last executing test programs: 1.898306843s ago: executing program 0 (id=3442): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0xf4ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x288, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x258, 0x2, [@TCA_CHOKE_PARMS={0xffffffffffffff12, 0x1, {0xc596, 0x2, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "4ea5d6d92761fecea7aa7d992e9705ce2f7193bbd545bff87e6f0ce0f6e1d1d24148fdb33871b609f1081530d33cb44e1ce2fd5f427a4ab027c6d6281f12939d5808fe1c8dfdffbe56d2470de63a1c6356a48d3ce3ffcb6d0f78912c3ea6bcd108aec1fe753d6b6a3d9ae71d1038ccc31772049fbd6f1ad92546ee199afd8fd077c072623fa3c1761be4c90cf20464b08f186e15247e37b81be1f56b27721e6b6e8481c97ccdc66fbe4f388262edb2581c7480dad9c737a83f22f0fe2128a9c2980d5fcf9ce33157d879cc64dbc60edbe4cfb65c47e2438e00b32561364865215333af75a703ccfad4a30ef2537be8f7aecd1e1bcf8702b604e51cbaa387985e"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x4}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x4040055}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, 0x0, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0x8, 0x9, 0x20, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x721, 0x1, 0x8, 0x4}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000540)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)="59d88d1974148ab0142203554e9576855513a9641174be4bbb4c79f32270edadefd31581b12389f4113fef8d07fad6a5b1dc069d3e88611a46", 0x39}, 0x68) 1.497220961s ago: executing program 0 (id=3447): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, 0x0, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x13) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) writev(r5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)="59d88d1974148ab0142203554e9576855513a9641174be4bbb4c79f32270edadefd31581b12389f4113fef8d07fad6a5b1dc069d3e88611a46", 0x39}, 0x68) 1.141944187s ago: executing program 0 (id=3459): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.074780529s ago: executing program 0 (id=3460): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x2e) syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x509501) r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000201e}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/274, 0x112}, {&(0x7f0000000f00)=""/4097, 0x1001}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000b40)=""/30, 0x1e}, {0x0}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f00000009c0)=""/264, 0x108}], 0x8}, 0x1008}], 0x1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='siox_get_data\x00', r4, 0x0, 0x3}, 0x18) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008082, &(0x7f0000000b80)={[{@nodioread_nolock}, {@prjquota}, {@abort}, {@errors_continue}, {@nogrpid}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}], [{@smackfshat={'smackfshat', 0x3d, 'jqfmt=vfsv0'}}, {@flag='async'}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'abort'}}, {@fsname={'fsname', 0x3d, ',\xb3(,{\\)\x00'}}]}, 0x0, 0x5e0, &(0x7f0000001f40)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)=@newqdisc={0x470, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x25cf, 0x7fffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1f4, 0x0, 0x20000, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x10, 0x0, 0x8, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x100003, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0xfffffffe, 0xfffffffd, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x4, 0x1, 0x3f30d44f, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0xf479, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000002, 0x3ff, 0xfffffffc, 0x0, 0x1000005, 0xfffffffd, 0x5, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe513c42806665321}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0x9}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}]}, 0x470}}, 0x0) 928.973752ms ago: executing program 4 (id=3465): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8041, 0x1c3) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0180000000000b00000004000000400001"], 0x54}}, 0x0) 861.846683ms ago: executing program 2 (id=3466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioprio_get$pid(0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e", 0x23}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 761.749155ms ago: executing program 2 (id=3467): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="de99effe3e0d", 0x6}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x5, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 662.454067ms ago: executing program 3 (id=3469): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="de99effe3e0d", 0x6}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x5, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 649.955317ms ago: executing program 4 (id=3470): open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) 613.355948ms ago: executing program 2 (id=3471): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 602.807088ms ago: executing program 4 (id=3472): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94) 588.773428ms ago: executing program 3 (id=3473): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@ldst={0x3, 0x1, 0x1, 0xa, 0x8, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x2, 0x8, 0xc}, {0x3, 0x2, 0x7, 0x7}, {0x1, 0x3, 0x7, 0x6}, {0x5, 0x2, 0x6, 0xa}, {0x1, 0x3, 0x4}, {0x1, 0x3, 0x95f, 0xa}, {0x4, 0x4, 0x2, 0x7}, {0x2, 0x4, 0xf, 0xa}], 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000042c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000043c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000081c8336256ce9bdde873a1b33d1892276fbfd22a7d0000000000000000000000000054ea7846514d1e1e772dd195241ff445a59931136c32fda8a4ef0055f466162d81f9d69b065f"], &(0x7f0000004100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004200)={0x1, 0xd, 0x8001, 0xffffffff}, 0x10, 0x27f4, r4, 0x2, &(0x7f0000004240)=[r3], &(0x7f0000004280)=[{0x1, 0x2, 0x3, 0x1}, {0x4, 0x2, 0xf, 0x7}]}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000004440)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c000000020000000000ea3053bccd50fc110000000080b61e34988a833085f2eefb4f8e4503614c06c85d8d0eaec3ee429f34e3f4963ebf6e76c618daf04cab22733695ae6f27d0bacbd945682ff71f6dc284048f72f0477d394c69e9d0cc97b66ad44c87e740ccb911d843607ad6ac9e18be46a028692fe28d59367b4063a72662cf59667a6aca71d8d90565873edb029fb012c9d3239de9b3ab4a23b56df739c4b98c7a8374"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004380)={r5, 0xffffffffffffffff, 0x16, 0x0, @val=@target_btf_id=r12}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x24, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffff800}, @tail_call]}, &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x13, r2, 0x8, &(0x7f0000000840)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xa, 0x2, 0x10000}, 0x10, r12, r0, 0x9, 0x0, &(0x7f00000008c0)=[{0x2, 0x4, 0xd, 0x8}, {0x0, 0x4, 0x0, 0x4}, {0x2, 0x2, 0x4, 0x8}, {0x2, 0x5, 0x1, 0xb}, {0x0, 0x4, 0xf, 0x6}, {0x5, 0x3, 0x1000}, {0x1, 0x2, 0xa, 0x2}, {0x0, 0x4, 0x9, 0x1}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 585.171118ms ago: executing program 2 (id=3474): futex(0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x0, 0x43000000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1a000000feffffff000008000000000004000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x40000000000000}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x4) 522.924879ms ago: executing program 2 (id=3475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x55b, &(0x7f00000002c0)="$eJzs3d9rW1UcAPDvTdv9nutgDBWRwh6czKVr648JPsxH0eFA32do78posowmHWsduD24F19kCCIOxHd993H4D/hXDHQwZBR98CVy05suW5M23eKamc8H7jgn5ybnntz7PTsn56YJYGhNZP8UIl6KiK+TiEMRkeRlo5EXTqztt/rg2my2JdFofPJn0twvy7deq/W8/XnmxYj49cuIE4WN9daWVxZK5XK6mOcn65XLk7XllZMXK6X5dD69ND0zc/qtmel333m7b219/dzf331854PTXx1b/fbne4dvJXEmDuRl7e14CtfbMxMxkb8nY3HmsR2n+lDZIEl2+gB4IiN5nI9F1gccipE86oH/vy8iogEMqUT8w5BqjQNac/s+zYOfG/ffX5sAbWz/6NpnI7GnOTfat5o8MjPK5rvjfag/q+OXP27fyrbo3+cQAFu6fiMiTo2Obuz/krz/e3Knetjn8Tr0f/Ds3MnGP290Gv8U1sc/0WH8s79D7D6JreO/cK8P1XSVjf/e6zj+XV+0Gh/JcwebY76x5MLFcpr1bS9ExPEY253lN1vPOb16t9GtrH38l21Z/a2xYH4c90Z3P/qcuVK99DRtbnf/RsTLHce/yfr5Tzqc/+z9ONdjHUfT2692K9u6/f+txo8Rr3U8/w9XtJLN1ycnm9fDZOuq2Oivm0d/61b/Trc/O//7Nm//eNK+XltrLhltyw97/kkXDnYue6T90fv1vyv5tJnelT92tVSvL05F7Eo+2vj49MPntvKt/bP2Hz+2ef/X6frfGxGf9dj+m0d+eqVb2SCc/7ltnf/tJ+5++Pn33ervrf97s5k6nj/SS//X6wE+zXsHAAAAAAAAg6YQEQciKRTX04VCsbh2f8eR2FcoV2v1ExeqS5fmovld2fEYK7RWug+13Q8xld8P28pPP5afiYjDEfHNyN5mvjhbLc/tdOMBAAAAAAAAAAAAAAAAAABgQOzv8v3/zO/b/kvvwHPHT37D8Noy/vvxS0/AQPL/Pwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/zD8BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ffnzp7Ntsbqg2uzWX7uyvLSQvXKybm0tlCsLM0WZ6uLl4vz1ep8OS3OVitbvV65Wr08NR1LVyfraa0+WVteOV+pLl2qn79YKc2n59OxZ9IqAAAAAAAAAAAAAAAAAAAAeL7UllcWSuVyuigh0TVR2ORqGR2II5Tod2KHOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPNvAAAA//+k/jTA") 522.44604ms ago: executing program 4 (id=3476): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) fsync(0xffffffffffffffff) 446.167411ms ago: executing program 4 (id=3477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000042c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000043c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000081c8336256ce9bdde873a1b33d1892276fbfd22a7d0000000000000000000000000054ea7846514d1e1e772dd195241ff445a59931136c32fda8a4ef0055f466162d81f9d69b065f"], &(0x7f0000004100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004200)={0x1, 0xd, 0x8001, 0xffffffff}, 0x10, 0x27f4, r4, 0x2, &(0x7f0000004240)=[r3], &(0x7f0000004280)=[{0x1, 0x2, 0x3, 0x1}, {0x4, 0x2, 0xf, 0x7}]}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000004440)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c000000020000000000ea3053bccd50fc110000000080b61e34988a833085f2eefb4f8e4503614c06c85d8d0eaec3ee429f34e3f4963ebf6e76c618daf04cab22733695ae6f27d0bacbd945682ff71f6dc284048f72f0477d394c69e9d0cc97b66ad44c87e740ccb911d843607ad6ac9e18be46a028692fe28d59367b4063a72662cf59667a6aca71d8d90565873edb029fb012c9d3239de9b3ab4a23b56df739c4b98c7a8374"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004380)={r5, 0xffffffffffffffff, 0x16, 0x0, @val=@target_btf_id=r12}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x24, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffff800}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x13, r2, 0x8, &(0x7f0000000840)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xa, 0x2, 0x10000}, 0x10, r12, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000008c0)=[{0x2, 0x4, 0xd, 0x8}, {0x0, 0x4, 0x0, 0x4}, {0x2, 0x2, 0x4, 0x8}, {0x2, 0x5, 0x1, 0xb}, {0x0, 0x4, 0xf, 0x6}, {0x5, 0x3, 0x1000}, {0x1, 0x2, 0xa, 0x2}, {0x0, 0x4, 0x9, 0x1}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 443.552951ms ago: executing program 1 (id=3478): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', 0x402) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd, 0xfffc}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@sysvgroups}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r5, &(0x7f0000000480)='./file0\x00', r5, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r6}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2c0182, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 393.859622ms ago: executing program 2 (id=3479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028010000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100"/137], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9000}, 0x0) fsopen(&(0x7f0000000040)='v7\x00', 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x4008040) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r6, 0x4) 306.146274ms ago: executing program 3 (id=3480): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a", 0xd7}], 0x1}, 0x0) 279.013944ms ago: executing program 1 (id=3481): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) memfd_secret(0x80000) 278.215384ms ago: executing program 3 (id=3482): open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) 248.201135ms ago: executing program 3 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 229.557685ms ago: executing program 1 (id=3484): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="de99effe3e0d", 0x6}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x5, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 127.977537ms ago: executing program 0 (id=3485): futex(0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x0, 0x43000000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1a000000feffffff000008000000000004000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x40000000000000}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4) 109.196437ms ago: executing program 1 (id=3486): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 52.531208ms ago: executing program 3 (id=3487): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x6}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x4e22}, 0x0, 0x0, 0x1}) 51.969898ms ago: executing program 0 (id=3488): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x103400, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x801}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000a804) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7, 0x0, 0x4804}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000d40)=ANY=[@ANYBLOB="e8010000", @ANYRES16, @ANYBLOB="000129bd7000ff", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="800102803c00010024000100757365725f6c696e6bbb4700000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESOCT, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYBLOB="f600f1eb34a875aef53b778c303fee5ca52060b50b6b5af0791cbd669f8a25f38f6bf55f3b2f7892c721412bd1ef7ee76d8e11e01108877388cb8a21927e3180d3f5b513d3ce08a185cb932cc01c82e32a9d6310e1a169e41a5d53d5951a911fcb00b0b75e5ad34af7d86f52081bde3c6db5c6191ff78b92716424827f4a3e11770d5a0817a840a01f07434acc540d72590e8636f37585b77a08d8e6b84cd78a7fa2af3f0c74eccd9f2f162ba85947b99efe4ea9857d9239e2711a693f00717963ed7a9ed2c07e90b750e935a0504303c6b0938bf48f6b1696c361be9d7eca1c3a6179da362e7d8cfc105e70af8f69511f42", @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004002cad000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000", @ANYRESOCT=r4, @ANYRESDEC=r1, @ANYRES8, @ANYRESOCT, @ANYRESOCT], 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1c004) 51.587389ms ago: executing program 1 (id=3489): open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) 23.019299ms ago: executing program 1 (id=3490): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000070a0f0018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000300850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) 0s ago: executing program 4 (id=3491): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@ldst={0x3, 0x1, 0x1, 0xa, 0x8, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x2, 0x8, 0xc}, {0x3, 0x2, 0x7, 0x7}, {0x1, 0x3, 0x7, 0x6}, {0x5, 0x2, 0x6, 0xa}, {0x1, 0x3, 0x4}, {0x1, 0x3, 0x95f, 0xa}, {0x4, 0x4, 0x2, 0x7}, {0x2, 0x4, 0xf, 0xa}], 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000042c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000043c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000081c8336256ce9bdde873a1b33d1892276fbfd22a7d0000000000000000000000000054ea7846514d1e1e772dd195241ff445a59931136c32fda8a4ef0055f466162d81f9d69b065f"], &(0x7f0000004100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004200)={0x1, 0xd, 0x8001, 0xffffffff}, 0x10, 0x27f4, r4, 0x2, &(0x7f0000004240)=[r3], &(0x7f0000004280)=[{0x1, 0x2, 0x3, 0x1}, {0x4, 0x2, 0xf, 0x7}]}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000004440)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c000000020000000000ea3053bccd50fc110000000080b61e34988a833085f2eefb4f8e4503614c06c85d8d0eaec3ee429f34e3f4963ebf6e76c618daf04cab22733695ae6f27d0bacbd945682ff71f6dc284048f72f0477d394c69e9d0cc97b66ad44c87e740ccb911d843607ad6ac9e18be46a028692fe28d59367b4063a72662cf59667a6aca71d8d90565873edb029fb012c9d3239de9b3ab4a23b56df739c4b98c7a8374"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004380)={r5, 0xffffffffffffffff, 0x16, 0x0, @val=@target_btf_id=r12}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x24, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffff800}, @tail_call]}, &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x13, r2, 0x8, &(0x7f0000000840)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xa, 0x2, 0x10000}, 0x10, r12, r0, 0x9, 0x0, &(0x7f00000008c0)=[{0x2, 0x4, 0xd, 0x8}, {0x0, 0x4, 0x0, 0x4}, {0x2, 0x2, 0x4, 0x8}, {0x2, 0x5, 0x1, 0xb}, {0x0, 0x4, 0xf, 0x6}, {0x5, 0x3, 0x1000}, {0x1, 0x2, 0xa, 0x2}, {0x0, 0x4, 0x9, 0x1}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): . [ 223.374888][ T31] bond0 (unregistering): Released all slaves [ 223.377140][T12449] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2942: Allocating blocks 497-513 which overlap fs metadata [ 223.405675][T12448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12448 comm=syz.3.2942 [ 223.426335][T12447] EXT4-fs (loop3): pa ffff888106e0a230: logic 16, phys. 129, len 24 [ 223.434461][T12447] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 223.449042][T12453] loop2: detected capacity change from 0 to 128 [ 223.471392][T12453] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 223.485538][T12453] ext4 filesystem being mounted at /606/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.487925][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.505618][ T31] hsr_slave_0: left promiscuous mode [ 223.514815][ T31] hsr_slave_1: left promiscuous mode [ 223.520893][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.528294][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.540399][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.547927][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.564040][ T31] veth1_macvtap: left promiscuous mode [ 223.569562][ T31] veth0_macvtap: left promiscuous mode [ 223.582425][T12462] loop3: detected capacity change from 0 to 1024 [ 223.589203][T12462] EXT4-fs: Ignoring removed orlov option [ 223.601709][T12462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.616923][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.668041][ T31] team0 (unregistering): Port device team_slave_1 removed [ 223.679194][ T31] team0 (unregistering): Port device team_slave_0 removed [ 223.725610][T12474] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2949'. [ 223.783842][T12419] chnl_net:caif_netlink_parms(): no params data found [ 223.864875][T12419] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.872163][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.881053][T12419] bridge_slave_0: entered allmulticast mode [ 223.887867][T12419] bridge_slave_0: entered promiscuous mode [ 223.911414][T12419] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.918639][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.932036][T12419] bridge_slave_1: entered allmulticast mode [ 223.938902][T12419] bridge_slave_1: entered promiscuous mode [ 223.961321][T12490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12490 comm=syz.2.2954 [ 223.972157][T12494] loop1: detected capacity change from 0 to 128 [ 223.994792][T12490] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 224.002298][T12495] loop2: detected capacity change from 0 to 1024 [ 224.009691][T12495] EXT4-fs: Ignoring removed nobh option [ 224.015554][T12495] EXT4-fs: inline encryption not supported [ 224.024229][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.034282][T12419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.051700][T12419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.067877][T12495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.080047][T12502] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 224.093315][T12502] SELinux: failed to load policy [ 224.100602][T12419] team0: Port device team_slave_0 added [ 224.108714][T12419] team0: Port device team_slave_1 added [ 224.120124][T12490] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2954: Allocating blocks 497-513 which overlap fs metadata [ 224.148061][T12419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.155365][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.181472][T12419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.194143][T12419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.201297][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.228009][T12419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.239968][T12489] EXT4-fs (loop2): pa ffff888106e0a000: logic 16, phys. 129, len 24 [ 224.248188][T12489] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 224.252639][T12505] loop3: detected capacity change from 0 to 128 [ 224.281969][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.301372][T12419] hsr_slave_0: entered promiscuous mode [ 224.307642][T12419] hsr_slave_1: entered promiscuous mode [ 224.318225][T12505] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 224.430976][T12419] debugfs: 'hsr0' already exists in 'hsr' [ 224.436523][T12505] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.436932][T12419] Cannot create hsr debugfs directory [ 224.665875][T11874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.527091][T12525] loop3: detected capacity change from 0 to 512 [ 225.535182][T12525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 225.911107][T12531] loop1: detected capacity change from 0 to 128 [ 225.926166][T12525] EXT4-fs (loop3): 1 truncate cleaned up [ 225.934013][T12531] bio_check_eod: 245 callbacks suppressed [ 225.934046][T12531] syz.1.2965: attempt to access beyond end of device [ 225.934046][T12531] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 225.972855][T12525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.090880][T12531] syz.1.2965: attempt to access beyond end of device [ 226.090880][T12531] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 226.104907][T12531] buffer_io_error: 161 callbacks suppressed [ 226.104928][T12531] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 226.141724][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.156350][T12531] syz.1.2965: attempt to access beyond end of device [ 226.156350][T12531] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 226.170129][T12531] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 226.179026][T12531] syz.1.2965: attempt to access beyond end of device [ 226.179026][T12531] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 226.192983][T12531] syz.1.2965: attempt to access beyond end of device [ 226.192983][T12531] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 226.206179][T12539] loop2: detected capacity change from 0 to 512 [ 226.206814][T12531] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 226.216568][T12540] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 226.231455][T12531] syz.1.2965: attempt to access beyond end of device [ 226.231455][T12531] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 226.244920][T12531] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 226.255852][T12540] SELinux: failed to load policy [ 226.263288][T12531] syz.1.2965: attempt to access beyond end of device [ 226.263288][T12531] loop1: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 226.279203][T12539] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2967: bad orphan inode 11862016 [ 226.292101][ T29] kauditd_printk_skb: 460 callbacks suppressed [ 226.292122][ T29] audit: type=1326 audit(1759218085.954:21520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.292670][T12536] validate_nla: 3 callbacks suppressed [ 226.292686][T12536] netlink: 'syz.1.2965': attribute type 4 has an invalid length. [ 226.298489][ T29] audit: type=1326 audit(1759218085.954:21521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.338971][T12539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 226.360318][ T29] audit: type=1326 audit(1759218085.954:21522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.382120][T12545] loop3: detected capacity change from 0 to 128 [ 226.397252][ T29] audit: type=1326 audit(1759218085.954:21523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.398194][ T29] audit: type=1326 audit(1759218085.954:21524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.439129][T12531] syz.1.2965: attempt to access beyond end of device [ 226.439129][T12531] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 226.451253][ T29] audit: type=1326 audit(1759218085.954:21525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.488525][ T29] audit: type=1326 audit(1759218085.954:21526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.504738][T12545] syz.3.2968: attempt to access beyond end of device [ 226.504738][T12545] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 226.512439][ T29] audit: type=1326 audit(1759218085.954:21527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.512476][ T29] audit: type=1326 audit(1759218085.954:21528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.527577][T12531] syz.1.2965: attempt to access beyond end of device [ 226.527577][T12531] loop1: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 226.550045][T12539] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.573501][T12531] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 226.612383][T12545] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 226.620323][ T29] audit: type=1326 audit(1759218086.284:21529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 226.621082][T12545] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 226.646368][T12531] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 226.663696][T12545] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 226.692989][T12531] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 226.709022][T12548] netlink: 'syz.3.2968': attribute type 4 has an invalid length. [ 226.742682][T12419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.762667][T12419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.774480][T12419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.785845][T12419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.799073][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 226.859435][T12419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.871688][T12419] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.892265][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.899362][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.911133][T12564] net_ratelimit: 192 callbacks suppressed [ 226.911156][T12564] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 226.929743][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.936927][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.947231][T12564] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 226.969521][T12567] loop1: detected capacity change from 0 to 512 [ 226.975335][T12564] SELinux: failed to load policy [ 226.979234][T12567] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 227.001007][T12419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.011652][T12419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.028776][T12571] loop3: detected capacity change from 0 to 1024 [ 227.041975][T12567] EXT4-fs (loop1): 1 truncate cleaned up [ 227.050519][T12567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.087097][T12571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.109533][T12571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.137286][T12419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.201977][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.224977][T12592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12592 comm=syz.1.2978 [ 227.242196][T12592] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 227.268190][T12592] loop1: detected capacity change from 0 to 1024 [ 227.275570][T12592] EXT4-fs: Ignoring removed nobh option [ 227.281832][T12592] EXT4-fs: inline encryption not supported [ 227.413537][T12592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.455201][T12592] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2978: Allocating blocks 497-513 which overlap fs metadata [ 227.476025][T12591] EXT4-fs (loop1): pa ffff88810078aa10: logic 16, phys. 129, len 24 [ 227.484244][T12591] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 227.714949][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.736575][T12612] loop1: detected capacity change from 0 to 128 [ 227.777701][T12612] netlink: 'syz.1.2981': attribute type 4 has an invalid length. [ 227.781943][T12419] veth0_vlan: entered promiscuous mode [ 227.795267][T12419] veth1_vlan: entered promiscuous mode [ 227.813904][T12419] veth0_macvtap: entered promiscuous mode [ 227.822151][T12419] veth1_macvtap: entered promiscuous mode [ 227.833847][T12419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.846132][T12419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.857520][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.869720][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.895605][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.908969][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.968088][T12620] loop3: detected capacity change from 0 to 128 [ 227.997390][T12624] netlink: 'syz.1.2984': attribute type 16 has an invalid length. [ 228.005405][T12624] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2984'. [ 228.049239][T12620] netlink: 'syz.3.2982': attribute type 4 has an invalid length. [ 228.083177][T12630] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 228.094564][T12630] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 228.103986][T12631] netlink: zone id is out of range [ 228.109154][T12631] netlink: zone id is out of range [ 228.114393][T12631] netlink: zone id is out of range [ 228.119607][T12631] netlink: zone id is out of range [ 228.124977][T12631] netlink: zone id is out of range [ 228.130172][T12631] netlink: zone id is out of range [ 228.130438][T12630] SELinux: failed to load policy [ 228.135426][T12631] netlink: zone id is out of range [ 228.135438][T12631] netlink: zone id is out of range [ 228.232646][T12642] loop1: detected capacity change from 0 to 512 [ 228.261661][T12642] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2989: bad orphan inode 11862016 [ 228.273576][T12642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 228.287801][T12642] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.359730][T12646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #20: comm syz.1.2989: corrupted inode contents [ 228.377864][T12646] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #20: comm syz.1.2989: mark_inode_dirty error [ 228.391225][T12646] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #20: comm syz.1.2989: corrupted inode contents [ 228.407597][T12646] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #20: comm syz.1.2989: mark_inode_dirty error [ 228.442767][T12646] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #20: comm syz.1.2989: mark inode dirty (error -117) [ 228.456438][T12646] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 228.483163][T12648] loop4: detected capacity change from 0 to 1024 [ 228.499225][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 228.537068][T12648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.551226][T12648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.565107][T12656] loop1: detected capacity change from 0 to 128 [ 228.630348][T12664] loop4: detected capacity change from 0 to 1024 [ 228.637338][T12664] EXT4-fs: Ignoring removed orlov option [ 228.648387][T12664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.738110][T12651] chnl_net:caif_netlink_parms(): no params data found [ 228.751518][ T110] bridge_slave_1: left allmulticast mode [ 228.757530][ T110] bridge_slave_1: left promiscuous mode [ 228.763479][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.775579][ T110] bridge_slave_0: left allmulticast mode [ 228.781716][ T110] bridge_slave_0: left promiscuous mode [ 228.787509][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.928392][ T110] dvmrp1 (unregistering): left allmulticast mode [ 229.172761][ T110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.216593][ T110] bond_slave_1: left promiscuous mode [ 229.284651][T12684] netlink: 'syz.0.2995': attribute type 4 has an invalid length. [ 229.381669][T12419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.401961][ T110] bond0 (unregistering): Released all slaves [ 229.479404][T12690] loop4: detected capacity change from 0 to 128 [ 229.546652][T12651] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.553939][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.567345][T12651] bridge_slave_0: entered allmulticast mode [ 229.579532][T12651] bridge_slave_0: entered promiscuous mode [ 229.591744][ T110] tipc: Left network mode [ 229.592310][T12690] netlink: 'syz.4.2997': attribute type 4 has an invalid length. [ 229.604074][T12699] loop3: detected capacity change from 0 to 1024 [ 229.605902][T12651] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.612773][T12699] EXT4-fs: Ignoring removed orlov option [ 229.617983][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.631078][T12651] bridge_slave_1: entered allmulticast mode [ 229.637910][T12651] bridge_slave_1: entered promiscuous mode [ 229.646378][T12699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.680406][ T110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.726716][ T110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.746274][T12706] netlink: 'syz.1.3002': attribute type 1 has an invalid length. [ 229.754416][T12706] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.3002'. [ 229.793150][T12706] loop1: detected capacity change from 0 to 128 [ 229.800442][ T110] team0 (unregistering): Port device team_slave_1 removed [ 229.809186][T12706] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 229.822419][ T110] team0 (unregistering): Port device team_slave_0 removed [ 229.866038][T12706] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.888838][T12651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.903430][T12651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.928785][T12651] team0: Port device team_slave_0 added [ 229.936326][T12651] team0: Port device team_slave_1 added [ 229.966723][T12651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.974090][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.000914][T12651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.026474][T12651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.033697][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.059886][T12651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.075178][T12252] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.108674][T12651] hsr_slave_0: entered promiscuous mode [ 230.116696][T12651] hsr_slave_1: entered promiscuous mode [ 230.122995][T12651] debugfs: 'hsr0' already exists in 'hsr' [ 230.128990][T12651] Cannot create hsr debugfs directory [ 230.135404][T12711] sctp: [Deprecated]: syz.0.3003 (pid 12711) Use of int in maxseg socket option. [ 230.135404][T12711] Use struct sctp_assoc_value instead [ 230.167226][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.228058][T12722] loop1: detected capacity change from 0 to 512 [ 230.251237][T12722] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3004: bad orphan inode 11862016 [ 230.310093][T12722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 230.423836][T12722] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.686301][T12729] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #20: comm syz.1.3004: corrupted inode contents [ 230.704857][T12729] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #20: comm syz.1.3004: mark_inode_dirty error [ 230.716681][T12729] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #20: comm syz.1.3004: corrupted inode contents [ 230.730767][T12729] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #20: comm syz.1.3004: mark_inode_dirty error [ 230.743935][T12729] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #20: comm syz.1.3004: mark inode dirty (error -117) [ 230.759486][T12729] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 230.772193][T12651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.783607][T12651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.793586][T12651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.805358][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 230.819046][T12651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.843305][T12743] loop1: detected capacity change from 0 to 128 [ 230.886855][T12651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.898702][T12651] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.979353][T12743] bio_check_eod: 266 callbacks suppressed [ 230.979376][T12743] syz.1.3010: attempt to access beyond end of device [ 230.979376][T12743] loop1: rw=2049, sector=234, nr_sectors = 6 limit=128 [ 231.021648][T12743] syz.1.3010: attempt to access beyond end of device [ 231.021648][T12743] loop1: rw=2049, sector=238, nr_sectors = 2 limit=128 [ 231.033654][ T563] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.040112][T12743] syz.1.3010: attempt to access beyond end of device [ 231.040112][T12743] loop1: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 231.042356][ T563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.058511][T12743] syz.1.3010: attempt to access beyond end of device [ 231.058511][T12743] loop1: rw=2049, sector=242, nr_sectors = 6 limit=128 [ 231.079736][T12743] syz.1.3010: attempt to access beyond end of device [ 231.079736][T12743] loop1: rw=2049, sector=246, nr_sectors = 2 limit=128 [ 231.104713][T12743] syz.1.3010: attempt to access beyond end of device [ 231.104713][T12743] loop1: rw=2049, sector=248, nr_sectors = 2 limit=128 [ 231.118504][T12743] buffer_io_error: 177 callbacks suppressed [ 231.118522][T12743] Buffer I/O error on dev loop1, logical block 124, lost async page write [ 231.139310][T12743] syz.1.3010: attempt to access beyond end of device [ 231.139310][T12743] loop1: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 231.164031][T12743] syz.1.3010: attempt to access beyond end of device [ 231.164031][T12743] loop1: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 231.177823][T12743] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 231.191935][T12759] netlink: 'syz.1.3010': attribute type 4 has an invalid length. [ 231.201357][T12743] syz.1.3010: attempt to access beyond end of device [ 231.201357][T12743] loop1: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 231.215050][T12743] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 231.227936][T12743] syz.1.3010: attempt to access beyond end of device [ 231.227936][T12743] loop1: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 231.247405][T12743] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 231.256381][T12743] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 231.268699][T12743] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 231.277604][T12743] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 231.288942][T12743] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 231.297712][T12743] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 231.310180][T12748] Buffer I/O error on dev loop1, logical block 74, lost async page write [ 231.323388][ T563] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.330709][ T563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.416925][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 231.416943][ T29] audit: type=1326 audit(1759218091.074:21970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12740 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 231.447817][ T29] audit: type=1326 audit(1759218091.074:21971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12740 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 231.481398][T12651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.549459][T12651] veth0_vlan: entered promiscuous mode [ 231.558503][T12651] veth1_vlan: entered promiscuous mode [ 231.593377][T12772] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3015'. [ 231.612348][T12773] loop1: detected capacity change from 0 to 1024 [ 231.620272][T12773] EXT4-fs: Ignoring removed orlov option [ 231.627569][ T29] audit: type=1326 audit(1759218091.284:21972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.3.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 231.651396][T12773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.654926][ T29] audit: type=1326 audit(1759218091.284:21973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.3.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 231.668963][T12651] veth0_macvtap: entered promiscuous mode [ 231.688957][ T29] audit: type=1326 audit(1759218091.284:21974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.3.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 231.701022][T12651] veth1_macvtap: entered promiscuous mode [ 231.718568][ T29] audit: type=1326 audit(1759218091.284:21975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.3.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 231.730047][T12651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.748615][ T29] audit: type=1326 audit(1759218091.284:21976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.3.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 231.758321][T12651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.779866][ T29] audit: type=1326 audit(1759218091.284:21977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.3.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 231.811200][ T29] audit: type=1326 audit(1759218091.284:21978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.3.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 231.835719][ T29] audit: type=1326 audit(1759218091.284:21979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.3.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 231.929949][T12784] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 231.962002][T12784] SELinux: failed to load policy [ 231.970026][ T563] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.989319][T12787] loop3: detected capacity change from 0 to 512 [ 231.990705][ T563] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.999195][T12787] journal_path: Non-blockdev passed as './bus' [ 232.011206][T12787] EXT4-fs: error: could not find journal device path [ 232.044621][ T563] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.062971][ T563] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.195968][T12807] loop2: detected capacity change from 0 to 512 [ 232.237835][T12807] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3025: bad orphan inode 11862016 [ 232.294792][T12807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 232.307830][T12807] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.394704][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.507736][T12813] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #20: comm syz.2.3025: corrupted inode contents [ 232.527641][T12813] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #20: comm syz.2.3025: mark_inode_dirty error [ 232.579149][T12813] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #20: comm syz.2.3025: corrupted inode contents [ 232.602228][T12813] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #20: comm syz.2.3025: mark_inode_dirty error [ 232.629517][T12813] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #20: comm syz.2.3025: mark inode dirty (error -117) [ 232.698040][T12813] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 232.917459][T12651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 233.211355][T12824] loop3: detected capacity change from 0 to 1024 [ 233.302959][T12824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.329001][T12831] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 233.338353][T12831] SELinux: failed to load policy [ 233.384257][T12824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.486963][T12841] loop1: detected capacity change from 0 to 1024 [ 233.493824][T12841] EXT4-fs: Ignoring removed orlov option [ 233.511657][T12841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.526010][T12844] loop4: detected capacity change from 0 to 512 [ 233.554767][T12847] loop3: detected capacity change from 0 to 512 [ 233.562151][T12847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.566709][T12844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.586273][T12847] EXT4-fs (loop3): 1 truncate cleaned up [ 233.598995][T12847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.801968][T12844] EXT4-fs (loop4): 1 truncate cleaned up [ 233.826799][T12844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.027553][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.065956][T12419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.119984][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.185660][T12874] netlink: 'syz.1.3046': attribute type 16 has an invalid length. [ 234.193647][T12874] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3046'. [ 234.449116][T12871] sctp: [Deprecated]: syz.0.3041 (pid 12871) Use of int in maxseg socket option. [ 234.449116][T12871] Use struct sctp_assoc_value instead [ 234.633985][T12888] loop2: detected capacity change from 0 to 128 [ 234.871834][T12889] netlink: 'syz.2.3049': attribute type 4 has an invalid length. [ 235.021244][T12897] loop2: detected capacity change from 0 to 512 [ 235.028614][T12897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 235.051286][T12897] EXT4-fs (loop2): 1 truncate cleaned up [ 235.070093][T12897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.136730][T12651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.140897][T12903] loop3: detected capacity change from 0 to 1024 [ 235.152910][T12903] EXT4-fs: Ignoring removed orlov option [ 235.162670][T12903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.241620][T12906] netlink: 'syz.1.3057': attribute type 16 has an invalid length. [ 235.249543][T12906] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3057'. [ 235.331437][T12913] loop1: detected capacity change from 0 to 1024 [ 235.347377][T12917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12917 comm=syz.2.3059 [ 235.381188][T12913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.390183][T12917] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 235.417676][T12917] loop2: detected capacity change from 0 to 1024 [ 235.428048][T12917] EXT4-fs: Ignoring removed nobh option [ 235.433885][T12917] EXT4-fs: inline encryption not supported [ 235.563435][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.575206][T12913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.575574][T12917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.645087][T12917] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3059: Allocating blocks 497-513 which overlap fs metadata [ 235.679495][T12928] netlink: 'syz.1.3062': attribute type 16 has an invalid length. [ 235.680843][T12916] EXT4-fs (loop2): pa ffff888106e0a0e0: logic 16, phys. 129, len 24 [ 235.687406][T12928] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3062'. [ 235.695508][T12916] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 235.757435][T12933] loop1: detected capacity change from 0 to 128 [ 235.793336][T12933] netlink: 'syz.1.3064': attribute type 4 has an invalid length. [ 235.823478][T12651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.897609][T12938] netlink: 'syz.0.3063': attribute type 4 has an invalid length. [ 235.971321][T12941] loop2: detected capacity change from 0 to 512 [ 235.980945][T12941] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.067099][T12941] EXT4-fs (loop2): 1 truncate cleaned up [ 236.074219][T12941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.109008][T12951] loop4: detected capacity change from 0 to 1024 [ 236.132942][T12651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.145172][T12948] loop3: detected capacity change from 0 to 128 [ 236.147768][T12951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.158886][T12951] ext4: Unknown parameter 'smackfshat' [ 236.170525][T12951] net_ratelimit: 93 callbacks suppressed [ 236.170544][T12951] netlink: zone id is out of range [ 236.181726][T12951] netlink: zone id is out of range [ 236.186948][T12951] netlink: zone id is out of range [ 236.192502][T12951] netlink: zone id is out of range [ 236.197647][T12951] netlink: zone id is out of range [ 236.202966][T12951] netlink: zone id is out of range [ 236.208091][T12951] netlink: zone id is out of range [ 236.213337][T12951] netlink: zone id is out of range [ 236.218475][T12951] netlink: zone id is out of range [ 236.223699][T12951] netlink: zone id is out of range [ 236.328542][T12948] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 236.388660][T12948] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.451939][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 236.451955][ T29] audit: type=1326 audit(1759218096.084:22304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf113ed710 code=0x7ffc0000 [ 236.553652][ T29] audit: type=1326 audit(1759218096.174:22305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcf113edc17 code=0x7ffc0000 [ 236.577612][ T29] audit: type=1326 audit(1759218096.174:22306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf113ed710 code=0x7ffc0000 [ 236.601703][ T29] audit: type=1326 audit(1759218096.174:22307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 236.626234][ T29] audit: type=1326 audit(1759218096.174:22308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 236.650340][ T29] audit: type=1326 audit(1759218096.204:22309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 236.674190][ T29] audit: type=1326 audit(1759218096.204:22310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 236.698073][ T29] audit: type=1326 audit(1759218096.204:22311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 236.721851][ T29] audit: type=1326 audit(1759218096.204:22312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 236.745885][ T29] audit: type=1326 audit(1759218096.204:22313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf113eeec9 code=0x7ffc0000 [ 236.774772][T11874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.792508][T12967] loop2: detected capacity change from 0 to 1024 [ 236.799531][T12967] EXT4-fs: Ignoring removed orlov option [ 236.819492][T12967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.839454][T12973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12973 comm=syz.4.3076 [ 236.852785][T12973] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 236.866676][T12973] loop4: detected capacity change from 0 to 1024 [ 236.878085][T12973] EXT4-fs: Ignoring removed nobh option [ 236.883775][T12973] EXT4-fs: inline encryption not supported [ 236.925899][T12973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.941040][T12973] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3076: Allocating blocks 497-513 which overlap fs metadata [ 236.978164][T12972] EXT4-fs (loop4): pa ffff888106e0a0e0: logic 16, phys. 129, len 24 [ 236.986389][T12972] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 237.009554][T12419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.080900][T12990] loop3: detected capacity change from 0 to 128 [ 237.099314][T12992] loop4: detected capacity change from 0 to 512 [ 237.110370][T12990] bio_check_eod: 95 callbacks suppressed [ 237.110391][T12990] syz.3.3079: attempt to access beyond end of device [ 237.110391][T12990] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 237.129865][T12992] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 237.160495][T12990] syz.3.3079: attempt to access beyond end of device [ 237.160495][T12990] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 237.174165][T12990] buffer_io_error: 58 callbacks suppressed [ 237.174185][T12990] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 237.190448][T12992] EXT4-fs (loop4): 1 truncate cleaned up [ 237.196630][T12992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.229869][T12651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.241518][T12999] netlink: 'syz.0.3082': attribute type 4 has an invalid length. [ 237.260738][T12990] syz.3.3079: attempt to access beyond end of device [ 237.260738][T12990] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 237.274344][T12990] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 237.312106][T12998] netlink: 'syz.3.3079': attribute type 4 has an invalid length. [ 237.325092][T12419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.327775][T12990] syz.3.3079: attempt to access beyond end of device [ 237.327775][T12990] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 237.359370][T13008] loop2: detected capacity change from 0 to 512 [ 237.384615][T13008] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.387090][T12990] syz.3.3079: attempt to access beyond end of device [ 237.387090][T12990] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 237.408685][T12990] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 237.425577][T13008] EXT4-fs (loop2): 1 truncate cleaned up [ 237.469935][T12990] syz.3.3079: attempt to access beyond end of device [ 237.469935][T12990] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 237.483605][T12990] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 237.627172][T12990] syz.3.3079: attempt to access beyond end of device [ 237.627172][T12990] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 237.641374][T12990] syz.3.3079: attempt to access beyond end of device [ 237.641374][T12990] loop3: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 237.655524][T12990] syz.3.3079: attempt to access beyond end of device [ 237.655524][T12990] loop3: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 237.669233][T12990] Buffer I/O error on dev loop3, logical block 91, lost async page write [ 237.677827][T12990] syz.3.3079: attempt to access beyond end of device [ 237.677827][T12990] loop3: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 237.691801][T12990] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 238.239693][T13026] loop4: detected capacity change from 0 to 128 [ 238.271973][T13026] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 238.285255][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3091'. [ 238.295385][T13026] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 238.319060][T13026] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 238.330145][T13026] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 238.381089][T13035] loop1: detected capacity change from 0 to 512 [ 238.388157][T13035] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 238.421889][T13039] loop2: detected capacity change from 0 to 2048 [ 238.439072][T13035] EXT4-fs (loop1): 1 truncate cleaned up [ 238.453679][T13044] loop3: detected capacity change from 0 to 512 [ 238.461517][T13044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 238.472959][T13044] EXT4-fs (loop3): 1 truncate cleaned up [ 238.492843][T13050] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 238.501995][T13050] SELinux: failed to load policy [ 238.581617][T13053] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 238.597157][T13053] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1534 with error 28 [ 238.610061][T13053] EXT4-fs (loop2): This should not happen!! Data will be lost [ 238.610061][T13053] [ 238.619967][T13053] EXT4-fs (loop2): Total free blocks count 0 [ 238.626114][T13053] EXT4-fs (loop2): Free/Dirty block details [ 238.632163][T13053] EXT4-fs (loop2): free_blocks=2415919104 [ 238.638114][T13053] EXT4-fs (loop2): dirty_blocks=1536 [ 238.643627][T13053] EXT4-fs (loop2): Block reservation details [ 238.649804][T13053] EXT4-fs (loop2): i_reserved_data_blocks=96 [ 238.675190][T13053] sctp: [Deprecated]: syz.2.3095 (pid 13053) Use of int in maxseg socket option. [ 238.675190][T13053] Use struct sctp_assoc_value instead [ 238.952518][T13073] netlink: 'syz.0.3102': attribute type 4 has an invalid length. [ 239.034921][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 239.432017][T13087] loop4: detected capacity change from 0 to 512 [ 239.446309][ T2525] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 239.459184][ T2525] EXT4-fs (loop2): This should not happen!! Data will be lost [ 239.459184][ T2525] [ 239.482855][T13091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13091 comm=syz.3.3109 [ 239.574502][T13091] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 239.596960][T13087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.655328][T13087] EXT4-fs (loop4): 1 truncate cleaned up [ 239.672938][T13092] loop3: detected capacity change from 0 to 1024 [ 239.712663][T13092] EXT4-fs: Ignoring removed nobh option [ 239.718387][T13092] EXT4-fs: inline encryption not supported [ 239.744097][T13091] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3109: Allocating blocks 497-513 which overlap fs metadata [ 239.761742][T13097] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3110'. [ 239.773688][T13090] EXT4-fs (loop3): pa ffff888106e0a7e0: logic 16, phys. 129, len 24 [ 239.782104][T13090] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 239.784615][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3110'. [ 239.895990][T13108] loop4: detected capacity change from 0 to 128 [ 239.929136][T13108] netlink: 'syz.4.3114': attribute type 4 has an invalid length. [ 240.005430][T13113] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 240.016659][T13111] loop3: detected capacity change from 0 to 128 [ 240.025002][T13113] SELinux: failed to load policy [ 240.035217][T13111] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.117580][T13119] loop4: detected capacity change from 0 to 1024 [ 240.221133][T13132] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3122'. [ 240.233356][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3122'. [ 240.265166][T13137] loop3: detected capacity change from 0 to 128 [ 240.310991][T13137] netlink: 'syz.3.3123': attribute type 4 has an invalid length. [ 240.341111][T13133] sctp: [Deprecated]: syz.0.3119 (pid 13133) Use of int in maxseg socket option. [ 240.341111][T13133] Use struct sctp_assoc_value instead [ 240.391831][T13146] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 240.401637][T13146] SELinux: failed to load policy [ 240.423892][T13148] netlink: 'syz.1.3127': attribute type 16 has an invalid length. [ 240.431957][T13148] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3127'. [ 240.499361][T13158] loop1: detected capacity change from 0 to 1024 [ 240.499893][T13160] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3133'. [ 240.522297][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3133'. [ 240.597813][T13174] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 240.612316][T13174] SELinux: failed to load policy [ 240.640841][T13176] loop2: detected capacity change from 0 to 128 [ 240.708478][T13176] netlink: 'syz.2.3140': attribute type 4 has an invalid length. [ 240.805214][T13189] loop1: detected capacity change from 0 to 512 [ 240.812732][T13189] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 240.849314][T13189] EXT4-fs (loop1): 1 truncate cleaned up [ 240.891530][T13194] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3146'. [ 240.905848][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'. [ 241.026397][T13204] loop4: detected capacity change from 0 to 1024 [ 241.035631][T13204] EXT4-fs: Ignoring removed orlov option [ 241.228102][T13216] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 241.256335][T13216] SELinux: failed to load policy [ 241.325628][T13217] netlink: 'syz.0.3151': attribute type 4 has an invalid length. [ 241.359759][T13222] loop4: detected capacity change from 0 to 128 [ 241.400377][T13222] netlink: 'syz.4.3156': attribute type 4 has an invalid length. [ 241.505073][T13228] loop3: detected capacity change from 0 to 512 [ 241.536137][T13228] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3158: bad orphan inode 11862016 [ 241.546816][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 241.546832][ T29] audit: type=1326 audit(1759218101.194:22836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.554458][T13228] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.577745][ T29] audit: type=1326 audit(1759218101.194:22837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.612292][ T29] audit: type=1326 audit(1759218101.194:22838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.636332][ T29] audit: type=1326 audit(1759218101.194:22839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.660864][ T29] audit: type=1326 audit(1759218101.194:22840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.685248][ T29] audit: type=1326 audit(1759218101.194:22841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58ba2dd97f code=0x7ffc0000 [ 241.709546][ T29] audit: type=1326 audit(1759218101.194:22842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.733830][ T29] audit: type=1326 audit(1759218101.194:22843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.758244][ T29] audit: type=1326 audit(1759218101.204:22844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.782417][ T29] audit: type=1326 audit(1759218101.204:22845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 241.811962][T13236] loop2: detected capacity change from 0 to 2048 [ 241.834530][T13238] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 241.852403][T13238] SELinux: failed to load policy [ 241.867337][T13242] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.3158: corrupted inode contents [ 241.881445][T13242] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.3158: mark_inode_dirty error [ 241.896368][T13242] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.3158: corrupted inode contents [ 241.910550][T13242] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.3158: mark_inode_dirty error [ 241.941712][T13242] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.3158: mark inode dirty (error -117) [ 241.956551][T13242] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 241.983017][T13245] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 241.999439][T13245] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1250 with error 28 [ 242.012176][T13245] EXT4-fs (loop2): This should not happen!! Data will be lost [ 242.012176][T13245] [ 242.022039][T13245] EXT4-fs (loop2): Total free blocks count 0 [ 242.028067][T13245] EXT4-fs (loop2): Free/Dirty block details [ 242.034101][T13245] EXT4-fs (loop2): free_blocks=2415919104 [ 242.039964][T13245] EXT4-fs (loop2): dirty_blocks=1264 [ 242.045458][T13245] EXT4-fs (loop2): Block reservation details [ 242.051748][T13245] EXT4-fs (loop2): i_reserved_data_blocks=79 [ 242.092387][T13257] loop3: detected capacity change from 0 to 128 [ 242.102565][T13257] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.181319][T13245] sctp: [Deprecated]: syz.2.3161 (pid 13245) Use of int in maxseg socket option. [ 242.181319][T13245] Use struct sctp_assoc_value instead [ 242.279871][T13266] netlink: 'syz.4.3169': attribute type 16 has an invalid length. [ 242.288049][T13266] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3169'. [ 242.634506][ T3437] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 242.647240][ T3437] EXT4-fs (loop2): This should not happen!! Data will be lost [ 242.647240][ T3437] [ 242.699637][T13283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13283 comm=syz.4.3173 [ 242.736791][T13283] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 242.807358][T13283] loop4: detected capacity change from 0 to 1024 [ 242.816821][T13283] EXT4-fs: Ignoring removed nobh option [ 242.823277][T13283] EXT4-fs: inline encryption not supported [ 242.904855][T13289] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 242.915544][T13289] SELinux: failed to load policy [ 243.086506][T13283] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3173: Allocating blocks 497-513 which overlap fs metadata [ 243.126797][T13282] EXT4-fs (loop4): pa ffff888106e0a8c0: logic 16, phys. 129, len 24 [ 243.134993][T13282] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 243.954950][T13318] netlink: 'syz.0.3181': attribute type 4 has an invalid length. [ 244.129561][T13325] loop2: detected capacity change from 0 to 128 [ 244.144812][T13325] bio_check_eod: 213 callbacks suppressed [ 244.144833][T13325] syz.2.3185: attempt to access beyond end of device [ 244.144833][T13325] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 244.198231][T13325] syz.2.3185: attempt to access beyond end of device [ 244.198231][T13325] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 244.212028][T13325] buffer_io_error: 138 callbacks suppressed [ 244.212048][T13325] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 244.272239][T13325] syz.2.3185: attempt to access beyond end of device [ 244.272239][T13325] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 244.286035][T13325] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 244.340190][T13325] syz.2.3185: attempt to access beyond end of device [ 244.340190][T13325] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 244.354569][T13325] syz.2.3185: attempt to access beyond end of device [ 244.354569][T13325] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 244.368609][T13325] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 244.387960][T13325] syz.2.3185: attempt to access beyond end of device [ 244.387960][T13325] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 244.401990][T13325] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 244.415740][T13334] loop1: detected capacity change from 0 to 512 [ 244.463663][T13334] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 244.467399][T13330] netlink: 'syz.2.3185': attribute type 4 has an invalid length. [ 244.487713][T13325] syz.2.3185: attempt to access beyond end of device [ 244.487713][T13325] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 244.502476][T13334] EXT4-fs (loop1): 1 truncate cleaned up [ 244.517011][T13341] loop3: detected capacity change from 0 to 2048 [ 244.524400][T13325] syz.2.3185: attempt to access beyond end of device [ 244.524400][T13325] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 244.538900][T13325] syz.2.3185: attempt to access beyond end of device [ 244.538900][T13325] loop2: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 244.552497][T13325] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 244.561106][T13325] syz.2.3185: attempt to access beyond end of device [ 244.561106][T13325] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 244.574703][T13325] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 244.584435][T13325] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 244.598360][T13325] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 244.607839][T13325] Buffer I/O error on dev loop2, logical block 115, lost async page write [ 244.617056][T13325] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 244.655376][T13353] loop1: detected capacity change from 0 to 1024 [ 244.662901][T13353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.670299][T13353] ext4: Unknown parameter 'smackfshat' [ 244.678362][T13353] net_ratelimit: 91 callbacks suppressed [ 244.678381][T13353] netlink: zone id is out of range [ 244.689680][T13353] netlink: zone id is out of range [ 244.694983][T13353] netlink: zone id is out of range [ 244.700533][T13353] netlink: zone id is out of range [ 244.705733][T13353] netlink: zone id is out of range [ 244.711168][T13353] netlink: zone id is out of range [ 244.716616][T13353] netlink: zone id is out of range [ 244.721869][T13353] netlink: zone id is out of range [ 244.727166][T13353] netlink: zone id is out of range [ 244.732519][T13353] netlink: zone id is out of range [ 244.757700][T13354] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 244.775243][T13354] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1988 with error 28 [ 244.776817][T13358] loop4: detected capacity change from 0 to 1024 [ 244.788677][T13354] EXT4-fs (loop3): This should not happen!! Data will be lost [ 244.788677][T13354] [ 244.796279][T13358] EXT4-fs: Ignoring removed orlov option [ 244.805184][T13354] EXT4-fs (loop3): Total free blocks count 0 [ 244.805205][T13354] EXT4-fs (loop3): Free/Dirty block details [ 244.823491][T13354] EXT4-fs (loop3): free_blocks=2415919104 [ 244.829440][T13354] EXT4-fs (loop3): dirty_blocks=2000 [ 244.835575][T13354] EXT4-fs (loop3): Block reservation details [ 244.841668][T13354] EXT4-fs (loop3): i_reserved_data_blocks=125 [ 244.868320][T13362] sctp: [Deprecated]: syz.3.3190 (pid 13362) Use of int in maxseg socket option. [ 244.868320][T13362] Use struct sctp_assoc_value instead [ 245.079987][T13369] loop4: detected capacity change from 0 to 512 [ 245.094857][T13369] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3196: bad orphan inode 11862016 [ 245.107256][T13369] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.213374][T13369] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.3196: corrupted inode contents [ 245.226818][T13369] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.3196: mark_inode_dirty error [ 245.238499][T13369] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.3196: corrupted inode contents [ 245.252943][T13369] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.3196: mark_inode_dirty error [ 245.265696][T13369] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.3196: mark inode dirty (error -117) [ 245.285108][T13369] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 245.358557][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 245.371037][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 245.371037][ T37] [ 245.427897][T13379] __nla_validate_parse: 1 callbacks suppressed [ 245.427917][T13379] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3199'. [ 245.472451][T13384] loop3: detected capacity change from 0 to 512 [ 245.475343][T13385] loop1: detected capacity change from 0 to 128 [ 245.480517][T13384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 245.509024][T13384] EXT4-fs (loop3): 1 truncate cleaned up [ 245.785623][T13401] loop2: detected capacity change from 0 to 1024 [ 245.792932][T13401] EXT4-fs: Ignoring removed orlov option [ 245.921766][T13419] loop1: detected capacity change from 0 to 512 [ 245.929367][T13417] loop4: detected capacity change from 0 to 512 [ 245.936793][T13417] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.958476][T13419] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3213: bad orphan inode 11862016 [ 245.964350][T13425] loop3: detected capacity change from 0 to 1024 [ 245.977250][T13419] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.989210][T13425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.991261][T13417] EXT4-fs (loop4): 1 truncate cleaned up [ 246.002206][T13425] ext4: Unknown parameter 'smackfshat' [ 246.097154][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 246.125771][T13435] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3217'. [ 246.171288][T13430] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #20: comm syz.1.3213: corrupted inode contents [ 246.189161][T13430] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #20: comm syz.1.3213: mark_inode_dirty error [ 246.211883][T13430] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #20: comm syz.1.3213: corrupted inode contents [ 246.230996][T13430] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #20: comm syz.1.3213: mark_inode_dirty error [ 246.253734][T13430] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #20: comm syz.1.3213: mark inode dirty (error -117) [ 246.266972][T13430] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 246.323476][T13444] sctp: [Deprecated]: syz.0.3217 (pid 13444) Use of int in maxseg socket option. [ 246.323476][T13444] Use struct sctp_assoc_value instead [ 246.415591][T13448] loop1: detected capacity change from 0 to 512 [ 246.452203][T13448] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 246.612570][T13448] EXT4-fs (loop1): 1 truncate cleaned up [ 246.649865][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 246.649894][ T29] audit: type=1326 audit(1759218106.294:23290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.679932][ T29] audit: type=1326 audit(1759218106.294:23291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.704118][ T29] audit: type=1326 audit(1759218106.294:23292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.728219][ T29] audit: type=1326 audit(1759218106.294:23293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.752092][ T29] audit: type=1326 audit(1759218106.294:23294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.775955][ T29] audit: type=1326 audit(1759218106.294:23295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.799594][ T29] audit: type=1326 audit(1759218106.294:23296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.823709][ T29] audit: type=1326 audit(1759218106.294:23297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.847870][ T29] audit: type=1326 audit(1759218106.294:23298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.872025][ T29] audit: type=1326 audit(1759218106.294:23299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 246.962659][T13460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3225'. [ 247.002124][T13460] loop1: detected capacity change from 0 to 2048 [ 247.018636][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 247.045478][T13470] loop3: detected capacity change from 0 to 512 [ 247.076919][T13470] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3229: bad orphan inode 11862016 [ 247.158287][T13479] loop4: detected capacity change from 0 to 128 [ 247.169017][T13470] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.192062][T13480] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 247.216026][T13487] loop2: detected capacity change from 0 to 128 [ 247.223282][T13484] sctp: [Deprecated]: syz.1.3225 (pid 13484) Use of int in maxseg socket option. [ 247.223282][T13484] Use struct sctp_assoc_value instead [ 247.229951][T13480] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 247.251067][T13480] EXT4-fs (loop1): This should not happen!! Data will be lost [ 247.251067][T13480] [ 247.260908][T13480] EXT4-fs (loop1): Total free blocks count 0 [ 247.267078][T13480] EXT4-fs (loop1): Free/Dirty block details [ 247.273407][T13480] EXT4-fs (loop1): free_blocks=2415919104 [ 247.279346][T13480] EXT4-fs (loop1): dirty_blocks=2224 [ 247.284792][T13480] EXT4-fs (loop1): Block reservation details [ 247.290964][T13480] EXT4-fs (loop1): i_reserved_data_blocks=139 [ 247.301399][T13487] netlink: 'syz.2.3233': attribute type 4 has an invalid length. [ 247.338881][T13479] netlink: 'syz.4.3231': attribute type 4 has an invalid length. [ 247.383270][T13470] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #20: comm syz.3.3229: corrupted inode contents [ 247.395862][T13470] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #20: comm syz.3.3229: mark_inode_dirty error [ 247.408255][T13470] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #20: comm syz.3.3229: corrupted inode contents [ 247.420771][T13470] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #20: comm syz.3.3229: mark_inode_dirty error [ 247.433500][T13470] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #20: comm syz.3.3229: mark inode dirty (error -117) [ 247.447541][T13470] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 247.506309][T13498] loop2: detected capacity change from 0 to 512 [ 247.517625][T13501] loop4: detected capacity change from 0 to 512 [ 247.518688][T13498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 247.526103][T13501] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 247.549422][T13501] EXT4-fs (loop4): 1 truncate cleaned up [ 247.556096][T13498] EXT4-fs (loop2): 1 truncate cleaned up [ 247.618776][T13514] loop2: detected capacity change from 0 to 512 [ 247.632256][T13514] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3242: bad orphan inode 11862016 [ 247.644253][T13514] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.812061][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 247.824757][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 247.824757][ T31] [ 247.926310][T13537] netlink: 'syz.0.3245': attribute type 4 has an invalid length. [ 248.030755][T13547] loop4: detected capacity change from 0 to 512 [ 248.038492][T13547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 248.057059][T13547] EXT4-fs (loop4): 1 truncate cleaned up [ 248.157860][T13553] loop4: detected capacity change from 0 to 512 [ 248.180929][T13553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 248.230662][T13553] EXT4-fs (loop4): 1 truncate cleaned up [ 248.348397][T13566] loop3: detected capacity change from 0 to 128 [ 248.368426][T13563] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3258'. [ 248.403033][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'. [ 248.413598][T13563] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.437600][T13566] netlink: 'syz.3.3259': attribute type 4 has an invalid length. [ 248.462091][T13563] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.491848][T13575] loop4: detected capacity change from 0 to 512 [ 248.498694][T13575] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 248.516105][T13575] EXT4-fs (loop4): 1 truncate cleaned up [ 248.561401][T13563] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.590207][T13581] loop4: detected capacity change from 0 to 1024 [ 248.641819][T13563] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.695135][T13598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13598 comm=syz.2.3271 [ 248.697962][ T3437] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.717556][T13598] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 248.727969][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.740882][T13598] loop2: detected capacity change from 0 to 1024 [ 248.741890][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.747864][T13598] EXT4-fs: Ignoring removed nobh option [ 248.761568][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.770151][T13598] EXT4-fs: inline encryption not supported [ 248.784753][T13598] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3271: Allocating blocks 497-513 which overlap fs metadata [ 248.801611][T13597] EXT4-fs (loop2): pa ffff88810078a850: logic 16, phys. 129, len 24 [ 248.809891][T13597] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 248.826553][T13604] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3272'. [ 248.851007][T13606] netlink: 'syz.1.3273': attribute type 1 has an invalid length. [ 248.858987][T13606] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.3273'. [ 248.872958][T13606] loop1: detected capacity change from 0 to 128 [ 248.883937][T13606] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.928965][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3275'. [ 248.946558][T13616] loop1: detected capacity change from 0 to 512 [ 248.962745][T13620] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 248.971915][T13620] SELinux: failed to load policy [ 249.002971][T13616] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3276: bad orphan inode 11862016 [ 249.014798][T13616] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.242172][T13643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13643 comm=syz.1.3285 [ 249.267323][T13643] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 249.293718][T13645] loop4: detected capacity change from 0 to 1024 [ 249.307388][T13643] loop1: detected capacity change from 0 to 1024 [ 249.320236][T13643] EXT4-fs: Ignoring removed nobh option [ 249.326006][T13643] EXT4-fs: inline encryption not supported [ 249.332317][T13645] EXT4-fs: Ignoring removed orlov option [ 249.359521][T13643] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3285: Allocating blocks 497-513 which overlap fs metadata [ 249.501316][T13642] EXT4-fs (loop1): pa ffff88810078a8c0: logic 16, phys. 129, len 24 [ 249.509378][T13642] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 249.522814][T13655] netlink: 'syz.0.3287': attribute type 1 has an invalid length. [ 249.680005][T13670] loop4: detected capacity change from 0 to 128 [ 249.691756][T13670] bio_check_eod: 202 callbacks suppressed [ 249.691777][T13670] syz.4.3293: attempt to access beyond end of device [ 249.691777][T13670] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 249.713281][T13670] syz.4.3293: attempt to access beyond end of device [ 249.713281][T13670] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 249.727015][T13670] buffer_io_error: 132 callbacks suppressed [ 249.727035][T13670] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 249.747569][T13670] syz.4.3293: attempt to access beyond end of device [ 249.747569][T13670] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 249.761108][T13670] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 249.778411][T13670] syz.4.3293: attempt to access beyond end of device [ 249.778411][T13670] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 249.794521][T13670] syz.4.3293: attempt to access beyond end of device [ 249.794521][T13670] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 249.808130][T13670] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 249.818971][T13670] syz.4.3293: attempt to access beyond end of device [ 249.818971][T13670] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 249.833509][T13670] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 249.844473][T13670] syz.4.3293: attempt to access beyond end of device [ 249.844473][T13670] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 249.861635][T13670] syz.4.3293: attempt to access beyond end of device [ 249.861635][T13670] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 249.875467][T13670] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 249.908987][T13679] loop1: detected capacity change from 0 to 512 [ 249.918000][T13676] netlink: 'syz.4.3293': attribute type 4 has an invalid length. [ 249.930428][T13679] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3295: bad orphan inode 11862016 [ 249.943777][T13679] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.954812][T13670] syz.4.3293: attempt to access beyond end of device [ 249.954812][T13670] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 249.968472][T13670] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 250.000905][T13670] syz.4.3293: attempt to access beyond end of device [ 250.000905][T13670] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 250.008700][T13684] loop3: detected capacity change from 0 to 2048 [ 250.035316][T13670] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 250.101693][T13670] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 250.122122][T13670] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 250.148342][T13670] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 250.172578][T13688] loop1: detected capacity change from 0 to 128 [ 250.184831][T13688] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.304126][T13692] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 250.362096][T13692] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 760 with error 28 [ 250.374845][T13692] EXT4-fs (loop3): This should not happen!! Data will be lost [ 250.374845][T13692] [ 250.384825][T13692] EXT4-fs (loop3): Total free blocks count 0 [ 250.390875][T13692] EXT4-fs (loop3): Free/Dirty block details [ 250.396877][T13692] EXT4-fs (loop3): free_blocks=2415919104 [ 250.402659][T13692] EXT4-fs (loop3): dirty_blocks=768 [ 250.407884][T13692] EXT4-fs (loop3): Block reservation details [ 250.414086][T13692] EXT4-fs (loop3): i_reserved_data_blocks=48 [ 250.436564][T13700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13700 comm=syz.4.3300 [ 250.450348][T13700] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 250.475982][T13700] loop4: detected capacity change from 0 to 1024 [ 250.483240][T13700] EXT4-fs: Ignoring removed nobh option [ 250.488973][T13700] EXT4-fs: inline encryption not supported [ 250.508122][T13700] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3300: Allocating blocks 497-513 which overlap fs metadata [ 250.610161][T13699] EXT4-fs (loop4): pa ffff88810078a700: logic 16, phys. 129, len 24 [ 250.618367][T13699] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 250.637229][T13706] loop1: detected capacity change from 0 to 1024 [ 250.644394][T13708] loop2: detected capacity change from 0 to 128 [ 250.663083][T13706] EXT4-fs: Ignoring removed orlov option [ 250.706984][T13711] __nla_validate_parse: 4 callbacks suppressed [ 250.707005][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3303'. [ 250.764866][T13708] netlink: 'syz.2.3302': attribute type 4 has an invalid length. [ 250.796288][T13721] loop4: detected capacity change from 0 to 512 [ 250.813033][T13721] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 250.825430][T13721] EXT4-fs (loop4): 1 truncate cleaned up [ 250.851830][ T3437] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 250.864263][ T3437] EXT4-fs (loop3): This should not happen!! Data will be lost [ 250.864263][ T3437] [ 250.923600][T13728] loop4: detected capacity change from 0 to 2048 [ 251.067861][T13750] loop2: detected capacity change from 0 to 512 [ 251.091343][T13744] loop3: detected capacity change from 0 to 128 [ 251.097525][T13750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.108671][T13748] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 251.125136][T13751] sctp: [Deprecated]: syz.4.3308 (pid 13751) Use of int in maxseg socket option. [ 251.125136][T13751] Use struct sctp_assoc_value instead [ 251.125406][T13748] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 672 with error 28 [ 251.152316][T13748] EXT4-fs (loop4): This should not happen!! Data will be lost [ 251.152316][T13748] [ 251.152475][T13755] loop1: detected capacity change from 0 to 1024 [ 251.162227][T13748] EXT4-fs (loop4): Total free blocks count 0 [ 251.162249][T13748] EXT4-fs (loop4): Free/Dirty block details [ 251.171977][T13750] EXT4-fs (loop2): 1 truncate cleaned up [ 251.174792][T13748] EXT4-fs (loop4): free_blocks=2415919104 [ 251.186294][T13744] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.192001][T13748] EXT4-fs (loop4): dirty_blocks=688 [ 251.192023][T13748] EXT4-fs (loop4): Block reservation details [ 251.214251][T13748] EXT4-fs (loop4): i_reserved_data_blocks=43 [ 251.303083][T13768] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3323'. [ 251.319796][T13768] loop3: detected capacity change from 0 to 2048 [ 251.335516][T13772] loop2: detected capacity change from 0 to 128 [ 251.364439][T13772] netlink: 'syz.2.3322': attribute type 4 has an invalid length. [ 251.442522][T13774] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 251.457825][T13774] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2008 with error 28 [ 251.470545][T13774] EXT4-fs (loop3): This should not happen!! Data will be lost [ 251.470545][T13774] [ 251.480245][T13774] EXT4-fs (loop3): Total free blocks count 0 [ 251.486340][T13774] EXT4-fs (loop3): Free/Dirty block details [ 251.492435][T13774] EXT4-fs (loop3): free_blocks=2415919104 [ 251.498499][T13774] EXT4-fs (loop3): dirty_blocks=2016 [ 251.504011][T13774] EXT4-fs (loop3): Block reservation details [ 251.510174][T13774] EXT4-fs (loop3): i_reserved_data_blocks=126 [ 251.533242][T13778] loop2: detected capacity change from 0 to 1024 [ 251.540437][T13778] EXT4-fs: Ignoring removed orlov option [ 251.642787][T13774] sctp: [Deprecated]: syz.3.3323 (pid 13774) Use of int in maxseg socket option. [ 251.642787][T13774] Use struct sctp_assoc_value instead [ 251.749011][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 251.761836][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 251.761836][ T12] [ 251.853930][T13792] loop4: detected capacity change from 0 to 512 [ 251.861134][T13792] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 251.877886][T13792] EXT4-fs (loop4): 1 truncate cleaned up [ 251.919970][ T29] kauditd_printk_skb: 1349 callbacks suppressed [ 251.919989][ T29] audit: type=1326 audit(1759218111.574:24649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.4.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 251.926291][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3330'. [ 251.962535][ T29] audit: type=1326 audit(1759218111.584:24650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.4.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 251.986599][ T29] audit: type=1326 audit(1759218111.584:24651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.4.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 252.010407][ T29] audit: type=1326 audit(1759218111.584:24652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.4.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ba2deec9 code=0x7ffc0000 [ 252.034265][ T29] audit: type=1326 audit(1759218111.614:24653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b5eec9 code=0x7ffc0000 [ 252.037060][T13801] loop4: detected capacity change from 0 to 128 [ 252.058265][ T29] audit: type=1326 audit(1759218111.614:24654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b5eec9 code=0x7ffc0000 [ 252.088482][ T29] audit: type=1326 audit(1759218111.614:24655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb637b5eec9 code=0x7ffc0000 [ 252.112658][ T29] audit: type=1326 audit(1759218111.614:24656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b5eec9 code=0x7ffc0000 [ 252.136696][ T29] audit: type=1326 audit(1759218111.614:24657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b5eec9 code=0x7ffc0000 [ 252.160621][ T29] audit: type=1326 audit(1759218111.614:24658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13802 comm="syz.2.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb637b5eec9 code=0x7ffc0000 [ 252.194195][T13807] loop2: detected capacity change from 0 to 512 [ 252.201754][T13807] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 252.212827][T13801] EXT4-fs mount: 101 callbacks suppressed [ 252.212847][T13801] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 252.231269][T13807] EXT4-fs (loop2): 1 truncate cleaned up [ 252.232994][T13801] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.250413][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 252.254499][T13807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.262963][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 252.262963][ T12] [ 252.304119][T13812] loop1: detected capacity change from 0 to 1024 [ 252.321787][T13812] EXT4-fs: Ignoring removed orlov option [ 252.330547][T12651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.353672][T13815] loop3: detected capacity change from 0 to 2048 [ 252.368954][T13812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.462007][T12419] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.526249][T13815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 252.660365][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.673445][T13830] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.688663][T13830] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1144 with error 28 [ 252.701637][T13830] EXT4-fs (loop3): This should not happen!! Data will be lost [ 252.701637][T13830] [ 252.711464][T13830] EXT4-fs (loop3): Total free blocks count 0 [ 252.717471][T13830] EXT4-fs (loop3): Free/Dirty block details [ 252.723638][T13830] EXT4-fs (loop3): free_blocks=2415919104 [ 252.729473][T13830] EXT4-fs (loop3): dirty_blocks=1152 [ 252.734912][T13830] EXT4-fs (loop3): Block reservation details [ 252.740987][T13830] EXT4-fs (loop3): i_reserved_data_blocks=72 [ 252.800144][T13830] sctp: [Deprecated]: syz.3.3337 (pid 13830) Use of int in maxseg socket option. [ 252.800144][T13830] Use struct sctp_assoc_value instead [ 252.807451][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'. [ 252.828147][T13849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3347'. [ 252.864408][T13851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13851 comm=syz.0.3348 [ 252.880813][T13849] loop1: detected capacity change from 0 to 2048 [ 252.888996][T13851] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 252.943286][T13849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 253.088009][T13854] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 253.115602][T13854] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1700 with error 28 [ 253.128216][T13854] EXT4-fs (loop1): This should not happen!! Data will be lost [ 253.128216][T13854] [ 253.138066][T13854] EXT4-fs (loop1): Total free blocks count 0 [ 253.144330][T13854] EXT4-fs (loop1): Free/Dirty block details [ 253.150357][T13854] EXT4-fs (loop1): free_blocks=2415919104 [ 253.156105][T13854] EXT4-fs (loop1): dirty_blocks=1712 [ 253.161651][T13854] EXT4-fs (loop1): Block reservation details [ 253.167687][T13854] EXT4-fs (loop1): i_reserved_data_blocks=107 [ 253.197847][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 253.335235][T13854] sctp: [Deprecated]: syz.1.3347 (pid 13854) Use of int in maxseg socket option. [ 253.335235][T13854] Use struct sctp_assoc_value instead [ 253.463134][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3358'. [ 253.488051][T13876] loop2: detected capacity change from 0 to 512 [ 253.496658][T13876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 253.519749][T13876] EXT4-fs (loop2): 1 truncate cleaned up [ 253.526842][T13876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.584433][T12651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.590523][T13884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13884 comm=syz.3.3360 [ 253.607004][T13884] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 253.621736][T13884] loop3: detected capacity change from 0 to 1024 [ 253.628647][T13884] EXT4-fs: Ignoring removed nobh option [ 253.634421][T13884] EXT4-fs: inline encryption not supported [ 253.652626][T13884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.668019][T13884] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3360: Allocating blocks 497-513 which overlap fs metadata [ 253.683651][T13883] EXT4-fs (loop3): pa ffff88810078a620: logic 16, phys. 129, len 24 [ 253.691859][T13883] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 253.734335][ T110] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 253.737940][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.828453][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 253.885320][T13919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3374'. [ 253.903922][T13919] loop2: detected capacity change from 0 to 2048 [ 253.931774][T13919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 254.058553][T13927] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.076009][T13927] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1734 with error 28 [ 254.088890][T13927] EXT4-fs (loop2): This should not happen!! Data will be lost [ 254.088890][T13927] [ 254.098772][T13927] EXT4-fs (loop2): Total free blocks count 0 [ 254.104813][T13927] EXT4-fs (loop2): Free/Dirty block details [ 254.110935][T13927] EXT4-fs (loop2): free_blocks=2415919104 [ 254.116747][T13927] EXT4-fs (loop2): dirty_blocks=1744 [ 254.122176][T13927] EXT4-fs (loop2): Block reservation details [ 254.128287][T13927] EXT4-fs (loop2): i_reserved_data_blocks=109 [ 254.159589][T13927] sctp: [Deprecated]: syz.2.3374 (pid 13927) Use of int in maxseg socket option. [ 254.159589][T13927] Use struct sctp_assoc_value instead [ 254.390645][T13939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=13939 comm=syz.3.3378 [ 254.404523][T13939] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 254.418800][T13939] loop3: detected capacity change from 0 to 1024 [ 254.427313][T13939] EXT4-fs: Ignoring removed nobh option [ 254.433030][T13939] EXT4-fs: inline encryption not supported [ 254.452313][T13939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.478466][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.508895][T13944] netlink: 'syz.3.3379': attribute type 1 has an invalid length. [ 254.516779][T13944] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3379'. [ 254.532495][T13944] loop3: detected capacity change from 0 to 128 [ 254.543846][T13944] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 254.586953][T13944] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.600643][T13947] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 254.610700][T13947] SELinux: failed to load policy [ 254.639525][T11874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.652151][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'. [ 254.696729][T13955] loop1: detected capacity change from 0 to 2048 [ 254.712104][T13955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 254.738186][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 254.869722][T13975] loop4: detected capacity change from 0 to 128 [ 254.897534][T13975] bio_check_eod: 119 callbacks suppressed [ 254.897583][T13975] syz.4.3388: attempt to access beyond end of device [ 254.897583][T13975] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 254.930112][T13966] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.979736][T13975] syz.4.3388: attempt to access beyond end of device [ 254.979736][T13975] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 254.990994][T13966] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 254.993893][T13975] buffer_io_error: 77 callbacks suppressed [ 254.993912][T13975] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 255.006742][T13966] EXT4-fs (loop1): This should not happen!! Data will be lost [ 255.006742][T13966] [ 255.031582][T13966] EXT4-fs (loop1): Total free blocks count 0 [ 255.037679][T13966] EXT4-fs (loop1): Free/Dirty block details [ 255.043960][T13966] EXT4-fs (loop1): free_blocks=2415919104 [ 255.049987][T13966] EXT4-fs (loop1): dirty_blocks=2720 [ 255.055499][T13966] EXT4-fs (loop1): Block reservation details [ 255.061709][T13966] EXT4-fs (loop1): i_reserved_data_blocks=170 [ 255.062077][T13975] syz.4.3388: attempt to access beyond end of device [ 255.062077][T13975] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 255.081354][T13975] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 255.107717][T13983] netlink: 'syz.3.3393': attribute type 1 has an invalid length. [ 255.116805][ T2525] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.140467][T13975] syz.4.3388: attempt to access beyond end of device [ 255.140467][T13975] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 255.156335][T13983] loop3: detected capacity change from 0 to 128 [ 255.182823][ T2525] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.191671][T13987] sctp: [Deprecated]: syz.1.3385 (pid 13987) Use of int in maxseg socket option. [ 255.191671][T13987] Use struct sctp_assoc_value instead [ 255.208676][T13983] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 255.223420][T13975] syz.4.3388: attempt to access beyond end of device [ 255.223420][T13975] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 255.237106][T13975] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 255.246069][T13983] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.284783][ T2525] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.295473][T11874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.314499][T13975] syz.4.3388: attempt to access beyond end of device [ 255.314499][T13975] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 255.328158][T13975] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 255.347875][T13975] syz.4.3388: attempt to access beyond end of device [ 255.347875][T13975] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 255.371312][T13997] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 255.382922][ T2525] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.397419][T13997] SELinux: failed to load policy [ 255.403917][T13975] syz.4.3388: attempt to access beyond end of device [ 255.403917][T13975] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 255.423806][T13975] syz.4.3388: attempt to access beyond end of device [ 255.423806][T13975] loop4: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 255.437416][T13975] Buffer I/O error on dev loop4, logical block 91, lost async page write [ 255.483825][T13975] syz.4.3388: attempt to access beyond end of device [ 255.483825][T13975] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 255.497868][T13975] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 255.532900][T13975] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 255.544961][ T110] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 255.560239][T13975] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 255.569734][T13975] Buffer I/O error on dev loop4, logical block 107, lost async page write [ 255.578563][T13975] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 255.658305][T14006] loop1: detected capacity change from 0 to 1024 [ 255.665540][T14006] EXT4-fs: Ignoring removed orlov option [ 255.680081][T14006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.707578][T14011] loop3: detected capacity change from 0 to 1024 [ 255.723336][T14011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.736079][T14014] __nla_validate_parse: 2 callbacks suppressed [ 255.736123][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3397'. [ 255.752528][T14011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.772244][ T2525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.786672][ T2525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.791310][T14017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3399'. [ 255.805995][ T2525] bond0 (unregistering): Released all slaves [ 255.823225][T13981] chnl_net:caif_netlink_parms(): no params data found [ 255.830633][T14017] loop3: detected capacity change from 0 to 2048 [ 255.872560][ T2525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.880206][ T2525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.896271][ T2525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.897264][T14017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 255.918319][ T2525] veth1_macvtap: left promiscuous mode [ 255.924013][ T2525] veth0_macvtap: left promiscuous mode [ 255.961655][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.979065][T14024] loop2: detected capacity change from 0 to 128 [ 256.004735][ T2525] team0 (unregistering): Port device team_slave_1 removed [ 256.016006][T14027] loop4: detected capacity change from 0 to 512 [ 256.028818][ T2525] team0 (unregistering): Port device team_slave_0 removed [ 256.029388][T14024] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 256.037730][T14027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 256.051766][T14024] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.105278][T14025] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 256.129505][T14027] EXT4-fs (loop4): 1 truncate cleaned up [ 256.131301][T14025] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 748 with error 28 [ 256.148289][T14025] EXT4-fs (loop3): This should not happen!! Data will be lost [ 256.148289][T14025] [ 256.154799][T14027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.158038][T14025] EXT4-fs (loop3): Total free blocks count 0 [ 256.176545][T14025] EXT4-fs (loop3): Free/Dirty block details [ 256.182773][T14025] EXT4-fs (loop3): free_blocks=2415919104 [ 256.188524][T14025] EXT4-fs (loop3): dirty_blocks=752 [ 256.193911][T14025] EXT4-fs (loop3): Block reservation details [ 256.200162][T14025] EXT4-fs (loop3): i_reserved_data_blocks=47 [ 256.232015][T12419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.266688][T12651] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.299257][T14025] sctp: [Deprecated]: syz.3.3399 (pid 14025) Use of int in maxseg socket option. [ 256.299257][T14025] Use struct sctp_assoc_value instead [ 256.314507][T13981] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.321915][T13981] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.337721][T14044] loop1: detected capacity change from 0 to 128 [ 256.340381][T13981] bridge_slave_0: entered allmulticast mode [ 256.353984][T13981] bridge_slave_0: entered promiscuous mode [ 256.367544][T13981] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.374871][T13981] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.382680][T13981] bridge_slave_1: entered allmulticast mode [ 256.389422][T13981] bridge_slave_1: entered promiscuous mode [ 256.413578][T14044] netlink: 'syz.1.3406': attribute type 4 has an invalid length. [ 256.423057][T13981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.438618][T13981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.464592][T13981] team0: Port device team_slave_0 added [ 256.475104][T13981] team0: Port device team_slave_1 added [ 256.542716][T13981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.549933][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.576429][T13981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.605180][T13981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.612304][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.638663][T13981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.680205][T14053] loop1: detected capacity change from 0 to 128 [ 256.693157][ T3437] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 256.721031][T13981] hsr_slave_0: entered promiscuous mode [ 256.739289][T13981] hsr_slave_1: entered promiscuous mode [ 256.757536][T13981] debugfs: 'hsr0' already exists in 'hsr' [ 256.763525][T13981] Cannot create hsr debugfs directory [ 256.787451][T14053] netlink: 'syz.1.3408': attribute type 4 has an invalid length. [ 256.979206][T14063] loop1: detected capacity change from 0 to 512 [ 257.014496][T14063] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 257.014628][T14065] loop3: detected capacity change from 0 to 1024 [ 257.051345][T14063] EXT4-fs (loop1): 1 truncate cleaned up [ 257.067773][T14065] EXT4-fs: Ignoring removed orlov option [ 257.074457][T14063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.162038][T14065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.164266][T13981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.186870][T13981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.202180][T13981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.219901][T13981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.227803][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.277645][T13981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.313250][T13981] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.335935][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.343459][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.359114][T14082] loop1: detected capacity change from 0 to 128 [ 257.391260][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.398532][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.429590][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 257.429682][ T29] audit: type=1326 audit(1759218117.084:25101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.430884][T14082] netlink: 'syz.1.3416': attribute type 4 has an invalid length. [ 257.449579][ T29] audit: type=1326 audit(1759218117.084:25102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.491571][ T29] audit: type=1326 audit(1759218117.094:25103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.515404][ T29] audit: type=1326 audit(1759218117.094:25104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.539437][ T29] audit: type=1326 audit(1759218117.094:25105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.563515][ T29] audit: type=1326 audit(1759218117.094:25106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.625500][T13981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.633724][T14090] loop4: detected capacity change from 0 to 128 [ 257.671303][ T29] audit: type=1326 audit(1759218117.184:25107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.695431][ T29] audit: type=1326 audit(1759218117.184:25108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.701593][T14090] netlink: 'syz.4.3417': attribute type 4 has an invalid length. [ 257.719469][ T29] audit: type=1326 audit(1759218117.194:25109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.751900][ T29] audit: type=1326 audit(1759218117.194:25110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14081 comm="syz.1.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b80feec9 code=0x7ffc0000 [ 257.790576][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.847718][T13981] veth0_vlan: entered promiscuous mode [ 257.874222][T13981] veth1_vlan: entered promiscuous mode [ 257.908825][T13981] veth0_macvtap: entered promiscuous mode [ 257.933404][T13981] veth1_macvtap: entered promiscuous mode [ 257.941215][T14110] loop1: detected capacity change from 0 to 128 [ 257.959358][T13981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.974728][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 258.006114][T13981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.018002][T14110] netlink: 'syz.1.3422': attribute type 4 has an invalid length. [ 258.038855][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.068786][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.084959][T14123] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 258.090624][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.099915][T14123] SELinux: failed to load policy [ 258.124351][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.179588][T14134] loop1: detected capacity change from 0 to 1024 [ 258.192375][T14134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.206242][T14134] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.275702][T14151] loop2: detected capacity change from 0 to 128 [ 258.514189][T14158] loop2: detected capacity change from 0 to 1024 [ 258.521064][T14158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.527887][T14158] ext4: Unknown parameter 'smackfshat' [ 258.537380][T14158] net_ratelimit: 192 callbacks suppressed [ 258.537458][T14158] netlink: zone id is out of range [ 258.548838][T14158] netlink: zone id is out of range [ 258.554001][T14158] netlink: zone id is out of range [ 258.559123][T14158] netlink: zone id is out of range [ 258.564275][T14158] netlink: zone id is out of range [ 258.569482][T14161] loop4: detected capacity change from 0 to 1024 [ 258.569500][T14158] netlink: zone id is out of range [ 258.581508][T14158] netlink: zone id is out of range [ 258.584763][T14161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.586636][T14158] netlink: zone id is out of range [ 258.598775][T14158] netlink: zone id is out of range [ 258.600669][T14161] ext4: Unknown parameter 'smackfshat' [ 258.604103][T14158] netlink: zone id is out of range [ 258.834433][T14168] loop1: detected capacity change from 0 to 1024 [ 258.843243][T14168] EXT4-fs: Ignoring removed orlov option [ 258.853294][T14168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.058048][T14174] netlink: 'syz.0.3442': attribute type 4 has an invalid length. [ 259.069309][T14179] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3443'. [ 259.122834][T12252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.162820][T14184] netlink: 'syz.3.3446': attribute type 1 has an invalid length. [ 259.170657][T14184] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3446'. [ 259.190891][T14185] loop1: detected capacity change from 0 to 1024 [ 259.202525][T14184] loop3: detected capacity change from 0 to 128 [ 259.210468][T14185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.226186][T14184] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 259.230319][T14185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.249432][T14184] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.323229][T11874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.385687][T14203] SELinux: policydb version -1518004180 does not match my version range 15-35 [ 259.396420][T14203] SELinux: failed to load policy [ 259.443254][T14210] loop4: detected capacity change from 0 to 512 [ 259.460779][T14210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 259.477063][T14210] EXT4-fs (loop4): 1 truncate cleaned up [ 259.484104][T14210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.540048][T12419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.553652][T14217] loop3: detected capacity change from 0 to 1024 [ 259.560675][T14217] EXT4-fs: Ignoring removed orlov option [ 259.584240][T14217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.611822][T14222] loop4: detected capacity change from 0 to 128 [ 259.707837][T14222] netlink: 'syz.4.3458': attribute type 4 has an invalid length. [ 259.741131][T14231] loop2: detected capacity change from 0 to 1024 [ 259.762243][T14231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.778168][T14231] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.800173][T11874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.838672][T14238] netlink: 'syz.3.3462': attribute type 1 has an invalid length. [ 259.846999][T14238] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3462'. [ 259.849681][T14242] loop4: detected capacity change from 0 to 512 [ 259.861115][T14238] loop3: detected capacity change from 0 to 128 [ 259.873190][T14238] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 259.888378][T14238] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.901447][T14242] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3465: bad orphan inode 11862016 [ 259.913106][T14242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 259.918285][T14248] loop2: detected capacity change from 0 to 128 [ 259.929074][T14242] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.937090][T14248] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 259.956139][T14248] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.981225][T11874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.003210][T12651] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.021340][T14250] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.3465: corrupted inode contents [ 260.034981][T14250] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.3465: mark_inode_dirty error [ 260.047150][T14250] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.3465: corrupted inode contents [ 260.061254][T14250] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.3465: mark_inode_dirty error [ 260.077594][T14250] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.3465: mark inode dirty (error -117) [ 260.091793][T14250] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 260.117949][T12419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 260.189741][T14264] loop3: detected capacity change from 0 to 1024 [ 260.197059][T14264] EXT4-fs: Ignoring removed orlov option [ 260.221194][T14264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.227845][T14271] loop2: detected capacity change from 0 to 1024 [ 260.256932][T14271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.283534][T14277] loop4: detected capacity change from 0 to 1024 [ 260.291289][T14277] EXT4-fs: Ignoring removed orlov option [ 260.298645][T14271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.315455][T14277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.337657][T14281] loop1: detected capacity change from 0 to 512 [ 260.345094][T14281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 260.376980][T14285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3479'. [ 260.396065][T14285] loop2: detected capacity change from 0 to 2048 [ 260.411638][T14281] EXT4-fs (loop1): 1 truncate cleaned up [ 260.418517][T14281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.556303][T14293] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 260.575854][T14293] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1120 with error 28 [ 260.588820][T14293] EXT4-fs (loop2): This should not happen!! Data will be lost [ 260.588820][T14293] [ 260.598986][T14293] EXT4-fs (loop2): Total free blocks count 0 [ 260.605625][T14293] EXT4-fs (loop2): Free/Dirty block details [ 260.611900][T14293] EXT4-fs (loop2): free_blocks=2415919104 [ 260.617664][T14293] EXT4-fs (loop2): dirty_blocks=1136 [ 260.623016][T14293] EXT4-fs (loop2): Block reservation details [ 260.629161][T14293] EXT4-fs (loop2): i_reserved_data_blocks=71 [ 260.726159][T14293] sctp: [Deprecated]: syz.2.3479 (pid 14293) Use of int in maxseg socket option. [ 260.726159][T14293] Use struct sctp_assoc_value instead [ 260.777919][T14318] loop4: detected capacity change from 0 to 1024 [ 260.784698][T14318] EXT4-fs: Ignoring removed orlov option [ 260.915885][T14318] ================================================================== [ 260.924436][T14318] BUG: KCSAN: data-race in filemap_read / filemap_read [ 260.931478][T14318] [ 260.933822][T14318] read to 0xffff8881045a2fa8 of 8 bytes by task 14323 on cpu 1: [ 260.941712][T14318] filemap_read+0x6f/0xa00 [ 260.946243][T14318] generic_file_read_iter+0x79/0x330 [ 260.951748][T14318] ext4_file_read_iter+0x1cc/0x290 [ 260.956992][T14318] copy_splice_read+0x442/0x660 [ 260.961871][T14318] splice_direct_to_actor+0x290/0x680 [ 260.967384][T14318] do_splice_direct+0xda/0x150 [ 260.972359][T14318] do_sendfile+0x380/0x650 [ 260.976907][T14318] __x64_sys_sendfile64+0x105/0x150 [ 260.982146][T14318] x64_sys_call+0x2bb0/0x2ff0 [ 260.986945][T14318] do_syscall_64+0xd2/0x200 [ 260.991671][T14318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.997943][T14318] [ 261.000364][T14318] write to 0xffff8881045a2fa8 of 8 bytes by task 14318 on cpu 0: [ 261.008810][T14318] filemap_read+0x974/0xa00 [ 261.013331][T14318] generic_file_read_iter+0x79/0x330 [ 261.018715][T14318] ext4_file_read_iter+0x1cc/0x290 [ 261.023946][T14318] copy_splice_read+0x442/0x660 [ 261.028897][T14318] splice_direct_to_actor+0x290/0x680 [ 261.034441][T14318] do_splice_direct+0xda/0x150 [ 261.039326][T14318] do_sendfile+0x380/0x650 [ 261.043775][T14318] __x64_sys_sendfile64+0x105/0x150 [ 261.049166][T14318] x64_sys_call+0x2bb0/0x2ff0 [ 261.053947][T14318] do_syscall_64+0xd2/0x200 [ 261.058490][T14318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.064533][T14318] [ 261.067049][T14318] value changed: 0x0000000000000260 -> 0x0000000000000261 [ 261.074341][T14318] [ 261.076678][T14318] Reported by Kernel Concurrency Sanitizer on: [ 261.082923][T14318] CPU: 0 UID: 0 PID: 14318 Comm: syz.4.3491 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 261.094529][T14318] Tainted: [W]=WARN [ 261.098447][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.108700][T14318] ================================================================== [ 261.227754][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 261.240339][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 261.240339][ T37]