 1 truncate cleaned up [ 165.264297][T12512] ext4 filesystem being mounted at /611/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.281482][T12512] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2951: Failed to acquire dquot type 1 [ 165.301892][T12512] bond0: (slave bond_slave_0): Releasing backup interface [ 165.316222][T12512] bond0: (slave bond_slave_1): Releasing backup interface [ 165.326130][T12512] team0: Port device team_slave_0 removed [ 165.336905][T12512] team0: Port device team_slave_1 removed [ 165.350724][T12512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.380806][T12512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.392380][T12512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.446853][T12527] loop4: detected capacity change from 0 to 164 [ 165.476766][T12527] syz.4.2959: attempt to access beyond end of device [ 165.476766][T12527] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 165.500862][T12527] syz.4.2959: attempt to access beyond end of device [ 165.500862][T12527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 165.539510][T12535] loop6: detected capacity change from 0 to 512 [ 165.556911][T12535] EXT4-fs: Ignoring removed i_version option [ 165.562977][T12535] EXT4-fs: Ignoring removed bh option [ 165.569089][T12537] loop0: detected capacity change from 0 to 256 [ 165.583604][T12537] FAT-fs (loop0): Directory bread(block 64) failed [ 165.590960][T12537] FAT-fs (loop0): Directory bread(block 65) failed [ 165.597662][T12537] FAT-fs (loop0): Directory bread(block 66) failed [ 165.604736][T12537] FAT-fs (loop0): Directory bread(block 67) failed [ 165.611432][T12537] FAT-fs (loop0): Directory bread(block 68) failed [ 165.618270][T12537] FAT-fs (loop0): Directory bread(block 69) failed [ 165.625032][T12537] FAT-fs (loop0): Directory bread(block 70) failed [ 165.631721][T12537] FAT-fs (loop0): Directory bread(block 71) failed [ 165.638426][T12537] FAT-fs (loop0): Directory bread(block 72) failed [ 165.638518][T12535] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.663071][T12537] FAT-fs (loop0): Directory bread(block 73) failed [ 165.709398][T12537] syz.0.2973: attempt to access beyond end of device [ 165.709398][T12537] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 165.729887][T12543] syzkaller0: entered allmulticast mode [ 165.736423][T12543] syzkaller0: entered promiscuous mode [ 165.743416][T12543] syzkaller0 (unregistering): left allmulticast mode [ 165.751177][T12543] syzkaller0 (unregistering): left promiscuous mode [ 165.877813][T12553] pim6reg1: entered promiscuous mode [ 165.883157][T12553] pim6reg1: entered allmulticast mode [ 165.972870][T12565] loop0: detected capacity change from 0 to 512 [ 165.974770][T12564] loop1: detected capacity change from 0 to 128 [ 165.991333][T12560] netlink: 'syz.6.2975': attribute type 1 has an invalid length. [ 166.036159][T12565] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2971: bg 0: block 248: padding at end of block bitmap is not set [ 166.040149][T12560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.072120][T12570] bond1 (unregistering): Released all slaves [ 166.078488][T12565] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2971: Failed to acquire dquot type 1 [ 166.095286][T12565] EXT4-fs (loop0): 1 truncate cleaned up [ 166.104293][T12565] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.116825][T12564] syz.1.2983: attempt to access beyond end of device [ 166.116825][T12564] loop1: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 166.120442][T12565] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2971: Failed to acquire dquot type 1 [ 166.131831][T12564] syz.1.2983: attempt to access beyond end of device [ 166.131831][T12564] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 166.173522][T12564] syz.1.2983: attempt to access beyond end of device [ 166.173522][T12564] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 166.192308][T12565] bridge_slave_0: left allmulticast mode [ 166.198177][T12565] bridge_slave_0: left promiscuous mode [ 166.198394][T12564] syz.1.2983: attempt to access beyond end of device [ 166.198394][T12564] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 166.203936][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.218392][T12575] loop6: detected capacity change from 0 to 512 [ 166.237540][T12573] loop7: detected capacity change from 0 to 512 [ 166.245990][T12573] EXT4-fs: Ignoring removed i_version option [ 166.252194][T12573] EXT4-fs: Ignoring removed bh option [ 166.259303][T12565] bridge_slave_1: left allmulticast mode [ 166.265914][T12565] bridge_slave_1: left promiscuous mode [ 166.271691][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.281383][T12575] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.305693][T12565] .`: (slave bond_slave_0): Releasing backup interface [ 166.306850][T12573] EXT4-fs mount: 24 callbacks suppressed [ 166.306868][T12573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.335331][T12573] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.335496][T12565] .`: (slave bond_slave_1): Releasing backup interface [ 166.360813][T12565] team0: Port device team_slave_0 removed [ 166.367838][T12565] team0: Port device team_slave_1 removed [ 166.373769][T12565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.382874][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.398445][T12565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.411685][T12583] loop4: detected capacity change from 0 to 512 [ 166.418544][T12583] EXT4-fs: Ignoring removed i_version option [ 166.424594][T12583] EXT4-fs: Ignoring removed bh option [ 166.430577][T12565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.455815][T12583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.482053][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.497189][T12583] ext4 filesystem being mounted at /616/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.510997][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.540093][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.555850][T12594] loop6: detected capacity change from 0 to 164 [ 166.576425][T12596] pim6reg1: entered promiscuous mode [ 166.581973][T12596] pim6reg1: entered allmulticast mode [ 166.605858][T12602] loop4: detected capacity change from 0 to 256 [ 166.619528][T12602] FAT-fs (loop4): Directory bread(block 64) failed [ 166.627166][T12602] FAT-fs (loop4): Directory bread(block 65) failed [ 166.635204][T12602] FAT-fs (loop4): Directory bread(block 66) failed [ 166.641990][T12602] FAT-fs (loop4): Directory bread(block 67) failed [ 166.651531][T12602] FAT-fs (loop4): Directory bread(block 68) failed [ 166.659644][T12602] FAT-fs (loop4): Directory bread(block 69) failed [ 166.667436][T12602] FAT-fs (loop4): Directory bread(block 70) failed [ 166.675363][T12602] FAT-fs (loop4): Directory bread(block 71) failed [ 166.681991][T12602] FAT-fs (loop4): Directory bread(block 72) failed [ 166.697431][T12602] FAT-fs (loop4): Directory bread(block 73) failed [ 166.740296][T12613] loop1: detected capacity change from 0 to 2048 [ 166.785894][T12613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.792037][T12620] loop0: detected capacity change from 0 to 512 [ 166.806141][T12621] __nla_validate_parse: 4 callbacks suppressed [ 166.806180][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2993'. [ 166.860288][T12620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.882347][T12620] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.970164][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.038341][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.078226][T12631] loop7: detected capacity change from 0 to 512 [ 167.095583][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2997'. [ 167.110255][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2997'. [ 167.115375][T12631] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2996: bg 0: block 248: padding at end of block bitmap is not set [ 167.166660][T12631] __quota_error: 61 callbacks suppressed [ 167.166680][T12631] Quota error (device loop7): write_blk: dquota write failed [ 167.179814][T12631] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 167.189850][T12631] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.2996: Failed to acquire dquot type 1 [ 167.220059][T12631] EXT4-fs (loop7): 1 truncate cleaned up [ 167.226375][T12631] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.243089][T12631] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.281341][T12631] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 167.291787][T12631] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 131074 [ 167.301737][T12631] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.2996: Failed to acquire dquot type 1 [ 167.320299][T12643] pim6reg1: entered promiscuous mode [ 167.326786][T12643] pim6reg1: entered allmulticast mode [ 167.334935][T12631] bridge_slave_0: left allmulticast mode [ 167.340736][T12631] bridge_slave_0: left promiscuous mode [ 167.346508][T12631] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.356722][T12631] bridge_slave_1: left allmulticast mode [ 167.362421][T12631] bridge_slave_1: left promiscuous mode [ 167.368269][T12631] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.377806][T12631] bond0: (slave bond_slave_0): Releasing backup interface [ 167.386954][T12631] bond0: (slave bond_slave_1): Releasing backup interface [ 167.396337][T12631] team0: Port device team_slave_0 removed [ 167.402809][T12631] team0: Port device team_slave_1 removed [ 167.409729][T12631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.418154][T12631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.426864][T12631] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.499540][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.121239][ T29] audit: type=1326 audit(1764465192.262:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 168.145996][ T29] audit: type=1326 audit(1764465192.262:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 168.170851][ T29] audit: type=1326 audit(1764465192.262:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 168.189184][T12681] loop1: detected capacity change from 0 to 2048 [ 168.194370][ T29] audit: type=1326 audit(1764465192.262:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 168.226274][ T29] audit: type=1326 audit(1764465192.262:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 168.250171][ T29] audit: type=1326 audit(1764465192.262:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 168.275746][T12679] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3017'. [ 168.284963][T12679] hsr_slave_0: left promiscuous mode [ 168.297265][T12679] hsr_slave_1: left promiscuous mode [ 168.313714][T12681] loop1: p1 < > p4 [ 168.318268][T12681] loop1: p4 size 8388608 extends beyond EOD, truncated [ 168.414124][T12691] netlink: 'syz.7.3032': attribute type 10 has an invalid length. [ 168.416208][T12692] netlink: 'syz.0.3022': attribute type 13 has an invalid length. [ 168.435557][T12691] team0: Port device dummy0 added [ 168.445963][T12691] netlink: 'syz.7.3032': attribute type 10 has an invalid length. [ 168.461568][T12691] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.489089][T12691] team0: Failed to send options change via netlink (err -105) [ 168.520559][T12691] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.563645][T12691] team0: Port device dummy0 removed [ 168.574408][T12691] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.595394][T12700] syz_tun: entered allmulticast mode [ 168.602263][T12690] syz_tun: left allmulticast mode [ 168.610479][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3025'. [ 168.699430][T12706] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3028'. [ 168.756728][T12713] netem: incorrect gi model size [ 168.761736][T12713] netem: change failed [ 168.779893][T12710] netlink: 'syz.0.3039': attribute type 10 has an invalid length. [ 168.811157][T12710] team0: Port device dummy0 added [ 168.846004][T12720] netlink: 'syz.0.3039': attribute type 10 has an invalid length. [ 168.874740][T12720] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.950720][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3034'. [ 168.986872][T12720] team0: Failed to send options change via netlink (err -105) [ 168.995951][T12720] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 169.006761][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3034'. [ 169.019906][T12720] team0: Port device dummy0 removed [ 169.031547][T12720] .`: (slave dummy0): Enslaving as an active interface with an up link [ 169.308673][T12699] Set syz1 is full, maxelem 65536 reached [ 169.380222][T12735] loop1: detected capacity change from 0 to 256 [ 169.395286][T12735] FAT-fs (loop1): Directory bread(block 64) failed [ 169.402456][T12735] FAT-fs (loop1): Directory bread(block 65) failed [ 169.419346][T12735] FAT-fs (loop1): Directory bread(block 66) failed [ 169.428722][T12735] FAT-fs (loop1): Directory bread(block 67) failed [ 169.436815][T12735] FAT-fs (loop1): Directory bread(block 68) failed [ 169.444611][T12735] FAT-fs (loop1): Directory bread(block 69) failed [ 169.451404][T12735] FAT-fs (loop1): Directory bread(block 70) failed [ 169.459106][T12735] FAT-fs (loop1): Directory bread(block 71) failed [ 169.467715][T12735] FAT-fs (loop1): Directory bread(block 72) failed [ 169.494897][T12735] FAT-fs (loop1): Directory bread(block 73) failed [ 169.507263][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3041'. [ 169.544301][T12735] bio_check_eod: 106 callbacks suppressed [ 169.544316][T12735] syz.1.3038: attempt to access beyond end of device [ 169.544316][T12735] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 169.589225][T12747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.599459][T12747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.608905][T12745] random: crng reseeded on system resumption [ 169.769928][T12766] rdma_rxe: rxe_newlink: failed to add lo [ 169.776369][T12766] netlink: 'syz.1.3053': attribute type 4 has an invalid length. [ 169.787295][T12766] netlink: 'syz.1.3053': attribute type 4 has an invalid length. [ 170.039985][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.048606][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.362996][T12778] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3057'. [ 170.572613][T12783] loop7: detected capacity change from 0 to 4096 [ 170.581714][T12783] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.996751][T12794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12794 comm=syz.1.3063 [ 171.033238][T12775] Set syz1 is full, maxelem 65536 reached [ 171.238719][T12808] rdma_rxe: rxe_newlink: failed to add lo [ 171.253317][T12808] netlink: 'syz.6.3068': attribute type 4 has an invalid length. [ 171.263684][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.293211][T12808] netlink: 'syz.6.3068': attribute type 4 has an invalid length. [ 171.361377][T12819] syzkaller0: entered allmulticast mode [ 171.367251][T12819] syzkaller0: entered promiscuous mode [ 171.374130][T12819] syzkaller0 (unregistering): left allmulticast mode [ 171.380921][T12819] syzkaller0 (unregistering): left promiscuous mode [ 171.388015][T12821] loop6: detected capacity change from 0 to 256 [ 171.406451][T12821] FAT-fs (loop6): Directory bread(block 64) failed [ 171.413225][T12821] FAT-fs (loop6): Directory bread(block 65) failed [ 171.419804][T12821] FAT-fs (loop6): Directory bread(block 66) failed [ 171.427041][T12821] FAT-fs (loop6): Directory bread(block 67) failed [ 171.436010][T12821] FAT-fs (loop6): Directory bread(block 68) failed [ 171.442773][T12821] FAT-fs (loop6): Directory bread(block 69) failed [ 171.449512][T12821] FAT-fs (loop6): Directory bread(block 70) failed [ 171.456369][T12821] FAT-fs (loop6): Directory bread(block 71) failed [ 171.463035][T12821] FAT-fs (loop6): Directory bread(block 72) failed [ 171.469574][T12821] FAT-fs (loop6): Directory bread(block 73) failed [ 171.469901][T12830] loop0: detected capacity change from 0 to 512 [ 171.483296][T12830] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.492089][T12830] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.502217][T12821] syz.6.3073: attempt to access beyond end of device [ 171.502217][T12821] loop6: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 171.523316][T12830] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3074: Allocating blocks 41-42 which overlap fs metadata [ 171.538951][T12830] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3074: Failed to acquire dquot type 1 [ 171.569092][T12830] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 171.584526][T12830] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.3074: corrupted inode contents [ 171.597183][T12830] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #12: comm syz.0.3074: mark_inode_dirty error [ 171.624537][T12830] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.3074: corrupted inode contents [ 171.642032][T12830] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.3074: mark_inode_dirty error [ 171.664895][T12846] loop1: detected capacity change from 0 to 764 [ 171.668486][T12830] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.3074: corrupted inode contents [ 171.683946][T12830] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 171.684066][T12830] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #12: comm syz.0.3074: corrupted inode contents [ 171.684205][T12830] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.3074: mark_inode_dirty error [ 171.717481][T12830] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 171.726990][T12830] EXT4-fs (loop0): 1 truncate cleaned up [ 171.733406][T12830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.747087][T12830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.828843][T12853] loop1: detected capacity change from 0 to 1024 [ 171.836647][T12853] EXT4-fs: Ignoring removed orlov option [ 171.845562][T12853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.882529][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.969697][T12867] loop7: detected capacity change from 0 to 1024 [ 171.979585][T12867] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.991910][T12867] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 172.000337][T12867] EXT4-fs (loop7): orphan cleanup on readonly fs [ 172.008266][T12867] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.3094: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.022218][T12867] EXT4-fs (loop7): 1 orphan inode deleted [ 172.028663][T12867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.117110][T12882] loop1: detected capacity change from 0 to 256 [ 172.132420][T12882] FAT-fs (loop1): Directory bread(block 64) failed [ 172.139097][T12882] FAT-fs (loop1): Directory bread(block 65) failed [ 172.145847][T12882] FAT-fs (loop1): Directory bread(block 66) failed [ 172.152578][T12882] FAT-fs (loop1): Directory bread(block 67) failed [ 172.159273][T12882] FAT-fs (loop1): Directory bread(block 68) failed [ 172.168005][T12882] FAT-fs (loop1): Directory bread(block 69) failed [ 172.174911][T12882] FAT-fs (loop1): Directory bread(block 70) failed [ 172.181699][T12882] FAT-fs (loop1): Directory bread(block 71) failed [ 172.188340][T12882] FAT-fs (loop1): Directory bread(block 72) failed [ 172.198619][T12882] FAT-fs (loop1): Directory bread(block 73) failed [ 172.219435][T12882] syz.1.3100: attempt to access beyond end of device [ 172.219435][T12882] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 172.252433][T12886] __nla_validate_parse: 4 callbacks suppressed [ 172.252450][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 172.270491][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 172.328014][T12892] loop0: detected capacity change from 0 to 1024 [ 172.344367][T12892] EXT4-fs: Ignoring removed orlov option [ 172.355927][T12892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.441877][T12905] loop6: detected capacity change from 0 to 4096 [ 172.448859][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.464031][T12905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.569973][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.614908][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 172.614925][ T29] audit: type=1400 audit(1764465196.764:5305): avc: denied { nlmsg_read } for pid=12920 comm="syz.7.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.670265][ T29] audit: type=1326 audit(1764465196.814:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.693889][ T29] audit: type=1326 audit(1764465196.814:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.725288][ T29] audit: type=1326 audit(1764465196.864:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.751241][ T29] audit: type=1326 audit(1764465196.864:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.774864][ T29] audit: type=1326 audit(1764465196.864:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.799246][ T29] audit: type=1326 audit(1764465196.864:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.824184][ T29] audit: type=1326 audit(1764465196.864:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.848949][ T29] audit: type=1326 audit(1764465196.864:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.873938][ T29] audit: type=1326 audit(1764465196.864:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12922 comm="syz.7.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28ccef749 code=0x7ffc0000 [ 172.899554][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.282865][T12929] loop6: detected capacity change from 0 to 1024 [ 173.289450][T12932] loop7: detected capacity change from 0 to 764 [ 173.289817][T12929] EXT4-fs: Ignoring removed orlov option [ 173.303943][T12929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.345891][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.423735][T12939] ip6gre1: entered allmulticast mode [ 173.497671][T12948] loop0: detected capacity change from 0 to 764 [ 173.505007][T12948] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 173.514425][T12948] Symlink component flag not implemented [ 173.525279][T12948] Symlink component flag not implemented (7) [ 173.588480][T12962] netlink: 'syz.1.3136': attribute type 1 has an invalid length. [ 173.597234][T12952] loop4: detected capacity change from 0 to 4096 [ 173.608965][T12962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.624232][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'. [ 173.652004][T12952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.674663][T12962] bond2 (unregistering): Released all slaves [ 173.686303][T12968] netlink: 360 bytes leftover after parsing attributes in process `+}[@'. [ 173.976942][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.007019][T12987] lo speed is unknown, defaulting to 1000 [ 174.116554][T12991] loop4: detected capacity change from 0 to 512 [ 174.129249][T12991] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 174.366176][T13006] loop7: detected capacity change from 0 to 512 [ 174.383072][T13006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.396156][T13006] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.428169][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.452860][T13012] netlink: 360 bytes leftover after parsing attributes in process `+}[@'. [ 174.636517][T13015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.646556][T13015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.666218][T13017] loop7: detected capacity change from 0 to 1024 [ 174.676006][T13021] loop1: detected capacity change from 0 to 4096 [ 174.684696][T13021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.710552][T13020] netlink: 'syz.0.3165': attribute type 10 has an invalid length. [ 174.720425][T13017] EXT4-fs: Ignoring removed orlov option [ 174.739845][T13017] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 174.749985][T13020] .`: (slave dummy0): Releasing backup interface [ 174.775272][T13020] team0: Failed to send options change via netlink (err -105) [ 174.783779][T13020] team0: Port device dummy0 added [ 174.800682][T13020] netlink: 'syz.0.3165': attribute type 10 has an invalid length. [ 174.811449][T13017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.835171][T13020] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.855735][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.870740][T13020] team0: Failed to send options change via netlink (err -105) [ 174.894465][T13020] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.905377][T13020] team0: Port device dummy0 removed [ 174.914109][T13020] .`: (slave dummy0): Enslaving as an active interface with an up link [ 174.963327][T13032] loop0: detected capacity change from 0 to 1024 [ 174.995963][T13032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.010990][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.040067][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.059810][T13041] SELinux: ebitmap: truncated map [ 175.066146][T13041] SELinux: failed to load policy [ 175.093183][T13046] loop1: detected capacity change from 0 to 512 [ 175.101429][T13046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.113797][T13046] EXT4-fs (loop1): 1 truncate cleaned up [ 175.121150][T13046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.137557][T13046] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3166'. [ 175.163832][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.178497][T13051] netlink: 'syz.0.3169': attribute type 13 has an invalid length. [ 175.364457][T13060] pim6reg: entered allmulticast mode [ 175.375490][T13060] pim6reg: left allmulticast mode [ 175.417282][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3174'. [ 175.427769][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3174'. [ 175.482378][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 175.492446][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3177'. [ 175.504060][T13068] loop4: detected capacity change from 0 to 4096 [ 175.540842][T13068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.646931][T13082] netlink: 'syz.6.3181': attribute type 30 has an invalid length. [ 175.697504][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.846024][T13100] loop0: detected capacity change from 0 to 512 [ 175.868428][T13100] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.007111][T13113] loop1: detected capacity change from 0 to 512 [ 176.015013][T13100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.028742][T13113] EXT4-fs (loop1): inodes count not valid: 50331680 vs 32 [ 176.091119][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.174772][T13130] IPv6: sit1: Disabled Multicast RS [ 176.359858][T13145] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 176.668451][T13175] team1: entered promiscuous mode [ 176.673565][T13175] team1: entered allmulticast mode [ 176.683987][T13176] loop6: detected capacity change from 0 to 1024 [ 176.691235][T13176] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.697825][T13175] 8021q: adding VLAN 0 to HW filter on device team1 [ 176.721076][T13176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.751134][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.829529][T13181] lo speed is unknown, defaulting to 1000 [ 176.851691][T13184] xt_connbytes: Forcing CT accounting to be enabled [ 176.879241][T13184] set match dimension is over the limit! [ 177.205996][T13193] loop7: detected capacity change from 0 to 8192 [ 177.227310][T13193] syz.7.3224: attempt to access beyond end of device [ 177.227310][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.241992][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.259285][T13193] syz.7.3224: attempt to access beyond end of device [ 177.259285][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.273865][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.285744][T13193] syz.7.3224: attempt to access beyond end of device [ 177.285744][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.299409][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.307770][T13193] syz.7.3224: attempt to access beyond end of device [ 177.307770][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.321203][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.335911][T13193] syz.7.3224: attempt to access beyond end of device [ 177.335911][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.349405][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.373504][T13193] syz.7.3224: attempt to access beyond end of device [ 177.373504][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.387152][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.387332][T13200] loop1: detected capacity change from 0 to 4096 [ 177.396246][T13193] syz.7.3224: attempt to access beyond end of device [ 177.396246][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.415380][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.423897][T13193] syz.7.3224: attempt to access beyond end of device [ 177.423897][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.437392][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.445939][T13193] syz.7.3224: attempt to access beyond end of device [ 177.445939][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.459580][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.468567][T13193] syz.7.3224: attempt to access beyond end of device [ 177.468567][T13193] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.475443][T13200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.482046][T13193] Buffer I/O error on dev loop7, logical block 57847, async page read [ 177.535803][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.549246][T13207] loop4: detected capacity change from 0 to 1024 [ 177.567644][T13207] EXT4-fs: Ignoring removed orlov option [ 177.573750][T13207] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 177.642826][T13207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.665742][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 177.665823][ T29] audit: type=1326 audit(1764465201.806:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf099edf90 code=0x7ffc0000 [ 177.716285][T13217] sctp: [Deprecated]: syz.6.3233 (pid 13217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.716285][T13217] Use struct sctp_sack_info instead [ 177.762051][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.771298][ T29] audit: type=1326 audit(1764465201.847:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7faf099ee497 code=0x7ffc0000 [ 177.771340][ T29] audit: type=1326 audit(1764465201.847:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf099edf90 code=0x7ffc0000 [ 177.820365][ T29] audit: type=1326 audit(1764465201.847:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf099ef749 code=0x7ffc0000 [ 177.845144][ T29] audit: type=1326 audit(1764465201.847:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf099ef749 code=0x7ffc0000 [ 177.869771][ T29] audit: type=1326 audit(1764465201.857:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7faf099ef749 code=0x7ffc0000 [ 177.894286][ T29] audit: type=1326 audit(1764465201.857:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf099ef749 code=0x7ffc0000 [ 177.918934][ T29] audit: type=1326 audit(1764465201.857:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf099ef749 code=0x7ffc0000 [ 177.943425][ T29] audit: type=1326 audit(1764465201.857:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf099ef749 code=0x7ffc0000 [ 177.968077][ T29] audit: type=1326 audit(1764465201.857:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13205 comm="syz.4.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7faf099ef749 code=0x7ffc0000 [ 178.056834][T13224] __nla_validate_parse: 6 callbacks suppressed [ 178.056849][T13224] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.3234'. [ 178.109852][T13228] netlink: 'syz.1.3238': attribute type 10 has an invalid length. [ 178.120904][T13228] netlink: 'syz.1.3238': attribute type 10 has an invalid length. [ 178.132955][T13228] .`: (slave dummy0): Enslaving as an active interface with an up link [ 178.353962][T13250] loop7: detected capacity change from 0 to 4096 [ 178.369812][T13250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.569780][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.591375][T13260] netlink: 'syz.7.3252': attribute type 10 has an invalid length. [ 178.602086][T13260] bond0: (slave dummy0): Releasing backup interface [ 178.610912][T13260] team0: Failed to send options change via netlink (err -105) [ 178.618484][T13260] team0: Port device dummy0 added [ 178.628411][T13260] netlink: 'syz.7.3252': attribute type 10 has an invalid length. [ 178.636927][T13260] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.655331][T13260] team0: Failed to send options change via netlink (err -105) [ 178.663982][T13260] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.673675][T13260] team0: Port device dummy0 removed [ 178.680721][T13260] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.220638][T13283] loop7: detected capacity change from 0 to 512 [ 179.230045][T13280] lo speed is unknown, defaulting to 1000 [ 179.252471][T13283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.277213][T13283] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.301754][T13289] xt_connbytes: Forcing CT accounting to be enabled [ 179.322494][T13289] set match dimension is over the limit! [ 179.328607][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.557877][T13309] loop6: detected capacity change from 0 to 4096 [ 179.566710][T13309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.593230][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.611768][T13312] loop7: detected capacity change from 0 to 256 [ 179.665874][T13312] FAT-fs (loop7): Directory bread(block 64) failed [ 179.673783][T13312] FAT-fs (loop7): Directory bread(block 65) failed [ 179.681757][T13312] FAT-fs (loop7): Directory bread(block 66) failed [ 179.689758][T13312] FAT-fs (loop7): Directory bread(block 67) failed [ 179.696504][T13312] FAT-fs (loop7): Directory bread(block 68) failed [ 179.730005][T13312] FAT-fs (loop7): Directory bread(block 69) failed [ 179.757877][T13312] FAT-fs (loop7): Directory bread(block 70) failed [ 179.764427][T13312] FAT-fs (loop7): Directory bread(block 71) failed [ 179.791495][T13328] loop0: detected capacity change from 0 to 512 [ 179.801051][T13312] FAT-fs (loop7): Directory bread(block 72) failed [ 179.810062][T13312] FAT-fs (loop7): Directory bread(block 73) failed [ 179.854315][T13328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.870082][T13328] ext4 filesystem being mounted at /653/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.895312][T13333] loop1: detected capacity change from 0 to 1024 [ 179.902947][T13334] netlink: 'syz.6.3281': attribute type 12 has an invalid length. [ 179.938274][T13333] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.959476][T13333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.015365][T13318] Set syz1 is full, maxelem 65536 reached [ 180.031278][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.071651][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.151620][T13356] loop0: detected capacity change from 0 to 4096 [ 180.171278][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3292'. [ 180.181419][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3292'. [ 180.182103][T13356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.191632][T13359] netlink: 'syz.7.3292': attribute type 6 has an invalid length. [ 180.221519][T13354] lo speed is unknown, defaulting to 1000 [ 180.247351][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3292'. [ 180.247900][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.256261][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3292'. [ 180.256289][T13359] netlink: 'syz.7.3292': attribute type 6 has an invalid length. [ 180.288183][T13363] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3294'. [ 180.335018][T13368] loop7: detected capacity change from 0 to 1024 [ 180.343889][T13368] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.404094][T13368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.459391][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.487936][T13383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13383 comm=syz.6.3299 [ 180.503195][T13383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3299'. [ 180.681009][T13408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13408 comm=syz.0.3313 [ 180.758586][T13410] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3315'. [ 180.822624][T13414] tipc: Started in network mode [ 180.827608][T13414] tipc: Node identity ac141413, cluster identity 4711 [ 180.836236][T13414] tipc: New replicast peer: 10.1.1.2 [ 180.841577][T13414] tipc: Enabled bearer , priority 10 [ 180.942090][T13421] loop4: detected capacity change from 0 to 256 [ 181.096510][T13431] VFS: Mount too revealing [ 181.184176][T13442] Set syz1 is full, maxelem 65536 reached [ 181.217368][T13442] loop1: detected capacity change from 0 to 512 [ 181.268682][T13442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.286375][T13442] ext4 filesystem being mounted at /643/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.339366][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.449794][T13460] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3337'. [ 181.494567][T13462] loop1: detected capacity change from 0 to 512 [ 181.505452][T13462] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.514303][T13462] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.557940][T13462] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3336: Allocating blocks 41-42 which overlap fs metadata [ 181.572232][T13462] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3336: Allocating blocks 41-42 which overlap fs metadata [ 181.591288][T13462] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3336: Failed to acquire dquot type 1 [ 181.627334][T13462] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 181.659993][T13462] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.3336: corrupted inode contents [ 181.693386][T13466] VFS: Mount too revealing [ 181.706295][T13462] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.3336: mark_inode_dirty error [ 181.744208][T13462] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.3336: corrupted inode contents [ 181.780338][T13462] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.3336: mark_inode_dirty error [ 181.845847][T13462] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.3336: corrupted inode contents [ 181.877207][T13462] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 181.899170][T13471] loop7: detected capacity change from 0 to 512 [ 181.919158][T13462] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.3336: corrupted inode contents [ 181.955053][T13462] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.3336: mark_inode_dirty error [ 181.974975][ T3404] tipc: Node number set to 2886997011 [ 182.017221][T13462] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 182.044423][T13462] EXT4-fs (loop1): 1 truncate cleaned up [ 182.062045][T13471] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 182.172070][T13481] lo speed is unknown, defaulting to 1000 [ 182.201034][T13482] xt_connbytes: Forcing CT accounting to be enabled [ 182.249922][T13482] set match dimension is over the limit! [ 182.362105][T13471] EXT4-fs (loop7): 1 truncate cleaned up [ 182.667940][T13513] loop0: detected capacity change from 0 to 128 [ 182.719577][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 182.719640][ T29] audit: type=1326 audit(1764465206.869:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.6.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 182.749412][ T29] audit: type=1326 audit(1764465206.869:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.6.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 182.773008][ T29] audit: type=1326 audit(1764465206.869:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.6.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 182.796522][ T29] audit: type=1326 audit(1764465206.869:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.6.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 182.820321][ T29] audit: type=1326 audit(1764465206.869:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.6.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 182.843823][ T29] audit: type=1326 audit(1764465206.869:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.6.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 182.877240][ T29] audit: type=1326 audit(1764465206.979:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.6.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 182.900865][ T29] audit: type=1326 audit(1764465206.979:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13510 comm="syz.6.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 182.970368][T13520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3360'. [ 182.986686][T13501] lo speed is unknown, defaulting to 1000 [ 183.130478][T13531] SELinux: ebitmap: truncated map [ 183.186662][T13531] SELinux: failed to load policy [ 183.652827][T13553] loop6: detected capacity change from 0 to 8192 [ 183.709864][T13553] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.821388][T13555] loop4: detected capacity change from 0 to 4096 [ 183.905098][ T29] audit: type=1326 audit(1764465208.050:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.0.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 183.974268][T13559] lo speed is unknown, defaulting to 1000 [ 183.986365][ T29] audit: type=1326 audit(1764465208.080:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.0.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 184.062301][T13572] loop4: detected capacity change from 0 to 512 [ 184.080923][T13572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 184.091248][T13572] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3381: bad orphan inode 13 [ 184.135739][T13572] ext4_test_bit(bit=12, block=18) = 1 [ 184.141152][T13572] is_bad_inode(inode)=0 [ 184.146398][T13572] NEXT_ORPHAN(inode)=2130706432 [ 184.151263][T13572] max_ino=32 [ 184.155689][T13572] i_nlink=1 [ 184.169518][T13578] loop1: detected capacity change from 0 to 512 [ 184.212121][T13580] loop7: detected capacity change from 0 to 1024 [ 184.222355][T13580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.246607][T13572] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 184.266038][T13578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.308541][T13572] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 184.325618][T13578] ext4 filesystem being mounted at /653/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.598675][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3392'. [ 184.614462][T13605] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 184.807775][T13615] loop6: detected capacity change from 0 to 1024 [ 184.818847][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3408'. [ 184.833640][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3408'. [ 184.856004][T13615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.906965][T13620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.916785][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3400'. [ 184.940887][T11704] Process accounting resumed [ 185.143244][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3404'. [ 185.529743][T13657] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3415'. [ 185.725268][T13670] syzkaller0: entered allmulticast mode [ 185.743304][T13670] syzkaller0 (unregistering): left allmulticast mode [ 185.924183][T13685] pimreg: entered allmulticast mode [ 185.944220][T13685] pimreg: left allmulticast mode [ 185.982474][T13683] loop7: detected capacity change from 0 to 4096 [ 186.209366][T13708] SELinux: failed to load policy [ 186.575993][T13737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=13737 comm=syz.0.3447 [ 186.606662][T13739] loop4: detected capacity change from 0 to 512 [ 186.614370][T13739] EXT4-fs: Ignoring removed i_version option [ 186.621122][T13739] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.647881][T13739] EXT4-fs (loop4): 1 truncate cleaned up [ 186.800149][T13745] loop0: detected capacity change from 0 to 512 [ 186.881344][T13753] loop6: detected capacity change from 0 to 1024 [ 186.927201][T13754] loop4: detected capacity change from 0 to 512 [ 186.935834][T13754] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.945685][T13754] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.957759][T13745] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.017780][T13753] EXT4-fs error (device loop6): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.6.3454: path /420/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 187.041275][T13761] IPVS: dh: FWM 3 0x00000003 - no destination available [ 187.049331][T13761] IPVS: dh: FWM 3 0x00000003 - no destination available [ 187.067509][T13745] EXT4-fs (loop0): 1 truncate cleaned up [ 187.074986][T13754] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3451: Allocating blocks 41-42 which overlap fs metadata [ 187.075256][T13754] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3451: Allocating blocks 41-42 which overlap fs metadata [ 187.075578][T13754] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3451: Failed to acquire dquot type 1 [ 187.075821][T13754] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 187.075881][T13754] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.3451: corrupted inode contents [ 187.076101][T13754] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.3451: mark_inode_dirty error [ 187.076293][T13754] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.3451: corrupted inode contents [ 187.076548][T13754] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.3451: mark_inode_dirty error [ 187.076748][T13754] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.3451: corrupted inode contents [ 187.076916][T13754] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 187.077110][T13754] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.3451: corrupted inode contents [ 187.079011][T13754] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.3451: mark_inode_dirty error [ 187.079211][T13754] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 187.079476][T13754] EXT4-fs (loop4): 1 truncate cleaned up [ 187.701735][T13775] veth2: entered promiscuous mode [ 187.706850][T13775] veth2: entered allmulticast mode [ 187.732924][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3463'. [ 188.023129][T13817] pimreg: entered allmulticast mode [ 188.032123][T13817] pimreg: left allmulticast mode [ 188.057155][T13819] netlink: 'syz.0.3480': attribute type 1 has an invalid length. [ 188.081350][T13819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.112365][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 188.134960][T13819] bond0 (unregistering): Released all slaves [ 188.186960][T13825] SELinux: failed to load policy [ 188.259966][T13832] netlink: 'syz.4.3485': attribute type 30 has an invalid length. [ 188.337437][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 188.337452][ T29] audit: type=1400 audit(1764465212.492:5910): avc: denied { watch } for pid=13838 comm="syz.0.3488" path="/712/file0" dev="tmpfs" ino=3712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 188.348786][T13844] loop4: detected capacity change from 0 to 128 [ 188.378995][T13844] bio_check_eod: 10451 callbacks suppressed [ 188.379014][T13844] syz.4.3490: attempt to access beyond end of device [ 188.379014][T13844] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 188.497398][T13844] syz.4.3490: attempt to access beyond end of device [ 188.497398][T13844] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 188.512836][T13844] syz.4.3490: attempt to access beyond end of device [ 188.512836][T13844] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 188.547043][T13844] syz.4.3490: attempt to access beyond end of device [ 188.547043][T13844] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 188.567701][T13844] syz.4.3490: attempt to access beyond end of device [ 188.567701][T13844] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 188.593293][T13856] netlink: 'syz.1.3494': attribute type 1 has an invalid length. [ 188.597348][T13854] syzkaller0: entered allmulticast mode [ 188.618749][T13856] bond2: entered promiscuous mode [ 188.625255][T13856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.636161][T13854] syzkaller0 (unregistering): left allmulticast mode [ 188.663576][ T4643] kworker/u8:15: attempt to access beyond end of device [ 188.663576][ T4643] loop4: rw=1, sector=166, nr_sectors = 1 limit=128 [ 188.677133][ T4643] buffer_io_error: 10450 callbacks suppressed [ 188.677149][ T4643] Buffer I/O error on dev loop4, logical block 166, lost async page write [ 188.707878][T13856] bond2: (slave bridge5): making interface the new active one [ 188.715461][T13856] bridge5: entered promiscuous mode [ 188.751937][T13856] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 188.811308][T13864] SELinux: failed to load policy [ 188.968090][T13890] loop6: detected capacity change from 0 to 512 [ 189.015925][ T29] audit: type=1400 audit(1764465213.172:5911): avc: denied { append } for pid=13891 comm="syz.7.3508" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 189.017013][T13892] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 189.072337][T13890] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 189.087390][T13890] EXT4-fs (loop6): mount failed [ 189.198028][T13896] lo speed is unknown, defaulting to 1000 [ 189.494478][T13926] lo speed is unknown, defaulting to 1000 [ 189.579637][T13916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.592986][T13937] netlink: 'syz.6.3525': attribute type 30 has an invalid length. [ 189.771431][T13949] loop0: detected capacity change from 0 to 1024 [ 189.835976][T13949] EXT4-fs error (device loop0): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.0.3530: path /717/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 190.910622][ T29] audit: type=1326 audit(1764465215.063:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14003 comm="syz.6.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 190.935465][ T29] audit: type=1326 audit(1764465215.063:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14003 comm="syz.6.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 190.960185][ T29] audit: type=1326 audit(1764465215.063:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14003 comm="syz.6.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 190.984945][ T29] audit: type=1326 audit(1764465215.063:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14003 comm="syz.6.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 191.009697][ T29] audit: type=1326 audit(1764465215.063:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14003 comm="syz.6.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 191.088537][ T29] audit: type=1326 audit(1764465215.193:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14003 comm="syz.6.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 191.113128][ T29] audit: type=1326 audit(1764465215.193:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14003 comm="syz.6.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 191.137846][ T29] audit: type=1326 audit(1764465215.193:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14003 comm="syz.6.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 191.237702][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3555'. [ 191.252966][T14016] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 191.297987][T14021] loop0: detected capacity change from 0 to 1024 [ 191.307653][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'. [ 191.322263][T14021] EXT4-fs: Ignoring removed bh option [ 191.327221][T14026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3559'. [ 191.328441][T14021] EXT4-fs: inline encryption not supported [ 191.350336][T14021] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.382240][T14021] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 191.393741][T14028] VFS: Mount too revealing [ 191.409385][T14021] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3558: lblock 2 mapped to illegal pblock 2 (length 1) [ 191.432192][T14021] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3558: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.450606][T14021] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3558: Failed to acquire dquot type 0 [ 191.489197][T14036] netlink: 'syz.4.3561': attribute type 12 has an invalid length. [ 191.506574][T14021] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 191.565332][T14021] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3558: mark_inode_dirty error [ 191.637453][T14021] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 191.650493][T14021] EXT4-fs (loop0): 1 orphan inode deleted [ 191.662081][ T4680] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:49: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.678776][ T4680] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:49: Failed to release dquot type 0 [ 191.713265][T14021] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3558: Invalid inode table block 1 in block_group 0 [ 191.738274][T14021] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 191.772128][T14021] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz.0.3558: mark_inode_dirty error [ 192.091334][T14052] loop7: detected capacity change from 0 to 512 [ 192.118761][T14052] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.282597][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3571'. [ 192.349323][T14063] netlink: 'syz.1.3573': attribute type 10 has an invalid length. [ 192.368061][T14063] .`: (slave dummy0): Releasing backup interface [ 192.377019][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3574'. [ 192.399727][T14069] netlink: 'syz.1.3573': attribute type 10 has an invalid length. [ 192.402114][T14066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.425672][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3574'. [ 192.443207][T14066] bond3 (unregistering): Released all slaves [ 192.653947][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3581'. [ 192.697368][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3583'. [ 192.723960][T14087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14087 comm=syz.6.3580 [ 192.755064][T14089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3584'. [ 193.313948][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3603'. [ 193.427161][T14138] !yz!: rxe_newlink: already configured on team_slave_0 [ 193.643027][T14151] netlink: 'syz.1.3611': attribute type 10 has an invalid length. [ 193.655712][T14151] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 194.023475][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 194.023489][ T29] audit: type=1400 audit(1764465218.185:5961): avc: denied { nlmsg_write } for pid=14184 comm="syz.6.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 194.106196][ T29] audit: type=1400 audit(1764465218.235:5962): avc: denied { append } for pid=14187 comm="syz.7.3626" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.139854][T14185] lo speed is unknown, defaulting to 1000 [ 194.290600][ T29] audit: type=1326 audit(1764465218.455:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz.0.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 194.315322][ T29] audit: type=1326 audit(1764465218.455:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz.0.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 194.392790][ T29] audit: type=1326 audit(1764465218.455:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz.0.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 194.417518][ T29] audit: type=1326 audit(1764465218.455:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz.0.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 194.442220][ T29] audit: type=1326 audit(1764465218.455:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz.0.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 194.466841][ T29] audit: type=1326 audit(1764465218.455:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz.0.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 194.491515][ T29] audit: type=1326 audit(1764465218.455:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz.0.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 194.516314][ T29] audit: type=1326 audit(1764465218.455:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz.0.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f020f749 code=0x7ffc0000 [ 194.890545][T14238] vhci_hcd: invalid port number 96 [ 194.895706][T14238] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 194.993958][T14245] loop4: detected capacity change from 0 to 164 [ 195.364067][T14259] loop7: detected capacity change from 0 to 256 [ 195.696665][T14276] netlink: 'syz.7.3663': attribute type 1 has an invalid length. [ 195.720330][T14276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.732764][T14276] bond3 (unregistering): Released all slaves [ 196.157837][T14300] loop0: detected capacity change from 0 to 1024 [ 196.185936][T14300] EXT4-fs error (device loop0): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.0.3673: path /740/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 196.191112][T14310] syzkaller0: entered allmulticast mode [ 196.251028][T14310] syzkaller0: entered promiscuous mode [ 196.257929][T14319] __nla_validate_parse: 6 callbacks suppressed [ 196.257954][T14319] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3679'. [ 196.276439][T14310] syzkaller0 (unregistering): left allmulticast mode [ 196.284385][T14310] syzkaller0 (unregistering): left promiscuous mode [ 196.312389][T14325] loop0: detected capacity change from 0 to 164 [ 196.322403][T14328] netlink: 'syz.1.3683': attribute type 1 has an invalid length. [ 196.344994][T14328] bond3: entered promiscuous mode [ 196.350094][T14328] bond3: entered allmulticast mode [ 196.355442][T14328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.381725][T14328] vlan3: entered allmulticast mode [ 196.446860][T14343] loop6: detected capacity change from 0 to 1024 [ 196.464715][T14343] EXT4-fs mount: 32 callbacks suppressed [ 196.464733][T14343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.492423][T14343] EXT4-fs error (device loop6): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.6.3690: path /469/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 196.532673][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.625373][T14361] syzkaller0: entered allmulticast mode [ 196.639662][T14361] syzkaller0: entered promiscuous mode [ 196.680461][T14361] syzkaller0 (unregistering): left allmulticast mode [ 196.687323][T14361] syzkaller0 (unregistering): left promiscuous mode [ 196.833043][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3707'. [ 196.842098][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'. [ 196.851429][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3707'. [ 196.860363][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'. [ 196.889431][T14390] random: crng reseeded on system resumption [ 196.897364][T14386] loop7: detected capacity change from 0 to 512 [ 196.914723][T14386] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.926829][T14386] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3708: bg 0: block 393: padding at end of block bitmap is not set [ 196.941454][T14386] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 196.972121][T14393] lo speed is unknown, defaulting to 1000 [ 196.982024][T14386] EXT4-fs (loop7): 2 truncates cleaned up [ 197.010941][T14386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.088508][T14386] loop7: detected capacity change from 512 to 0 [ 197.102565][T14386] Buffer I/O error on dev loop7, logical block 9, lost sync page write [ 197.111396][T14386] EXT4-fs error (device loop7): ext4_write_inode:5744: inode #18: block 9: comm syz.7.3708: IO error syncing inode [ 197.123724][T14386] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 197.132100][T14386] EXT4-fs (loop7): I/O error while writing superblock [ 197.151414][T10451] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 197.178099][T10451] EXT4-fs error (device loop7): ext4_get_inode_loc:4970: inode #2: block 5: comm syz-executor: unable to read itable block [ 197.199139][T14413] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.3720'. [ 197.209155][T14413] netlink: zone id is out of range [ 197.211229][T10451] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 197.214347][T14413] netlink: zone id is out of range [ 197.214407][T14413] netlink: zone id is out of range [ 197.231530][T10451] EXT4-fs (loop7): I/O error while writing superblock [ 197.242048][T10451] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: IO failure [ 197.242286][T14413] netlink: zone id is out of range [ 197.257736][T14413] netlink: zone id is out of range [ 197.263011][T10451] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 197.263035][T10451] EXT4-fs (loop7): I/O error while writing superblock [ 197.263101][T10451] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 197.263183][T10451] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 197.263199][T10451] EXT4-fs (loop7): I/O error while writing superblock [ 197.310510][T14413] netlink: del zone limit has 8 unknown bytes [ 197.319421][ T4691] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4955: inode #2: block 5: comm kworker/u8:60: unable to read itable block [ 197.338126][ T4691] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 197.354673][ T4691] EXT4-fs (loop7): I/O error while writing superblock [ 197.363682][T10451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.380661][T14420] ref_ctr_offset mismatch. inode: 0xed4 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 197.392870][T10451] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 197.401482][T10451] EXT4-fs (loop7): I/O error while writing superblock [ 197.406020][T14421] syzkaller0: entered allmulticast mode [ 197.420799][T14421] syzkaller0: entered promiscuous mode [ 197.428768][T14421] syzkaller0 (unregistering): left allmulticast mode [ 197.435658][T14421] syzkaller0 (unregistering): left promiscuous mode [ 197.689164][T14433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3728'. [ 198.041182][T14461] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3736'. [ 198.120426][T14464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3737'. [ 198.125989][T14444] lo speed is unknown, defaulting to 1000 [ 198.158765][T14464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3737'. [ 198.461192][T14444] chnl_net:caif_netlink_parms(): no params data found [ 198.601049][T14495] vhci_hcd: invalid port number 96 [ 198.606475][T14495] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 198.648225][T14444] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.655531][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.703440][T14444] bridge_slave_0: entered allmulticast mode [ 198.727089][T14444] bridge_slave_0: entered promiscuous mode [ 198.741066][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.749436][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.778438][T14444] bridge_slave_1: entered allmulticast mode [ 198.789303][T14444] bridge_slave_1: entered promiscuous mode [ 198.835248][T14444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.853561][T14444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.901028][T14444] team0: Port device team_slave_0 added [ 198.908586][T14504] netlink: 'syz.1.3751': attribute type 13 has an invalid length. [ 198.918853][T14444] team0: Port device team_slave_1 added [ 198.941209][T14504] gretap0: refused to change device tx_queue_len [ 198.948006][T14504] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.994225][T14444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.002343][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.029361][T14444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.078933][T14444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.085991][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.113019][T14444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.146346][T14444] hsr_slave_0: entered promiscuous mode [ 199.153649][T14444] hsr_slave_1: entered promiscuous mode [ 199.169753][T14444] debugfs: 'hsr0' already exists in 'hsr' [ 199.175522][T14444] Cannot create hsr debugfs directory [ 199.324550][T14509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.415583][T14444] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 199.436474][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 199.436492][ T29] audit: type=1400 audit(1764465223.587:6269): avc: denied { connect } for pid=14518 comm="syz.4.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 199.470240][T14444] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 199.484503][T14444] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 199.498939][T14444] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 199.613554][T14444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.645981][T14444] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.670966][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.678136][ T4643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.698408][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.705564][ T4643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.727100][T14444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.737603][T14444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.872964][T14560] netlink: 'syz.0.3770': attribute type 1 has an invalid length. [ 199.875716][T14444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.927564][T14560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.962872][T14568] bond0 (unregistering): Released all slaves [ 199.983214][T14570] loop6: detected capacity change from 0 to 2048 [ 200.004644][T14570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.018991][T14570] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.122844][T14583] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3774: bg 0: block 345: padding at end of block bitmap is not set [ 200.137707][T14583] EXT4-fs (loop6): Remounting filesystem read-only [ 200.227042][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.306243][T14444] veth0_vlan: entered promiscuous mode [ 200.335434][T14444] veth1_vlan: entered promiscuous mode [ 200.359031][T14598] loop4: detected capacity change from 0 to 512 [ 200.359316][T14444] veth0_macvtap: entered promiscuous mode [ 200.365746][T14598] EXT4-fs: Ignoring removed i_version option [ 200.377283][T14598] EXT4-fs: Ignoring removed bh option [ 200.387828][T14444] veth1_macvtap: entered promiscuous mode [ 200.411254][T14598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.427533][ T29] audit: type=1326 audit(1764465224.588:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.452389][ T29] audit: type=1326 audit(1764465224.588:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.468635][T14604] loop6: detected capacity change from 0 to 2048 [ 200.481628][T14444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.493091][ T29] audit: type=1326 audit(1764465224.588:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.498397][T14444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.517820][ T29] audit: type=1326 audit(1764465224.588:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.525823][T14598] ext4 filesystem being mounted at /742/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.548847][ T29] audit: type=1326 audit(1764465224.588:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.584416][ T29] audit: type=1326 audit(1764465224.588:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.609140][ T29] audit: type=1326 audit(1764465224.588:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.633828][ T29] audit: type=1326 audit(1764465224.588:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.658446][ T29] audit: type=1326 audit(1764465224.588:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73713ff749 code=0x7ffc0000 [ 200.659125][ T1841] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.696821][T14604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.724682][ T1841] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.760760][ T1841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.776196][ T4665] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.789392][ T7242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.822210][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.829413][T14542] lo speed is unknown, defaulting to 1000 [ 201.114154][T14646] xt_hashlimit: max too large, truncated to 1048576 [ 201.121799][T14646] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 201.548630][T14663] loop4: detected capacity change from 0 to 512 [ 201.587301][T14663] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 201.619226][T14663] EXT4-fs (loop4): orphan cleanup on readonly fs [ 201.653041][T14663] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.716140][T14663] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 201.760991][T14663] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3806: bg 0: block 40: padding at end of block bitmap is not set [ 201.807105][T14663] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 201.820665][T14663] EXT4-fs (loop4): 1 truncate cleaned up [ 201.839498][T14663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.905517][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.919224][T14681] __nla_validate_parse: 4 callbacks suppressed [ 201.919313][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3813'. [ 202.031318][T14687] loop1: detected capacity change from 0 to 164 [ 202.049132][T14687] iso9660: Bad value for 'uid' [ 202.053975][T14687] iso9660: Bad value for 'uid' [ 202.070333][T14691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14691 comm=syz.6.3818 [ 202.088891][T14687] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3816'. [ 202.239919][T14715] netlink: 'syz.1.3828': attribute type 1 has an invalid length. [ 202.254435][T14719] serio: Serial port ptm0 [ 202.267332][T14715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.285132][T14715] bond4: entered allmulticast mode [ 202.356060][T14736] netlink: 'syz.6.3835': attribute type 30 has an invalid length. [ 202.383805][ T4669] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.402116][ T4669] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.425286][ T4669] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.438228][ T4669] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.486741][T14752] loop8: detected capacity change from 0 to 128 [ 202.511447][T14752] syz.8.3843: attempt to access beyond end of device [ 202.511447][T14752] loop8: rw=34817, sector=113, nr_sectors = 32 limit=128 [ 202.530436][T14758] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3845'. [ 202.543760][T14758] ip6gre2: entered promiscuous mode [ 202.550266][T14758] ip6gre2: entered allmulticast mode [ 202.652451][T14769] netlink: 'syz.6.3851': attribute type 7 has an invalid length. [ 202.660265][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3851'. [ 203.124905][T14784] lo speed is unknown, defaulting to 1000 [ 203.486491][T14806] veth4: entered promiscuous mode [ 203.491627][T14806] veth4: entered allmulticast mode [ 203.646161][T14810] loop4: detected capacity change from 0 to 8192 [ 203.789165][T14827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3877'. [ 203.919817][T14838] loop4: detected capacity change from 0 to 2048 [ 203.973988][T14838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.015993][T14838] ext4 filesystem being mounted at /762/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.034314][T14849] ip6gre1: left allmulticast mode [ 204.086801][T14849] veth2: left promiscuous mode [ 204.091644][T14849] veth2: left allmulticast mode [ 204.106201][T14852] loop8: detected capacity change from 0 to 1024 [ 204.133960][T14852] EXT4-fs: inline encryption not supported [ 204.148517][T14849] ip6gre2: left promiscuous mode [ 204.153557][T14849] ip6gre2: left allmulticast mode [ 204.156606][T14852] EXT4-fs: inline encryption not supported [ 204.171215][T14852] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 204.184815][T14853] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3882: bg 0: block 345: padding at end of block bitmap is not set [ 204.204761][T14853] EXT4-fs (loop4): Remounting filesystem read-only [ 204.254469][ T4663] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.263416][ T4663] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.286142][ T4663] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.305401][ T4663] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.347602][T14852] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 204.359296][T14852] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.3887: lblock 2 mapped to illegal pblock 2 (length 1) [ 204.373665][T14852] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.3887: lblock 0 mapped to illegal pblock 48 (length 1) [ 204.388249][T14852] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3887: Failed to acquire dquot type 0 [ 204.400486][T14852] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 204.410359][T14852] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3887: mark_inode_dirty error [ 204.422054][T14852] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 204.432554][T14852] EXT4-fs (loop8): 1 orphan inode deleted [ 204.439959][T14852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.463029][ T4674] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 204.522171][ T4674] __quota_error: 150 callbacks suppressed [ 204.522190][ T4674] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 204.536561][ T4674] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:43: Failed to release dquot type 0 [ 204.549199][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.562021][T14852] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm syz.8.3887: lblock 1 mapped to illegal pblock 1 (length 1) [ 204.576889][T14852] Quota error (device loop8): find_next_id: Can't read quota tree block 1 [ 204.610569][T14444] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.628981][T14444] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 204.648538][T14444] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 204.664586][T14444] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 204.698681][T14875] veth1_macvtap: left promiscuous mode [ 204.704344][T14875] macsec0: entered allmulticast mode [ 204.729898][ T29] audit: type=1326 audit(1764465228.890:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.8.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb770bf749 code=0x7ffc0000 [ 204.792851][ T29] audit: type=1326 audit(1764465228.910:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.8.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb770bf749 code=0x7ffc0000 [ 204.816517][ T29] audit: type=1326 audit(1764465228.920:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.8.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb770bf749 code=0x7ffc0000 [ 204.825697][T14879] loop1: detected capacity change from 0 to 8192 [ 204.840040][ T29] audit: type=1326 audit(1764465228.920:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.8.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb770bf749 code=0x7ffc0000 [ 204.840125][ T29] audit: type=1326 audit(1764465228.920:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.8.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb770bf749 code=0x7ffc0000 [ 204.840160][ T29] audit: type=1326 audit(1764465228.920:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.8.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb770bf749 code=0x7ffc0000 [ 204.840191][ T29] audit: type=1326 audit(1764465228.920:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.8.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb770bf749 code=0x7ffc0000 [ 204.840288][ T29] audit: type=1326 audit(1764465228.920:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.8.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb770bf749 code=0x7ffc0000 [ 205.035802][T14879] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 205.045694][T14879] FAT-fs (loop1): Filesystem has been set read-only [ 205.077663][T14901] loop8: detected capacity change from 0 to 512 [ 205.089350][T14901] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 205.117246][T14901] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 205.145343][T14901] EXT4-fs (loop8): 1 truncate cleaned up [ 205.152459][T14901] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.192376][T14444] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.406741][T14938] loop1: detected capacity change from 0 to 256 [ 205.439698][T14941] loop8: detected capacity change from 0 to 764 [ 205.460750][T14941] rock: directory entry would overflow storage [ 205.467010][T14941] rock: sig=0x4f50, size=4, remaining=3 [ 205.472658][T14941] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 205.483132][T14941] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.607641][T14955] loop6: detected capacity change from 0 to 1024 [ 205.617284][T14957] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3933'. [ 205.629689][T14955] EXT4-fs: inline encryption not supported [ 205.646635][T14955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.674148][T14963] loop8: detected capacity change from 0 to 164 [ 205.691468][T14955] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.3932: Allocating blocks 385-513 which overlap fs metadata [ 205.692815][T14963] syz.8.3935: attempt to access beyond end of device [ 205.692815][T14963] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 205.729298][T14955] EXT4-fs (loop6): pa ffff888107175b60: logic 16, phys. 129, len 24 [ 205.738584][T14955] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 205.750343][T14955] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 205.755555][T14963] syz.8.3935: attempt to access beyond end of device [ 205.755555][T14963] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 205.764465][T14955] EXT4-fs (loop6): This should not happen!! Data will be lost [ 205.764465][T14955] [ 205.788776][T14955] EXT4-fs (loop6): Total free blocks count 0 [ 205.796094][T14955] EXT4-fs (loop6): Free/Dirty block details [ 205.802290][T14955] EXT4-fs (loop6): free_blocks=128 [ 205.808537][T14955] EXT4-fs (loop6): dirty_blocks=0 [ 205.813589][T14955] EXT4-fs (loop6): Block reservation details [ 205.820763][T14955] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 205.935116][T14981] ip6gre1: entered promiscuous mode [ 205.965877][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3945'. [ 205.974925][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3945'. [ 205.983908][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3945'. [ 206.033612][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3945'. [ 206.059453][T14994] ref_ctr_offset mismatch. inode: 0xfd1 offset: 0x0 ref_ctr_offset(old): 0x200000000300 ref_ctr_offset(new): 0x0 [ 206.092706][T14997] netlink: 'syz.1.3949': attribute type 12 has an invalid length. [ 206.142877][T15001] loop8: detected capacity change from 0 to 2048 [ 206.187975][T15001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.201490][T15007] Falling back ldisc for ttyS3. [ 206.265681][T14444] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 206.289024][T15013] loop4: detected capacity change from 0 to 128 [ 206.300098][T14444] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 206.337981][T14444] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.475454][ T4663] ================================================================== [ 206.483583][ T4663] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 206.493083][ T4663] [ 206.495440][ T4663] write to 0xffff88816180878e of 36 bytes by task 15013 on cpu 1: [ 206.503263][ T4663] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 206.509197][ T4663] generic_perform_write+0x2c2/0x490 [ 206.514497][ T4663] __generic_file_write_iter+0x9e/0x120 [ 206.520085][ T4663] generic_file_write_iter+0x8d/0x2f0 [ 206.525495][ T4663] iter_file_splice_write+0x666/0xa60 [ 206.530880][ T4663] direct_splice_actor+0x156/0x2a0 [ 206.536017][ T4663] splice_direct_to_actor+0x312/0x680 [ 206.541663][ T4663] do_splice_direct+0xda/0x150 [ 206.546452][ T4663] do_sendfile+0x380/0x650 [ 206.550894][ T4663] __x64_sys_sendfile64+0x105/0x150 [ 206.556131][ T4663] x64_sys_call+0x2bb4/0x3000 [ 206.560823][ T4663] do_syscall_64+0xd2/0x200 [ 206.565335][ T4663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.571237][ T4663] [ 206.573567][ T4663] read to 0xffff888161808600 of 512 bytes by task 4663 on cpu 0: [ 206.581297][ T4663] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 206.587207][ T4663] generic_perform_write+0x2c2/0x490 [ 206.592503][ T4663] shmem_file_write_iter+0xc5/0xf0 [ 206.597693][ T4663] lo_rw_aio+0x6a0/0x760 [ 206.601954][ T4663] loop_process_work+0x52d/0xa60 [ 206.606910][ T4663] loop_workfn+0x31/0x40 [ 206.611185][ T4663] process_scheduled_works+0x4ce/0x9d0 [ 206.616718][ T4663] worker_thread+0x582/0x770 [ 206.621338][ T4663] kthread+0x489/0x510 [ 206.625507][ T4663] ret_from_fork+0x122/0x1b0 [ 206.630112][ T4663] ret_from_fork_asm+0x1a/0x30 [ 206.634893][ T4663] [ 206.637223][ T4663] Reported by Kernel Concurrency Sanitizer on: [ 206.643396][ T4663] CPU: 0 UID: 0 PID: 4663 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.653597][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.663665][ T4663] Workqueue: loop4 loop_workfn [ 206.668461][ T4663] ================================================================== [ 206.838001][T15013] syz.4.3956: attempt to access beyond end of device [ 206.838001][T15013] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 206.852388][T15013] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 206.862206][T15013] syz.4.3956: attempt to access beyond end of device [ 206.862206][T15013] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 206.876575][T15013] Buffer I/O error on dev loop4, logical block 128, lost async page write