last executing test programs: 2.191222093s ago: executing program 1 (id=2132): io_uring_setup(0x1318, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000380)={0x2, 0x400, 0x1f, &(0x7f0000000280)=""/31}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r5, 0x1) r6 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000340)='syz0\x00', 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x18, 0x4, &(0x7f00000192c0)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r8, 0x0, 0x1000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=f']) 2.137441497s ago: executing program 1 (id=2134): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(0xffffffffffffffff, 0x4002, 0x0, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[]) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) socket$inet_udp(0x2, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x9d}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983d}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x61c2d723f9ae2f8a, 0x84) 1.765582287s ago: executing program 0 (id=2137): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) sendto$inet6(r0, &(0x7f0000000a40)="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", 0x595, 0x4000804, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/keys\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000480)=[r2, r3, r3], 0x3) socket(0x18, 0x1, 0x7fffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r4}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000880)={0xffffffffffffffff, 0x121, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x11b0, 0x0, 0x0, 0x7400}, 0x44804) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.764587297s ago: executing program 0 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.661229705s ago: executing program 0 (id=2149): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socket$rxrpc(0x21, 0x2, 0xa) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x958}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x52}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@grpid}]}, 0x4, 0x46a, &(0x7f00000009c0)="$eJzs28trXFUYAPDv3iR918ZaH32o0SoGH5M2bbULN4qCCwXBTV3GJC2100aaCLYUrSJ1KQXBpbgU/Atc6UbUleBW91Io0o3V1ZU7c28zGSeTRye5beb3g8mccx9zznfPPXfOvScTQN8ayf8kETsi4veI2NXMLtxgpPl288alyX9uXJpMIsve+itpbPf3jUuT5ablftuLzGgakX6axP4O5c5euHhmol6fPl/kx+bOvjc2e+Hic6fPTpyaPjV9bvz48aNHDr/w/PixnsR5b17XfR/OHNj72ttX35g8cfWdn79Nyvjb4uiRkW4rn8yyHhdXrZ0t6WRwGTsMrGFlWLa8GfLmGmr0/10xEPONtyte/aTSygFrKisssvpyBmxgSVRdA6Aa5Rd9fv9bvtZv9FG96y81b4DyuG8Wr+aawUiLbYba7m97aSQiTlz+96v8FWvzHAIAYIHv8/HPs53Gf2k80LLdPbG5MTc0XMyl7I6I+yJiT0TcH9HY9sGIeKhTIV0mBNonSf4//kmvrT66peXjvxeLua2F479y9BfDA0VuZyP+Y2lEffpQ45hEjMbQ5pOn69OHu5Txwyu/fb7YutbxX/7Kyy/HgkU9rg1uXrjP1MTcxO3E3Or6xxH7BjvFn9yaCUgiYm9E7FtlGaef/ubAYuuWjr+L5cwzLSH7OuKpZvtfjrb4S0n3+cmxLfn5MJafBYc6lvHLr1feXKz824q/B/L239bx/L8V/3DSOl87u5JPb/buK398tug9TW1V5//8gk3F+wcTc3PnD0dsSl5vVrp1+fj8vmW+3D6Pf/Rg5/6/O+aPxP6IyE/ihyPikYh4tIjusYh4PCIOdjkKP738xLvdjlDn+Ld0+cTeyeOfamv/tmtyW/vPJzZF+5LOiYEzP3638BOXE38pb/+jjdRosaRx/fuye1zLqddKz2YAAAC4W6URsSOStHYrnaa1WvN/+PfEtrQ+Mzv3zMmZ989NNX8jMBxDafmkq/k8eCgpn38Ot+TH2/JHiufGXwxsbeRrkzP1qaqDhz63vbX/l498a823P/1GAza+HsyjAXcp/R/6l/4P/Uv/h/7Vof9vraIewPrr9P3/UQX1ANZfW/837Qd9xP0/9K/ByJKq6wBUo/X734UA+sbs1lj6R/IbIZFlWXYHVGPjJCK9I6rRm0Syxr1gR9UBrjxR9ZUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN/4LAAD//yd065c=") 1.596160341s ago: executing program 3 (id=2140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000), &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340), &(0x7f0000000300)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB="0000645fb7e300000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") 1.356122091s ago: executing program 3 (id=2142): io_uring_setup(0x1318, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000380)={0x2, 0x400, 0x1f, &(0x7f0000000280)=""/31}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r5, 0x1) r6 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000340)='syz0\x00', 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x18, 0x4, &(0x7f00000192c0)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r8, 0x0, 0x1000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=f']) 1.225273351s ago: executing program 1 (id=2143): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000500)="dd788cd6c1efae51a4217a622821e639485c1aa91e182e3a98dd454cc1769e97de9e3c8b98670955cc57149a2ad34ef17bc4227bf3834b42051aa56d1ada5d987e66601e527c6eb8295459a76b6d25813924691f680224f138cca964e8c9be6787a1838441d8689432912b88669b353750644aaef19b6e6b0af65997f261420fed", 0x81, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 1.167692186s ago: executing program 0 (id=2144): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 1.133601339s ago: executing program 3 (id=2145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = getpid() syz_pidfd_open(r2, 0x0) 1.042084416s ago: executing program 1 (id=2147): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x8000009, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) 1.040678256s ago: executing program 3 (id=2148): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x1, 0x1000, r0, 0xffffffffffffffff}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0xd, 0x80, 0xca, 0x7}, {0x9, 0xd, 0xbe, 0xce}, {0x4, 0x8, 0x7, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa5400008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd6b}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) timerfd_create(0x7, 0x0) 1.0010045s ago: executing program 1 (id=2150): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='[\xd2,\x14\xc7Nx\\+\xc1\x941]7\xf5\xf8( \xa6\x85\x8dcU(\xd8I \xcdlYGg\x10\xbca\xb4\xd7\xeex\xac\x88\xde\xcd}m\xc2\x14\xd5\x05\xc3!\xe3\xe6\xdf\xb9\x124L!\xbfk\xb2I\xf3\xc8\xa7\x8fi\xc7\xa7t\x19\x02Uc\xb3$^\x9f[\xf7c\x19\xd3\xd6\xf6\x02\xab}\x82RE\xf1\x14\x85(\xb3\xd8C\x1deJ\b/a\xd8\xe4h\xb3\xe1\x1bd\xc4\x97.8\x97\xb9\xe2\x1eV\x04\x1d\xb3\xa0\x89\x7f\x14\x8bq}\x84E\v\xb9[\x9c\x8e\x90\r5\x99\xf9\x93h\xa5\xdc\xd0\x9a\xaf\f\xb1\x03\x84\xc0\xcb\xa0\xd2\x93\xa1\xdb\xe3X\xb6\x9a\xf7s\x00\x9by\xc7\x87x!\xe9\xbd\ba\xc8\xac\x92\xb7\xa8\\1t\xd6\x16\xdcj\xf5\xdb\xec\x83d\x80\npP9\xa7\xdc{O\x03N\x17\xe4YV(\xacYVz}E\x18\xbe\t%\x1fl\xf2(\x01\xc6V\xa4\xd3\xbb\x0e\xf3<\xfaA\xa1#\xd9\x03vdE\xb1\"\xd6@\xa9c\xcb,\xc8Ez.=r\x9b$z\xdf\xdc=\x7f\x87\x81\x13\xbe\xe4\xe6\x88\x1d\xae\xf17\x01\xd8~ \x03\'+\xb1\xef]0\r\xeak\x88\xfa\x0e\xf30O\x9ep\xcc\xb3\xc1&\xa8\xf6\b%\xa2\x0fz\xdd\b\xe0\xe5P\xb2U\xb8\x13_9\xfac[\x8e,jH{\x0f\x11\xb7\xa6\x97P\x93h7\x03\xa5r\xee}\xe5\xc3\xf9o\xf2\xfafX\xfc\xe9P\x84\x91u\xa6$> \x1b\x0e\xf5\xd5e\xd4\xd0\xe8\x98\x03\x7f\xdb*\xc8\xc8\xda/\xad\x9d;\x11\xb5\x91\xddI\xddvz', &(0x7f00000002c0)='\x02f\x00\x00\x8f]\fdRs\xf9\xacb\x01\x01\xe4\x100\xf4\xd7\x03\x92\x1c\xe7}\xaf\xfc\xcf*\xf6*\xa4\xc4\x87n \xfe\x19\xf4\xb7\x9e\xfe\xb6\x86D', 0x0) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000040)="aa1d484ea0000000b7fc08fcd111fbd723ea32db040021d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb889311002e9fdf229515b6c60000000006e43f77103a22e2f2ccd803f12f907864010101ac1414aa00004ea701ef8ac48eb41c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_io_uring_setup(0x5416, &(0x7f0000002540)={0x0, 0x92d5, 0x1, 0x1, 0x288}, &(0x7f0000000280), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r8, 0x21, &(0x7f00000025c0)={0x0, 0x30ae, 0x10, 0x2, 0x15d}, 0x1) 854.512421ms ago: executing program 3 (id=2151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}, {0x21, 0x2, 0x40, 0x9}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRESOCT=r0, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='ext4_ext_remove_space_done\x00', r6, 0x0, 0x400}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = gettid() r8 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r8, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000300)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x67, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) 849.930722ms ago: executing program 0 (id=2152): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) 785.891877ms ago: executing program 0 (id=2154): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(0xffffffffffffffff, 0x4002, 0x0, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[]) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) socket$inet_udp(0x2, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x9d}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983d}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x61c2d723f9ae2f8a, 0x84) 450.039684ms ago: executing program 2 (id=2158): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="20de050000000000800000000200", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000060000000700000000000000"], 0x38, 0x8000}, 0x24045804) r1 = syz_io_uring_setup(0x639b, &(0x7f00000002c0)={0x0, 0xca49, 0x200, 0x3, 0x5b}, &(0x7f00000001c0), &(0x7f00000000c0)) syz_io_uring_setup(0x23b7, &(0x7f0000000240)={0x0, 0x287e, 0x1, 0x3, 0xaf, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000000)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) capset(0x0, 0x0) r3 = dup(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0xe0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000040)='./file1\x00', 0x16000715) write$binfmt_elf64(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4603040000ff7f08000000000002003e00ecffffff98030000000000004000000000000000560000000000000007000000100038000100000002000000030000000500000004000000000000000d20000000400023c8010000000000000c0000000000000004000000000000000400000000000000cbbafddcc7319cea8e1e6b2fb7710376fad5021ecfb9d283f677add1ad5942b53641eb854f91173fa3b44d7089d7435f58e9b482e2543610ed"], 0x78) close(r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r13}, 0x10) 383.498419ms ago: executing program 2 (id=2159): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000500)="dd788cd6c1efae51a4217a622821e639485c1aa91e182e3a98dd454cc1769e97de9e3c8b98670955cc57149a2ad34ef17bc4227bf3834b42051aa56d1ada5d987e66601e527c6eb8295459a76b6d25813924691f680224f138cca964e8c9be6787a1838441d8689432912b88669b353750644aaef19b6e6b0af65997f261420fed", 0x81, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 363.271041ms ago: executing program 4 (id=2160): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) setresuid(0x0, 0xffffffffffffffff, 0xee00) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r0, 0x0, 0x25, 0x7, @val=@kprobe_multi=@syms={0x0, 0x8, &(0x7f0000000680)=[&(0x7f0000000180)='cachefiles_ondemand_close\x00', &(0x7f0000000280)='\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)='\x118\xabk\x02Wh\x80\x96~\x87\xb3\xca\xd7\xfd\x8cL`\xba\xf1-\xea\xa7\x021\xceE#\xa2\xe9\r6\x82\xdc)\xe9\xd8z\f\x90\x8a-c\x91OO\f\x02p\x06#\xf8\b\xafE\\\x04x\r\x02<\x1fn\x83\xeb\xe9\xa8\r\x02r\n\x80\xb9#\xb6c(\xf1\xad\xb9\'\xefR\xf1|/\f\xe2X\x9a\x93q\xef\xcf\xb6\x12\xfd\x9e2\x15x\x9bQ[?', &(0x7f0000000500)='kfree\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='@+[#T-/&^\x95\x00'], 0x0, 0x3}}, 0x30) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='cachefiles_ondemand_close\x00', r3}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x5, &(0x7f0000000240)={0x0, 0x0, 0xeffc, 0x360}, 0x8, 0x9, 0x1, 0x0, 0x0, 0x101, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88"], 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x4}, {0x2, 0x3, 0xee01}, {0x2, 0x6}, {0x2, 0x0, 0xee00}, {0x2, 0xc}, {}], {0x4, 0x2}, [{0x8, 0x3}, {0x8, 0x3, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x6c, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 320.649925ms ago: executing program 2 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000240)=0x1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 312.895595ms ago: executing program 4 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x278, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_BEARER={0x1ac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1420000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @empty, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 257.69783ms ago: executing program 2 (id=2163): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 257.17356ms ago: executing program 4 (id=2164): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x1, 0x1000, r0, 0xffffffffffffffff}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0xd, 0x80, 0xca, 0x7}, {0x9, 0xd, 0xbe, 0xce}, {0x4, 0x8, 0x7, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa5400008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd6b}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) timerfd_create(0x7, 0x0) 176.457156ms ago: executing program 4 (id=2165): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="676da5b44e58190b27b9903900"/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1000040000000000009a6a4000000000005e205fbbeb2173a2a2000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'ip6gretap0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x32000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802) r11 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2804, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$TUNGETVNETLE(r14, 0x800454dd, &(0x7f00000002c0)) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r11, 0x7a98, 0xb816, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) 145.161989ms ago: executing program 1 (id=2166): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f00000003c0)=""/195, 0xc3, 0x0, &(0x7f0000000580)=""/132, 0x84}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@oldalloc}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r9, r6, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 123.119041ms ago: executing program 2 (id=2167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x80000000000}, 0x18) lsm_get_self_attr(0x67, &(0x7f0000000140)={0x0, 0x0, 0xaf, 0x8f, ""/143}, &(0x7f00000000c0)=0xaf, 0x0) 59.678116ms ago: executing program 2 (id=2168): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(0xffffffffffffffff, 0x4002, 0x0, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[]) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) socket$inet_udp(0x2, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x9d}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r6, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983d}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x61c2d723f9ae2f8a, 0x84) 58.795076ms ago: executing program 4 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = getpid() syz_pidfd_open(r2, 0x0) 39.425478ms ago: executing program 4 (id=2170): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000500)="dd788cd6c1efae51a4217a622821e639485c1aa91e182e3a98dd454cc1769e97de9e3c8b98670955cc57149a2ad34ef17bc4227bf3834b42051aa56d1ada5d987e66601e527c6eb8295459a76b6d25813924691f680224f138cca964e8c9be6787a1838441d8689432912b88669b353750644aaef19b6e6b0af65997f261420fed", 0x81, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 0s ago: executing program 3 (id=2171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) kernel console output (not intermixed with test programs): 000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 137.720144][ T7146] loop1: detected capacity change from 0 to 128 [ 137.780042][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.780042][ T7146] loop1: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 137.793838][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.793838][ T7146] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 137.836994][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.836994][ T7146] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 137.853410][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.853410][ T7146] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 137.867238][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.867238][ T7146] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 137.878467][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 137.881028][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.881028][ T7146] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 137.903621][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.903621][ T7146] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 137.917340][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.917340][ T7146] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 137.917398][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.917398][ T7146] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 137.917472][ T7146] syz.1.1285: attempt to access beyond end of device [ 137.917472][ T7146] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 138.255545][ T7163] 9pnet_fd: Insufficient options for proto=fd [ 138.279823][ T7163] 9pnet_fd: Insufficient options for proto=fd [ 138.290398][ T7164] sctp: [Deprecated]: syz.4.1289 (pid 7164) Use of int in max_burst socket option. [ 138.290398][ T7164] Use struct sctp_assoc_value instead [ 138.723935][ T7168] netlink: 'syz.0.1291': attribute type 1 has an invalid length. [ 138.739174][ T7185] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 138.739174][ T7185] program syz.1.1294 not setting count and/or reply_len properly [ 138.741675][ T7168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.774693][ T7181] vhci_hcd: invalid port number 224 [ 138.782335][ T7185] pimreg: entered allmulticast mode [ 138.850072][ T7185] pimreg: left allmulticast mode [ 139.012025][ T7200] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.012025][ T7200] program syz.2.1299 not setting count and/or reply_len properly [ 139.040422][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 139.052857][ T7200] pimreg: entered allmulticast mode [ 139.060208][ T7200] pimreg: left allmulticast mode [ 139.971361][ T7221] vhci_hcd: invalid port number 224 [ 140.266943][ T7219] netlink: 'syz.1.1308': attribute type 1 has an invalid length. [ 140.446837][ T7219] 8021q: adding VLAN 0 to HW filter on device bond10 [ 140.637663][ T7247] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1315'. [ 140.909907][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1321'. [ 141.051995][ T7264] 9pnet: Could not find request transport: f [ 141.094244][ T7268] vhci_hcd: invalid port number 224 [ 141.117503][ T7275] loop2: detected capacity change from 0 to 512 [ 141.134286][ T7275] EXT4-fs: Ignoring removed oldalloc option [ 141.160079][ T7275] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.173230][ T7275] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.236332][ T7275] EXT4-fs (loop2): 1 truncate cleaned up [ 141.243789][ T7275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.366071][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.394337][ T7288] sctp: [Deprecated]: syz.4.1329 (pid 7288) Use of int in max_burst socket option. [ 141.394337][ T7288] Use struct sctp_assoc_value instead [ 141.406811][ T7291] 9pnet_fd: Insufficient options for proto=fd [ 141.415574][ T7292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1333'. [ 141.435448][ T7291] 9pnet_fd: Insufficient options for proto=fd [ 141.790721][ T7306] 9pnet: Could not find request transport: f [ 142.002855][ T7347] syzkaller0: Caught tx_queue_len zero misconfig [ 142.085010][ T7352] loop0: detected capacity change from 0 to 512 [ 142.102140][ T7352] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.171948][ T7352] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 142.179610][ T7352] FAT-fs (loop0): Filesystem has been set read-only [ 142.273920][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 142.273934][ T29] audit: type=1326 audit(1756065244.299:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.307129][ T29] audit: type=1326 audit(1756065244.339:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.331234][ T29] audit: type=1326 audit(1756065244.339:7633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.355704][ T29] audit: type=1326 audit(1756065244.379:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.379059][ T29] audit: type=1326 audit(1756065244.379:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.402574][ T29] audit: type=1326 audit(1756065244.379:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.428876][ T29] audit: type=1326 audit(1756065244.389:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.452404][ T29] audit: type=1326 audit(1756065244.389:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.475924][ T29] audit: type=1326 audit(1756065244.389:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 142.499455][ T29] audit: type=1326 audit(1756065244.389:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.0.1348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x0 [ 142.758631][ T7365] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 142.758631][ T7365] program syz.4.1346 not setting count and/or reply_len properly [ 142.799232][ T7365] pimreg: entered allmulticast mode [ 142.805590][ T7365] pimreg: left allmulticast mode [ 142.889584][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1352'. [ 142.909279][ T7367] vhci_hcd: invalid port number 224 [ 143.050060][ T7380] loop1: detected capacity change from 0 to 1024 [ 143.067597][ T7385] loop3: detected capacity change from 0 to 512 [ 143.074599][ T7385] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.122947][ T7380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.143323][ T7380] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.165514][ T7380] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.1356: lblock 1 mapped to illegal pblock 1 (length 15) [ 143.206277][ T7385] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 143.213834][ T7385] FAT-fs (loop3): Filesystem has been set read-only [ 143.249312][ T7380] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1356: Freeing blocks not in datazone - block = 1, count = 3 [ 143.289141][ T7380] sctp: [Deprecated]: syz.1.1356 (pid 7380) Use of int in max_burst socket option. [ 143.289141][ T7380] Use struct sctp_assoc_value instead [ 143.320389][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.472763][ T7402] vhci_hcd: invalid port number 224 [ 143.565320][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1365'. [ 143.664618][ T7412] vhci_hcd: invalid port number 224 [ 143.987168][ T7426] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1371'. [ 144.029574][ T7430] loop0: detected capacity change from 0 to 1024 [ 144.053298][ T7433] 9pnet_fd: Insufficient options for proto=fd [ 144.062214][ T7433] 9pnet_fd: Insufficient options for proto=fd [ 144.089025][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1374'. [ 144.140026][ T7430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.162319][ T7430] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.177568][ T7443] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.177568][ T7443] program syz.2.1377 not setting count and/or reply_len properly [ 144.178308][ T7430] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.1373: lblock 1 mapped to illegal pblock 1 (length 15) [ 144.220523][ T7443] pimreg: entered allmulticast mode [ 144.266928][ T7443] pimreg: left allmulticast mode [ 144.310329][ T7444] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.1373: lblock 3 mapped to illegal pblock 3 (length 13) [ 144.367538][ T7444] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 144.379997][ T7430] sctp: [Deprecated]: syz.0.1373 (pid 7430) Use of int in max_burst socket option. [ 144.379997][ T7430] Use struct sctp_assoc_value instead [ 144.394614][ T7444] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.394614][ T7444] [ 144.451577][ T7329] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 144.468958][ T7329] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 144.481456][ T7329] EXT4-fs (loop0): This should not happen!! Data will be lost [ 144.481456][ T7329] [ 144.491208][ T7329] EXT4-fs (loop0): Total free blocks count 0 [ 144.497273][ T7329] EXT4-fs (loop0): Free/Dirty block details [ 144.503183][ T7329] EXT4-fs (loop0): free_blocks=4293918720 [ 144.508960][ T7329] EXT4-fs (loop0): dirty_blocks=64 [ 144.514082][ T7329] EXT4-fs (loop0): Block reservation details [ 144.521483][ T7448] vhci_hcd: invalid port number 224 [ 144.744217][ T7462] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 144.751771][ T7462] vhci_hcd: invalid port number 96 [ 144.757073][ T7462] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 144.868337][ T7465] 9pnet: Could not find request transport: f [ 144.912154][ T7471] 9pnet_fd: Insufficient options for proto=fd [ 144.937661][ T7471] 9pnet_fd: Insufficient options for proto=fd [ 144.986682][ T3378] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 144.994408][ T3378] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 145.011103][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1390'. [ 145.015432][ T3378] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 145.028618][ T3378] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 145.103395][ T7479] fido_id[7479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.148983][ T7483] netlink: 464 bytes leftover after parsing attributes in process `syz.1.1391'. [ 145.157542][ T7484] loop2: detected capacity change from 0 to 512 [ 145.171629][ T7484] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.216084][ T7484] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 145.223611][ T7484] FAT-fs (loop2): Filesystem has been set read-only [ 145.319698][ T7483] loop1: detected capacity change from 0 to 8192 [ 145.358475][ T7489] loop2: detected capacity change from 0 to 512 [ 145.379476][ T7489] EXT4-fs: Ignoring removed orlov option [ 145.396806][ T7489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.424896][ T7489] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 145.465457][ T7489] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 145.500511][ T7489] EXT4-fs (loop2): 1 orphan inode deleted [ 145.514466][ T7489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.561296][ T7489] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.699216][ T7492] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 145.879821][ T7510] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 145.879821][ T7510] program syz.3.1400 not setting count and/or reply_len properly [ 145.904280][ T7510] pimreg: entered allmulticast mode [ 145.910728][ T7510] pimreg: left allmulticast mode [ 146.170404][ T7521] loop2: detected capacity change from 0 to 1024 [ 146.199127][ T7521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.211532][ T7521] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.225252][ T7521] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.1407: lblock 1 mapped to illegal pblock 1 (length 15) [ 146.251357][ T7521] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.1407: lblock 3 mapped to illegal pblock 3 (length 13) [ 146.268453][ T7521] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 146.281118][ T7521] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.281118][ T7521] [ 146.292871][ T7521] sctp: [Deprecated]: syz.2.1407 (pid 7521) Use of int in max_burst socket option. [ 146.292871][ T7521] Use struct sctp_assoc_value instead [ 146.317741][ T7332] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 146.332699][ T7332] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 146.345158][ T7332] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.345158][ T7332] [ 146.354824][ T7332] EXT4-fs (loop2): Total free blocks count 0 [ 146.360819][ T7332] EXT4-fs (loop2): Free/Dirty block details [ 146.366738][ T7332] EXT4-fs (loop2): free_blocks=4293918720 [ 146.372514][ T7332] EXT4-fs (loop2): dirty_blocks=64 [ 146.377645][ T7332] EXT4-fs (loop2): Block reservation details [ 146.439858][ T7532] vhci_hcd: invalid port number 224 [ 146.448584][ T7534] vhci_hcd: invalid port number 224 [ 146.625480][ T7543] loop2: detected capacity change from 0 to 1024 [ 146.648962][ T7543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.661282][ T7543] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.675318][ T7543] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.1415: lblock 1 mapped to illegal pblock 1 (length 15) [ 146.707278][ T7543] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1415: Freeing blocks not in datazone - block = 1, count = 3 [ 146.724048][ T7543] sctp: [Deprecated]: syz.2.1415 (pid 7543) Use of int in max_burst socket option. [ 146.724048][ T7543] Use struct sctp_assoc_value instead [ 146.757883][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.788074][ T7551] 9pnet: Could not find request transport: f [ 146.861055][ T7558] loop3: detected capacity change from 0 to 512 [ 146.868944][ T7558] EXT4-fs: Ignoring removed oldalloc option [ 146.888077][ T7558] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.908103][ T7558] EXT4-fs (loop3): 1 truncate cleaned up [ 146.914451][ T7558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.008906][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.040817][ T7566] vhci_hcd: invalid port number 224 [ 147.079511][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1425'. [ 147.121163][ T7576] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.132767][ T7576] vhci_hcd: invalid port number 96 [ 147.138052][ T7576] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 147.161250][ T7579] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.178610][ T7579] vhci_hcd: invalid port number 96 [ 147.183792][ T7579] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 147.271350][ T7590] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 147.271350][ T7590] program syz.2.1427 not setting count and/or reply_len properly [ 147.303532][ T7590] pimreg: entered allmulticast mode [ 147.309876][ T7590] pimreg: left allmulticast mode [ 147.407004][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 147.407021][ T29] audit: type=1326 audit(1756065249.429:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.436731][ T29] audit: type=1326 audit(1756065249.429:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.460204][ T29] audit: type=1326 audit(1756065249.429:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.483673][ T29] audit: type=1326 audit(1756065249.429:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.507110][ T29] audit: type=1326 audit(1756065249.429:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.530545][ T29] audit: type=1326 audit(1756065249.429:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.554458][ T29] audit: type=1326 audit(1756065249.429:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.577955][ T29] audit: type=1326 audit(1756065249.429:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.601400][ T29] audit: type=1326 audit(1756065249.429:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.624800][ T29] audit: type=1326 audit(1756065249.429:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 147.755550][ T7594] vhci_hcd: invalid port number 224 [ 148.113382][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1439'. [ 148.125640][ T7606] vhci_hcd: invalid port number 224 [ 148.195729][ T7620] 9pnet_fd: Insufficient options for proto=fd [ 148.208192][ T7620] 9pnet_fd: Insufficient options for proto=fd [ 148.329845][ T7632] loop1: detected capacity change from 0 to 512 [ 148.338406][ T7632] EXT4-fs: Ignoring removed orlov option [ 148.359991][ T7632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.372607][ T7632] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 148.394230][ T7638] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.394230][ T7638] program syz.2.1441 not setting count and/or reply_len properly [ 148.426166][ T7638] pimreg: entered allmulticast mode [ 148.450013][ T7638] pimreg: left allmulticast mode [ 148.582997][ T7632] EXT4-fs (loop1): 1 orphan inode deleted [ 148.596571][ T7632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.659543][ T7632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.124110][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1453'. [ 149.165647][ T7653] vhci_hcd: invalid port number 224 [ 149.196980][ T7661] 9pnet_fd: Insufficient options for proto=fd [ 149.227212][ T7661] 9pnet_fd: Insufficient options for proto=fd [ 149.227898][ T7667] loop0: detected capacity change from 0 to 512 [ 149.260990][ T7667] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.312555][ T7667] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 149.320190][ T7667] FAT-fs (loop0): Filesystem has been set read-only [ 149.347164][ T7669] 9pnet: Could not find request transport: f [ 149.430788][ T7673] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.438751][ T7673] vhci_hcd: invalid port number 96 [ 149.443975][ T7673] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 149.488512][ T7692] 9pnet_fd: Insufficient options for proto=fd [ 149.514644][ T7692] 9pnet_fd: Insufficient options for proto=fd [ 149.619572][ T7702] 9pnet: Could not find request transport: f [ 149.634067][ T7705] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.652475][ T7705] vhci_hcd: invalid port number 96 [ 149.657693][ T7705] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 149.795728][ T7716] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.803241][ T7716] vhci_hcd: invalid port number 96 [ 149.808669][ T7716] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 149.871682][ T7727] 9pnet_fd: Insufficient options for proto=fd [ 149.886607][ T7727] 9pnet_fd: Insufficient options for proto=fd [ 149.948860][ T7735] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.966127][ T7735] vhci_hcd: invalid port number 96 [ 149.971298][ T7735] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 150.290957][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1494'. [ 150.418363][ T7754] 9pnet_fd: Insufficient options for proto=fd [ 150.430463][ T7754] 9pnet_fd: Insufficient options for proto=fd [ 150.579250][ T7762] lo speed is unknown, defaulting to 1000 [ 150.599640][ T7762] lo speed is unknown, defaulting to 1000 [ 150.677547][ T7765] 9pnet_fd: Insufficient options for proto=fd [ 150.696978][ T7765] 9pnet_fd: Insufficient options for proto=fd [ 151.328997][ T7779] 9pnet_fd: Insufficient options for proto=fd [ 151.438906][ T7779] 9pnet_fd: Insufficient options for proto=fd [ 151.598055][ T7794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1508'. [ 151.678638][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 151.686500][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 151.694279][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 151.707023][ T36] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 151.750284][ T7803] fido_id[7803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 151.773722][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 151.782675][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 151.816641][ T7814] 9pnet_fd: Insufficient options for proto=fd [ 151.828250][ T7807] loop3: detected capacity change from 0 to 512 [ 151.843034][ T7814] 9pnet_fd: Insufficient options for proto=fd [ 151.871089][ T7807] EXT4-fs: Ignoring removed oldalloc option [ 151.892737][ T7812] vhci_hcd: invalid port number 224 [ 151.908660][ T7807] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.987168][ T7820] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 151.994932][ T7820] vhci_hcd: invalid port number 96 [ 152.000297][ T7820] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 152.063518][ T7807] EXT4-fs (loop3): 1 truncate cleaned up [ 152.081656][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'. [ 152.096840][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1528'. [ 152.118129][ T7807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.156996][ T7835] vhci_hcd: invalid port number 224 [ 152.239456][ T7842] 9pnet_fd: Insufficient options for proto=fd [ 152.359499][ T7842] 9pnet_fd: Insufficient options for proto=fd [ 152.415995][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 152.416013][ T29] audit: type=1326 audit(1756065254.439:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.477010][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.509451][ T7857] loop0: detected capacity change from 0 to 512 [ 152.525043][ T7857] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.617333][ T7857] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 152.625042][ T7857] FAT-fs (loop0): Filesystem has been set read-only [ 152.715634][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1542'. [ 152.757703][ T29] audit: type=1326 audit(1756065254.449:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.781131][ T29] audit: type=1326 audit(1756065254.449:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.804640][ T29] audit: type=1326 audit(1756065254.449:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.828160][ T29] audit: type=1326 audit(1756065254.449:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.851643][ T29] audit: type=1326 audit(1756065254.449:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.876185][ T29] audit: type=1326 audit(1756065254.449:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.899803][ T29] audit: type=1326 audit(1756065254.449:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.923217][ T29] audit: type=1326 audit(1756065254.449:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 152.946752][ T29] audit: type=1326 audit(1756065254.449:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 153.212499][ T7884] 9pnet: Could not find request transport: f [ 153.249325][ T7896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1553'. [ 153.267912][ T7898] loop0: detected capacity change from 0 to 512 [ 153.274681][ T7898] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.297004][ T7901] loop2: detected capacity change from 0 to 512 [ 153.318562][ T7901] EXT4-fs: Ignoring removed orlov option [ 153.338582][ T7904] loop1: detected capacity change from 0 to 1024 [ 153.346417][ T7901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.371938][ T7904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.392161][ T7898] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 153.399970][ T7898] FAT-fs (loop0): Filesystem has been set read-only [ 153.413136][ T7901] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 153.423173][ T7904] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.432682][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 153.447171][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 153.456579][ T7901] EXT4-fs (loop2): 1 orphan inode deleted [ 153.462934][ T7901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.466385][ T7900] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1555'. [ 153.477282][ T7901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.519940][ T7904] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.1556: lblock 1 mapped to illegal pblock 1 (length 15) [ 153.538226][ T7904] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1556: Freeing blocks not in datazone - block = 1, count = 3 [ 153.553680][ T7904] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.1556: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.570403][ T7904] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 153.582791][ T7904] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.582791][ T7904] [ 153.596405][ T7904] sctp: [Deprecated]: syz.1.1556 (pid 7904) Use of int in max_burst socket option. [ 153.596405][ T7904] Use struct sctp_assoc_value instead [ 153.624402][ T7329] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:32: lblock 8 mapped to illegal pblock 8 (length 8) [ 153.639260][ T7329] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 153.651575][ T7329] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.651575][ T7329] [ 153.662808][ T6519] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 153.680444][ T6519] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 153.693039][ T6519] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.693039][ T6519] [ 153.702986][ T6519] EXT4-fs (loop1): Total free blocks count 0 [ 153.709084][ T6519] EXT4-fs (loop1): Free/Dirty block details [ 153.715151][ T6519] EXT4-fs (loop1): free_blocks=4293918720 [ 154.026521][ T7930] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 154.080525][ T7930] vhci_hcd: invalid port number 96 [ 154.085711][ T7930] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 154.346332][ T7938] loop0: detected capacity change from 0 to 512 [ 154.381033][ T7940] 9pnet_fd: Insufficient options for proto=fd [ 154.397051][ T7938] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.509131][ T7938] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 154.516914][ T7938] FAT-fs (loop0): Filesystem has been set read-only [ 154.527670][ T7944] __nla_validate_parse: 2 callbacks suppressed [ 154.527688][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 154.543387][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1570'. [ 154.586974][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1573'. [ 154.652517][ T3369] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 154.660377][ T3369] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 154.668932][ T3369] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 154.703614][ T3369] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 154.805329][ T7961] fido_id[7961]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.859029][ T7968] vhci_hcd: invalid port number 224 [ 154.885641][ T7972] 9pnet_fd: Insufficient options for proto=fd [ 154.894280][ T7972] 9pnet_fd: Insufficient options for proto=fd [ 154.918767][ T7974] loop1: detected capacity change from 0 to 512 [ 154.925712][ T7974] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.962737][ T7974] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 154.970303][ T7974] FAT-fs (loop1): Filesystem has been set read-only [ 155.005743][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1585'. [ 155.055758][ T7984] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.063665][ T7984] vhci_hcd: invalid port number 96 [ 155.069021][ T7984] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 155.101413][ T7988] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1589'. [ 155.174565][ T7988] loop3: detected capacity change from 0 to 8192 [ 155.320870][ T3369] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 155.328825][ T3369] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 155.340716][ T3369] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 155.359653][ T3369] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 155.415028][ T8007] loop3: detected capacity change from 0 to 512 [ 155.424047][ T8001] fido_id[8001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.441703][ T8007] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.457442][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1597'. [ 155.492423][ T8007] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 155.500065][ T8007] FAT-fs (loop3): Filesystem has been set read-only [ 155.508317][ T8011] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 155.508317][ T8011] program syz.1.1594 not setting count and/or reply_len properly [ 155.584974][ T8011] pimreg: entered allmulticast mode [ 155.595545][ T8011] pimreg: left allmulticast mode [ 155.697589][ T8026] loop2: detected capacity change from 0 to 512 [ 155.716360][ T8026] EXT4-fs: Ignoring removed orlov option [ 155.723843][ T8025] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.732231][ T8026] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.737197][ T8025] vhci_hcd: invalid port number 96 [ 155.747422][ T8025] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 155.770494][ T8026] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 155.808380][ T8026] EXT4-fs (loop2): 1 orphan inode deleted [ 155.815629][ T8026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.830872][ T8026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.001031][ T8037] sctp: [Deprecated]: syz.4.1604 (pid 8037) Use of int in max_burst socket option. [ 156.001031][ T8037] Use struct sctp_assoc_value instead [ 156.146974][ T3391] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 156.155153][ T3391] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 156.191568][ T8041] fido_id[8041]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.292179][ T8047] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.295289][ T8051] loop3: detected capacity change from 0 to 512 [ 156.300019][ T8047] vhci_hcd: invalid port number 96 [ 156.309548][ T8051] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.311357][ T8047] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 156.350878][ T8051] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 156.358559][ T8051] FAT-fs (loop3): Filesystem has been set read-only [ 156.381922][ T8053] vhci_hcd: invalid port number 224 [ 156.705217][ T8075] loop2: detected capacity change from 0 to 512 [ 156.712119][ T8075] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.771078][ T3378] hid_parser_main: 2 callbacks suppressed [ 156.771103][ T3378] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 156.784590][ T3378] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 156.796040][ T3378] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 156.811981][ T3378] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 156.872338][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1623'. [ 156.872835][ T8078] fido_id[8078]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.895170][ T8080] netlink: 'syz.2.1623': attribute type 12 has an invalid length. [ 157.000465][ T8085] loop1: detected capacity change from 0 to 512 [ 157.036789][ T8085] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.124903][ T8085] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 157.132491][ T8085] FAT-fs (loop1): Filesystem has been set read-only [ 157.427977][ T8092] 9pnet: Could not find request transport: f [ 157.428103][ T8102] loop3: detected capacity change from 0 to 1024 [ 157.490251][ T8102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.533021][ T8102] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.545969][ T8102] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.1630: lblock 1 mapped to illegal pblock 1 (length 15) [ 157.568036][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1634'. [ 157.577119][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 157.577137][ T29] audit: type=1326 audit(1756065259.599:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.607139][ T29] audit: type=1326 audit(1756065259.599:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.630919][ T29] audit: type=1326 audit(1756065259.599:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.633331][ T8102] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1630: Freeing blocks not in datazone - block = 1, count = 3 [ 157.654447][ T29] audit: type=1326 audit(1756065259.599:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.690724][ T29] audit: type=1326 audit(1756065259.599:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.714251][ T29] audit: type=1326 audit(1756065259.599:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.722172][ T8113] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1630: lblock 3 mapped to illegal pblock 3 (length 1) [ 157.737775][ T29] audit: type=1326 audit(1756065259.599:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.737813][ T29] audit: type=1326 audit(1756065259.599:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.798767][ T29] audit: type=1326 audit(1756065259.599:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.822375][ T29] audit: type=1326 audit(1756065259.599:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdb9a6debe9 code=0x7ffc0000 [ 157.872214][ T8113] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 157.884695][ T8113] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.884695][ T8113] [ 157.926412][ T8121] 9pnet_fd: Insufficient options for proto=fd [ 157.936191][ T8121] 9pnet_fd: Insufficient options for proto=fd [ 157.948569][ T8102] sctp: [Deprecated]: syz.3.1630 (pid 8102) Use of int in max_burst socket option. [ 157.948569][ T8102] Use struct sctp_assoc_value instead [ 157.979260][ T8125] loop0: detected capacity change from 0 to 512 [ 158.011453][ T7314] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 158.020680][ T8125] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.042439][ T8127] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 158.050210][ T8127] vhci_hcd: invalid port number 96 [ 158.055364][ T8127] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 158.072548][ T7314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 158.084989][ T7314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.084989][ T7314] [ 158.096459][ T8128] loop1: detected capacity change from 0 to 512 [ 158.103507][ T7314] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 158.103780][ T8128] EXT4-fs: Ignoring removed orlov option [ 158.124026][ T7314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 158.136582][ T7314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.136582][ T7314] [ 158.146256][ T7314] EXT4-fs (loop3): Total free blocks count 0 [ 158.152354][ T7314] EXT4-fs (loop3): Free/Dirty block details [ 158.158380][ T7314] EXT4-fs (loop3): free_blocks=4293918720 [ 158.173551][ T8130] loop2: detected capacity change from 0 to 1024 [ 158.201747][ T8125] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 158.203780][ T8130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.209339][ T8125] FAT-fs (loop0): Filesystem has been set read-only [ 158.228542][ T8128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.243784][ T8130] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.307175][ T8128] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 158.332507][ T8130] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.1642: lblock 1 mapped to illegal pblock 1 (length 15) [ 158.351040][ T8137] loop3: detected capacity change from 0 to 512 [ 158.361562][ T8130] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1642: Freeing blocks not in datazone - block = 1, count = 3 [ 158.386473][ T8128] EXT4-fs (loop1): 1 orphan inode deleted [ 158.392549][ T8128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.398273][ T8137] EXT4-fs: Ignoring removed oldalloc option [ 158.422074][ T8138] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.1642: lblock 3 mapped to illegal pblock 3 (length 1) [ 158.448368][ T8138] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 158.460643][ T8137] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.464778][ T8137] EXT4-fs (loop3): 1 truncate cleaned up [ 158.470607][ T8138] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.470607][ T8138] [ 158.487060][ T8137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.512203][ T8128] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.543699][ T8130] sctp: [Deprecated]: syz.2.1642 (pid 8130) Use of int in max_burst socket option. [ 158.543699][ T8130] Use struct sctp_assoc_value instead [ 158.571034][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1645'. [ 158.579202][ T8147] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 158.596191][ T8147] vhci_hcd: invalid port number 96 [ 158.601448][ T8147] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 158.646184][ T8143] netlink: 'syz.0.1645': attribute type 12 has an invalid length. [ 158.678004][ T7329] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:32: lblock 8 mapped to illegal pblock 8 (length 8) [ 158.712887][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.735614][ T7329] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 158.748155][ T7329] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.748155][ T7329] [ 158.764602][ T7314] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 158.788135][ T8158] loop0: detected capacity change from 0 to 128 [ 158.793254][ T7314] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 158.806945][ T7314] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.806945][ T7314] [ 158.808593][ T8160] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1652'. [ 158.816706][ T7314] EXT4-fs (loop2): Total free blocks count 0 [ 158.831910][ T7314] EXT4-fs (loop2): Free/Dirty block details [ 158.837909][ T7314] EXT4-fs (loop2): free_blocks=4293918720 [ 158.870167][ T8158] bio_check_eod: 37 callbacks suppressed [ 158.870184][ T8158] syz.0.1653: attempt to access beyond end of device [ 158.870184][ T8158] loop0: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 158.890039][ T8158] syz.0.1653: attempt to access beyond end of device [ 158.890039][ T8158] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 158.904549][ T8158] syz.0.1653: attempt to access beyond end of device [ 158.904549][ T8158] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 158.918829][ T8158] syz.0.1653: attempt to access beyond end of device [ 158.918829][ T8158] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 158.930677][ T8168] loop1: detected capacity change from 0 to 512 [ 158.933694][ T8158] syz.0.1653: attempt to access beyond end of device [ 158.933694][ T8158] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 158.986043][ T8158] syz.0.1653: attempt to access beyond end of device [ 158.986043][ T8158] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 158.992197][ T8168] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.011481][ T8158] syz.0.1653: attempt to access beyond end of device [ 159.011481][ T8158] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 159.025461][ T8160] loop3: detected capacity change from 0 to 8192 [ 159.032987][ T8158] syz.0.1653: attempt to access beyond end of device [ 159.032987][ T8158] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 159.047243][ T8158] syz.0.1653: attempt to access beyond end of device [ 159.047243][ T8158] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 159.062383][ T8158] syz.0.1653: attempt to access beyond end of device [ 159.062383][ T8158] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 159.101218][ T8168] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 159.108824][ T8168] FAT-fs (loop1): Filesystem has been set read-only [ 159.247329][ T8180] loop3: detected capacity change from 0 to 512 [ 159.256501][ T8180] EXT4-fs: Ignoring removed orlov option [ 159.262773][ T8180] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.306691][ T8184] loop1: detected capacity change from 0 to 512 [ 159.323872][ T8184] EXT4-fs: Ignoring removed oldalloc option [ 159.330970][ T8180] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 159.356438][ T8184] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.378278][ T8184] EXT4-fs (loop1): 1 truncate cleaned up [ 159.380721][ T8180] EXT4-fs (loop3): 1 orphan inode deleted [ 159.388077][ T8184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.408721][ T8180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.423342][ T8180] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.486811][ T8190] loop2: detected capacity change from 0 to 512 [ 159.525344][ T8190] EXT4-fs: Ignoring removed oldalloc option [ 159.548846][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.559346][ T8193] __nla_validate_parse: 1 callbacks suppressed [ 159.559378][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1664'. [ 159.576233][ T8190] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.621636][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1667'. [ 159.662875][ T8190] EXT4-fs (loop2): 1 truncate cleaned up [ 159.669095][ T8190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.690091][ T8204] vhci_hcd: invalid port number 224 [ 159.717749][ T8208] netlink: 464 bytes leftover after parsing attributes in process `syz.1.1669'. [ 159.749239][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1681'. [ 159.791408][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'. [ 159.813710][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.862009][ T8214] 9pnet: Could not find request transport: f [ 159.872813][ T8208] loop1: detected capacity change from 0 to 8192 [ 159.955714][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1678'. [ 160.018826][ T8236] vhci_hcd: invalid port number 224 [ 160.194622][ T8245] loop3: detected capacity change from 0 to 1024 [ 160.210632][ T8245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.238227][ T8245] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.253705][ T8245] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.1686: lblock 1 mapped to illegal pblock 1 (length 15) [ 160.272093][ T8245] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1686: Freeing blocks not in datazone - block = 1, count = 3 [ 160.272447][ T8249] binfmt_misc: register: failed to install interpreter file ./file0 [ 160.296754][ T8245] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1686: lblock 3 mapped to illegal pblock 3 (length 1) [ 160.311532][ T8245] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 160.323944][ T8245] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.323944][ T8245] [ 160.358998][ T8245] sctp: [Deprecated]: syz.3.1686 (pid 8245) Use of int in max_burst socket option. [ 160.358998][ T8245] Use struct sctp_assoc_value instead [ 160.402197][ T31] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 160.418027][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 160.430634][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.430634][ T31] [ 160.442488][ T31] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 160.460630][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 160.473265][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.473265][ T31] [ 160.483215][ T31] EXT4-fs (loop3): Total free blocks count 0 [ 160.489274][ T31] EXT4-fs (loop3): Free/Dirty block details [ 160.495204][ T31] EXT4-fs (loop3): free_blocks=4293918720 [ 160.667243][ T8257] 9pnet: Could not find request transport: f [ 160.711380][ T8264] loop2: detected capacity change from 0 to 512 [ 160.720123][ T8264] EXT4-fs: Ignoring removed oldalloc option [ 160.727680][ T8264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.740788][ T8264] EXT4-fs (loop2): 1 truncate cleaned up [ 160.746936][ T8264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.778755][ T8268] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 160.778755][ T8268] program syz.1.1691 not setting count and/or reply_len properly [ 160.862027][ T8268] pimreg: entered allmulticast mode [ 160.867921][ T8268] pimreg: left allmulticast mode [ 160.933649][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.103642][ T8287] loop3: detected capacity change from 0 to 512 [ 161.119154][ T8286] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.130814][ T8287] EXT4-fs: Ignoring removed orlov option [ 161.136135][ T8286] vhci_hcd: invalid port number 96 [ 161.141634][ T8286] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 161.199000][ T8287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.274918][ T8287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 161.294854][ T8287] EXT4-fs (loop3): 1 orphan inode deleted [ 161.301208][ T8287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.329988][ T8287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.844055][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1706'. [ 162.073450][ T8310] loop3: detected capacity change from 0 to 512 [ 162.086557][ T8310] EXT4-fs: Ignoring removed oldalloc option [ 162.093090][ T8310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.105808][ T8310] EXT4-fs (loop3): 1 truncate cleaned up [ 162.112535][ T8310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.197110][ T8314] 9pnet_fd: Insufficient options for proto=fd [ 162.218513][ T8314] loop2: detected capacity change from 0 to 512 [ 162.228242][ T8314] EXT4-fs: Ignoring removed orlov option [ 162.234587][ T8314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.246815][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.258072][ T8316] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1711'. [ 162.258686][ T8314] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 162.320121][ T8314] EXT4-fs (loop2): 1 orphan inode deleted [ 162.326385][ T8314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.361884][ T8316] loop0: detected capacity change from 0 to 8192 [ 162.373127][ T8314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.479997][ T8322] 9pnet: Could not find request transport: f [ 162.512614][ T8329] loop2: detected capacity change from 0 to 512 [ 162.522332][ T8329] EXT4-fs: Ignoring removed oldalloc option [ 162.528824][ T8329] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.541258][ T8329] EXT4-fs (loop2): 1 truncate cleaned up [ 162.553539][ T8329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.570553][ T8335] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 162.570553][ T8335] program syz.3.1715 not setting count and/or reply_len properly [ 162.593734][ T8335] pimreg: entered allmulticast mode [ 162.599752][ T8335] pimreg: left allmulticast mode [ 162.619751][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 162.619769][ T29] audit: type=1326 audit(1756065264.649:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.662701][ T29] audit: type=1326 audit(1756065264.679:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.686269][ T29] audit: type=1326 audit(1756065264.679:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.709857][ T29] audit: type=1326 audit(1756065264.679:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.733594][ T29] audit: type=1326 audit(1756065264.679:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.757436][ T29] audit: type=1326 audit(1756065264.679:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.780969][ T29] audit: type=1326 audit(1756065264.679:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.804455][ T29] audit: type=1326 audit(1756065264.679:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.827926][ T29] audit: type=1326 audit(1756065264.679:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.851366][ T29] audit: type=1326 audit(1756065264.679:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.0.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 162.905159][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.955839][ T8346] loop2: detected capacity change from 0 to 512 [ 162.967492][ T8346] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.012970][ T8346] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 163.020603][ T8346] FAT-fs (loop2): Filesystem has been set read-only [ 163.065205][ T8354] loop2: detected capacity change from 0 to 512 [ 163.074498][ T8356] 9pnet: Could not find request transport: f [ 163.088921][ T8354] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1726: corrupted in-inode xattr: invalid ea_ino [ 163.105180][ T8354] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1726: couldn't read orphan inode 15 (err -117) [ 163.120691][ T8354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.241719][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1728'. [ 163.339176][ T8365] vhci_hcd: invalid port number 224 [ 163.392435][ T8372] loop3: detected capacity change from 0 to 512 [ 163.401080][ T8372] EXT4-fs: Ignoring removed oldalloc option [ 163.455211][ T8372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.477142][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1734'. [ 163.489926][ T8372] EXT4-fs (loop3): 1 truncate cleaned up [ 163.506071][ T8372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.698790][ T8386] loop1: detected capacity change from 0 to 512 [ 163.710151][ T8386] EXT4-fs: Ignoring removed orlov option [ 163.742648][ T8386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.779430][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.799518][ T8386] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 163.952452][ T8386] EXT4-fs (loop1): 1 orphan inode deleted [ 163.967900][ T8386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.968023][ T8392] loop0: detected capacity change from 0 to 1024 [ 164.022426][ T8386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.035569][ T8392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.076657][ T8392] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.102073][ T8392] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.1738: lblock 1 mapped to illegal pblock 1 (length 15) [ 164.159217][ T8392] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1738: Freeing blocks not in datazone - block = 1, count = 3 [ 164.222251][ T8392] sctp: [Deprecated]: syz.0.1738 (pid 8392) Use of int in max_burst socket option. [ 164.222251][ T8392] Use struct sctp_assoc_value instead [ 164.268884][ T8399] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.290319][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.309947][ T8399] vhci_hcd: invalid port number 96 [ 164.315115][ T8399] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 164.417598][ T8408] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 164.417598][ T8408] program syz.0.1741 not setting count and/or reply_len properly [ 164.453717][ T8410] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.464921][ T8410] vhci_hcd: invalid port number 96 [ 164.470112][ T8410] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 164.483903][ T8408] pimreg: entered allmulticast mode [ 164.525898][ T8408] pimreg: left allmulticast mode [ 164.657556][ T8422] loop3: detected capacity change from 0 to 512 [ 164.666743][ T8422] EXT4-fs: Ignoring removed oldalloc option [ 164.678456][ T8424] 9pnet: Could not find request transport: f [ 164.702387][ T8422] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.799015][ T8422] EXT4-fs (loop3): 1 truncate cleaned up [ 164.805877][ T8422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.303644][ T8433] loop0: detected capacity change from 0 to 512 [ 165.351741][ T8433] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.472477][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.502786][ T8433] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 165.510594][ T8433] FAT-fs (loop0): Filesystem has been set read-only [ 165.540563][ T8439] __nla_validate_parse: 1 callbacks suppressed [ 165.540582][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1756'. [ 165.636780][ T8440] vhci_hcd: invalid port number 224 [ 165.799033][ T8454] loop0: detected capacity change from 0 to 512 [ 165.840216][ T8454] EXT4-fs: Ignoring removed oldalloc option [ 165.858846][ T8454] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.917517][ T8454] EXT4-fs (loop0): 1 truncate cleaned up [ 165.934160][ T8454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.030834][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 166.130490][ T8466] 9pnet: Could not find request transport: f [ 166.327299][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.588876][ T8487] loop0: detected capacity change from 0 to 512 [ 166.677246][ T8487] EXT4-fs: Ignoring removed orlov option [ 166.785345][ T8487] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.881401][ T8487] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 166.899239][ T8487] EXT4-fs (loop0): 1 orphan inode deleted [ 166.905589][ T8487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.932375][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.951900][ T8492] loop1: detected capacity change from 0 to 512 [ 166.959197][ T8492] EXT4-fs: Ignoring removed oldalloc option [ 166.970588][ T8487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.976741][ T8492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.992495][ T8492] EXT4-fs (loop1): 1 truncate cleaned up [ 167.005787][ T8492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.027426][ T8494] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.043069][ T8494] vhci_hcd: invalid port number 96 [ 167.048475][ T8494] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 167.117862][ T8499] loop2: detected capacity change from 0 to 512 [ 167.124622][ T8499] EXT4-fs: Ignoring removed oldalloc option [ 167.143945][ T8499] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.164484][ T8499] EXT4-fs (loop2): 1 truncate cleaned up [ 167.172264][ T8499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.230399][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.298921][ T8512] loop0: detected capacity change from 0 to 512 [ 167.320486][ T8512] EXT4-fs: Ignoring removed oldalloc option [ 167.329206][ T8512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.349867][ T8512] EXT4-fs (loop0): 1 truncate cleaned up [ 167.355819][ T8512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.399163][ T8514] vhci_hcd: invalid port number 224 [ 167.410890][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.534566][ T8527] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 167.534566][ T8527] program syz.4.1785 not setting count and/or reply_len properly [ 167.553669][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.579639][ T8527] pimreg: entered allmulticast mode [ 167.637941][ T8535] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1792'. [ 167.657856][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 167.657874][ T29] audit: type=1326 audit(1756065269.689:10410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 167.698347][ T29] audit: type=1326 audit(1756065269.729:10411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 167.725481][ T29] audit: type=1326 audit(1756065269.749:10412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 167.749100][ T29] audit: type=1326 audit(1756065269.749:10413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 167.772800][ T29] audit: type=1326 audit(1756065269.749:10414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 167.796537][ T29] audit: type=1326 audit(1756065269.749:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 167.820430][ T29] audit: type=1326 audit(1756065269.749:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 167.844272][ T29] audit: type=1326 audit(1756065269.749:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 167.868143][ T29] audit: type=1326 audit(1756065269.749:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 167.892000][ T29] audit: type=1326 audit(1756065269.749:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8533 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126ffebe9 code=0x7ffc0000 [ 168.227074][ T8548] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.263954][ T8548] vhci_hcd: invalid port number 96 [ 168.269231][ T8548] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 168.444946][ T8539] loop0: detected capacity change from 0 to 8192 [ 168.647067][ T8516] pimreg: left allmulticast mode [ 168.654080][ T8556] loop1: detected capacity change from 0 to 512 [ 168.661758][ T8556] EXT4-fs: Ignoring removed oldalloc option [ 168.690442][ T8556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.720904][ T8556] EXT4-fs (loop1): 1 truncate cleaned up [ 168.729406][ T8556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.872230][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.881594][ T8568] 9pnet_fd: Insufficient options for proto=fd [ 168.892111][ T8568] 9pnet_fd: Insufficient options for proto=fd [ 168.916961][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'. [ 169.007400][ T8559] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.037331][ T8590] loop1: detected capacity change from 0 to 512 [ 169.048302][ T8590] EXT4-fs: Ignoring removed oldalloc option [ 169.055598][ T8590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.117884][ T8598] loop2: detected capacity change from 0 to 512 [ 169.124783][ T8598] EXT4-fs: Ignoring removed orlov option [ 169.130965][ T8598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.133537][ T8590] EXT4-fs (loop1): 1 truncate cleaned up [ 169.152755][ T8590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.170833][ T8596] loop3: detected capacity change from 0 to 512 [ 169.182916][ T8598] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 169.198158][ T8596] EXT4-fs: Ignoring removed oldalloc option [ 169.205034][ T8598] EXT4-fs (loop2): 1 orphan inode deleted [ 169.211736][ T8598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.212716][ T8596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.259632][ T8596] EXT4-fs (loop3): 1 truncate cleaned up [ 169.260863][ T8605] 9pnet_fd: Insufficient options for proto=fd [ 169.265873][ T8596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.274627][ T8605] 9pnet_fd: Insufficient options for proto=fd [ 169.292755][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.351511][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.391320][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.404986][ T8612] loop0: detected capacity change from 0 to 512 [ 169.412026][ T8612] EXT4-fs: Ignoring removed oldalloc option [ 169.423568][ T8612] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 169.424704][ T8610] 9pnet: Could not find request transport: f [ 169.487647][ T8612] EXT4-fs (loop0): 1 truncate cleaned up [ 169.493757][ T8612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.617455][ T8635] loop3: detected capacity change from 0 to 1024 [ 169.642416][ T8637] loop1: detected capacity change from 0 to 512 [ 169.642460][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.666951][ T8637] EXT4-fs: Ignoring removed oldalloc option [ 169.667832][ T8635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.685734][ T8640] 9pnet_fd: Insufficient options for proto=fd [ 169.686329][ T8635] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.696025][ T8640] 9pnet_fd: Insufficient options for proto=fd [ 169.703263][ T8637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.724628][ T8637] EXT4-fs (loop1): 1 truncate cleaned up [ 169.736507][ T8635] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.1827: lblock 1 mapped to illegal pblock 1 (length 15) [ 169.751170][ T8637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.764553][ T8635] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1827: Freeing blocks not in datazone - block = 1, count = 3 [ 169.780672][ T8635] sctp: [Deprecated]: syz.3.1827 (pid 8635) Use of int in max_burst socket option. [ 169.780672][ T8635] Use struct sctp_assoc_value instead [ 169.799916][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1832'. [ 169.812991][ T8644] vhci_hcd: invalid port number 224 [ 169.870542][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.908959][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1837'. [ 169.952583][ T8657] 9pnet: Could not find request transport: f [ 169.964412][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.971097][ T8655] loop0: detected capacity change from 0 to 8192 [ 170.104215][ T8674] loop0: detected capacity change from 0 to 1024 [ 170.119027][ T8674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.131237][ T8674] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.143724][ T8674] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.1845: lblock 1 mapped to illegal pblock 1 (length 15) [ 170.161462][ T8674] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1845: Freeing blocks not in datazone - block = 1, count = 3 [ 170.175673][ T8674] sctp: [Deprecated]: syz.0.1845 (pid 8674) Use of int in max_burst socket option. [ 170.175673][ T8674] Use struct sctp_assoc_value instead [ 170.217233][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.259523][ T8683] loop3: detected capacity change from 0 to 512 [ 170.269204][ T8683] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1847: corrupted in-inode xattr: invalid ea_ino [ 170.313790][ T8683] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1847: couldn't read orphan inode 15 (err -117) [ 170.332443][ T8683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.347435][ T8686] vhci_hcd: invalid port number 224 [ 170.466572][ T8693] loop2: detected capacity change from 0 to 512 [ 170.473281][ T8693] EXT4-fs: Ignoring removed oldalloc option [ 170.483027][ T8693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.495639][ T8693] EXT4-fs (loop2): 1 truncate cleaned up [ 170.503408][ T8693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.521017][ T8698] loop0: detected capacity change from 0 to 512 [ 170.529006][ T8698] EXT4-fs: Ignoring removed orlov option [ 170.543605][ T8698] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.567509][ T8698] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 170.604906][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.616235][ T8698] EXT4-fs (loop0): 1 orphan inode deleted [ 170.623009][ T8698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.648590][ T8702] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1847'. [ 170.671975][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.765035][ T8708] 9pnet_fd: Insufficient options for proto=fd [ 170.775108][ T8708] 9pnet_fd: Insufficient options for proto=fd [ 170.818937][ T8712] loop0: detected capacity change from 0 to 1024 [ 170.837586][ T8712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.865092][ T8712] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.894084][ T8712] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1857: Freeing blocks not in datazone - block = 0, count = 16 [ 170.919286][ T8712] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 170.976046][ T8712] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 170.988419][ T8712] EXT4-fs (loop0): This should not happen!! Data will be lost [ 170.988419][ T8712] [ 170.998325][ T8712] EXT4-fs (loop0): Total free blocks count 0 [ 171.004338][ T8712] EXT4-fs (loop0): Free/Dirty block details [ 171.010372][ T8712] EXT4-fs (loop0): free_blocks=4293918720 [ 171.016133][ T8712] EXT4-fs (loop0): dirty_blocks=80 [ 171.021264][ T8712] EXT4-fs (loop0): Block reservation details [ 171.027306][ T8712] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 171.076516][ T8712] sctp: [Deprecated]: syz.0.1857 (pid 8712) Use of int in max_burst socket option. [ 171.076516][ T8712] Use struct sctp_assoc_value instead [ 171.104145][ T8719] vhci_hcd: invalid port number 224 [ 171.177536][ T8730] loop2: detected capacity change from 0 to 512 [ 171.178690][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.186895][ T8730] EXT4-fs: Ignoring removed oldalloc option [ 171.205901][ T8730] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.233526][ T8730] EXT4-fs (loop2): 1 truncate cleaned up [ 171.246422][ T8730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.417783][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.427062][ T8741] 9pnet_fd: Insufficient options for proto=fd [ 171.436032][ T8741] loop0: detected capacity change from 0 to 512 [ 171.444379][ T8741] EXT4-fs: Ignoring removed orlov option [ 171.459790][ T8741] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.490806][ T8741] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 171.507394][ T8741] EXT4-fs (loop0): 1 orphan inode deleted [ 171.513852][ T8741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.537566][ T8741] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.599154][ T8752] loop0: detected capacity change from 0 to 512 [ 171.611069][ T8752] EXT4-fs: Ignoring removed oldalloc option [ 171.632694][ T8752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.661036][ T8750] loop2: detected capacity change from 0 to 512 [ 171.679101][ T8754] loop1: detected capacity change from 0 to 512 [ 171.699106][ T8754] EXT4-fs: Ignoring removed orlov option [ 171.705923][ T8752] EXT4-fs (loop0): 1 truncate cleaned up [ 171.714339][ T8750] EXT4-fs: Ignoring removed orlov option [ 171.727573][ T8752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.754863][ T8750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.794682][ T8754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.840702][ T8750] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 171.857020][ T8754] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 171.884052][ T8750] EXT4-fs (loop2): 1 orphan inode deleted [ 171.889412][ T8754] EXT4-fs (loop1): 1 orphan inode deleted [ 171.896029][ T8754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.908916][ T8750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.927782][ T8750] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.928168][ T8754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.962058][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1875'. [ 171.980982][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.060148][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1877'. [ 172.542605][ T8792] netlink: 'syz.2.1889': attribute type 12 has an invalid length. [ 172.661035][ T8798] vhci_hcd: invalid port number 224 [ 172.772338][ T8801] 9pnet: Could not find request transport: f [ 172.799954][ T8804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1895'. [ 172.851990][ T8811] loop1: detected capacity change from 0 to 512 [ 172.858971][ T8811] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.859953][ T8806] 9pnet: Could not find request transport: f [ 172.918846][ T8811] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 172.926414][ T8811] FAT-fs (loop1): Filesystem has been set read-only [ 173.040870][ T8822] netlink: 'syz.1.1902': attribute type 12 has an invalid length. [ 173.052672][ T8826] loop2: detected capacity change from 0 to 512 [ 173.085502][ T8826] EXT4-fs: Ignoring removed orlov option [ 173.101766][ T8826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.120777][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 173.120792][ T29] audit: type=1326 audit(1756065275.149:10911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.151235][ T8825] vhci_hcd: invalid port number 224 [ 173.161191][ T8826] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.176550][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.185894][ T8826] EXT4-fs (loop2): 1 orphan inode deleted [ 173.192489][ T8826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.215533][ T29] audit: type=1326 audit(1756065275.149:10912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.239205][ T29] audit: type=1326 audit(1756065275.179:10913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.249851][ T8826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.262786][ T29] audit: type=1326 audit(1756065275.179:10914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.295330][ T29] audit: type=1326 audit(1756065275.179:10915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.319063][ T29] audit: type=1326 audit(1756065275.179:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.342633][ T29] audit: type=1326 audit(1756065275.179:10917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.366254][ T29] audit: type=1326 audit(1756065275.179:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.389805][ T29] audit: type=1326 audit(1756065275.179:10919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.413409][ T29] audit: type=1326 audit(1756065275.179:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a7e6ebe9 code=0x7ffc0000 [ 173.592762][ T8849] 9pnet: Could not find request transport: f [ 173.623678][ T8860] netlink: 'syz.1.1919': attribute type 12 has an invalid length. [ 173.652999][ T8862] loop3: detected capacity change from 0 to 512 [ 173.673465][ T8862] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1918: corrupted in-inode xattr: invalid ea_ino [ 173.693028][ T8862] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1918: couldn't read orphan inode 15 (err -117) [ 173.709620][ T8862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.724284][ T8847] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 173.745764][ T8847] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.835208][ T8873] loop0: detected capacity change from 0 to 512 [ 173.863516][ T8873] EXT4-fs: Ignoring removed oldalloc option [ 173.871262][ T8873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.882670][ T8873] EXT4-fs (loop0): 1 truncate cleaned up [ 173.888953][ T8873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.984274][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.004099][ T8881] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 174.028852][ T8881] vhci_hcd: invalid port number 96 [ 174.034093][ T8881] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 174.048814][ T8887] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1918'. [ 174.056993][ T8885] 9pnet: Could not find request transport: f [ 174.108259][ T8889] 9pnet_fd: Insufficient options for proto=fd [ 174.179539][ T8891] loop2: detected capacity change from 0 to 512 [ 174.190731][ T8891] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.216795][ T8893] netlink: 'syz.0.1930': attribute type 12 has an invalid length. [ 174.257148][ T8891] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 174.264740][ T8891] FAT-fs (loop2): Filesystem has been set read-only [ 174.272906][ T8895] loop0: detected capacity change from 0 to 512 [ 174.283841][ T8895] EXT4-fs: Ignoring removed oldalloc option [ 174.294239][ T8895] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 174.316806][ T8895] EXT4-fs (loop0): 1 truncate cleaned up [ 174.336608][ T8895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.660964][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.761355][ T8900] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 174.774653][ T8911] 9pnet: Could not find request transport: f [ 174.781987][ T8900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 174.817977][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1940'. [ 174.927018][ T8919] 9pnet: Could not find request transport: f [ 174.987290][ T8925] loop0: detected capacity change from 0 to 512 [ 175.001467][ T8925] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.051120][ T8925] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 175.058744][ T8925] FAT-fs (loop0): Filesystem has been set read-only [ 175.198353][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1947'. [ 175.209198][ T8937] netlink: 'syz.2.1947': attribute type 12 has an invalid length. [ 175.242747][ T8938] sctp: [Deprecated]: syz.4.1943 (pid 8938) Use of int in max_burst socket option. [ 175.242747][ T8938] Use struct sctp_assoc_value instead [ 175.372947][ T8943] vhci_hcd: invalid port number 224 [ 175.583448][ T8953] loop2: detected capacity change from 0 to 512 [ 175.611708][ T8953] EXT4-fs: Ignoring removed oldalloc option [ 175.629815][ T8953] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 175.655711][ T8953] EXT4-fs (loop2): 1 truncate cleaned up [ 175.672112][ T8953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.772860][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.950746][ T8960] loop2: detected capacity change from 0 to 512 [ 175.976369][ T8960] EXT4-fs: Ignoring removed orlov option [ 176.015489][ T8960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 176.067716][ T8960] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 176.086991][ T8960] EXT4-fs (loop2): 1 orphan inode deleted [ 176.093256][ T8960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.107100][ T8960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.176089][ T8964] 9pnet: Could not find request transport: f [ 176.376708][ T8980] loop1: detected capacity change from 0 to 512 [ 176.396209][ T8984] netlink: 'syz.0.1966': attribute type 11 has an invalid length. [ 176.404599][ T8980] EXT4-fs: Ignoring removed oldalloc option [ 176.411300][ T8980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.447592][ T8980] EXT4-fs (loop1): 1 truncate cleaned up [ 176.709576][ T9016] sctp: [Deprecated]: syz.0.1971 (pid 9016) Use of int in max_burst socket option. [ 176.709576][ T9016] Use struct sctp_assoc_value instead [ 176.739257][ T9014] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 176.757373][ T9014] vhci_hcd: invalid port number 96 [ 176.762535][ T9014] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 176.772946][ T9020] loop2: detected capacity change from 0 to 512 [ 176.791243][ T9022] loop1: detected capacity change from 0 to 512 [ 176.808756][ T9020] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1981: corrupted in-inode xattr: invalid ea_ino [ 176.823200][ T9022] EXT4-fs: Ignoring removed orlov option [ 176.831935][ T9020] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1981: couldn't read orphan inode 15 (err -117) [ 176.849544][ T9022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.867097][ T9022] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 176.947564][ T9022] EXT4-fs (loop1): 1 orphan inode deleted [ 177.107596][ T9036] vhci_hcd: invalid port number 224 [ 177.148330][ T9040] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1981'. [ 177.256633][ T9042] loop1: detected capacity change from 0 to 512 [ 177.399607][ T9042] EXT4-fs: Ignoring removed orlov option [ 177.436385][ T9042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 177.478964][ T9042] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 177.584796][ T9042] EXT4-fs (loop1): 1 orphan inode deleted [ 177.897461][ T9059] vhci_hcd: invalid port number 224 [ 178.040967][ T9065] loop3: detected capacity change from 0 to 512 [ 178.061966][ T9065] EXT4-fs: Ignoring removed oldalloc option [ 178.078486][ T9065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.114871][ T9065] EXT4-fs (loop3): 1 truncate cleaned up [ 178.164186][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 178.164204][ T29] audit: type=1326 audit(1756065280.189:11332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.201974][ T9072] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.209531][ T9072] vhci_hcd: invalid port number 96 [ 178.214292][ T29] audit: type=1326 audit(1756065280.189:11333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.214696][ T9072] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 178.238429][ T29] audit: type=1326 audit(1756065280.189:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.269088][ T29] audit: type=1326 audit(1756065280.189:11335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.292962][ T29] audit: type=1326 audit(1756065280.189:11336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.316489][ T29] audit: type=1326 audit(1756065280.189:11337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3c023d550 code=0x7ffc0000 [ 178.340029][ T29] audit: type=1326 audit(1756065280.229:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.363639][ T29] audit: type=1326 audit(1756065280.229:11339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.387954][ T29] audit: type=1326 audit(1756065280.229:11340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.411578][ T29] audit: type=1326 audit(1756065280.229:11341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9071 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c023ebe9 code=0x7ffc0000 [ 178.480984][ T9079] loop3: detected capacity change from 0 to 1024 [ 178.493878][ T9081] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.501770][ T9081] vhci_hcd: invalid port number 96 [ 178.506975][ T9081] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 178.618463][ T9079] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.643862][ T9079] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.2000: lblock 1 mapped to illegal pblock 1 (length 15) [ 178.741001][ T9079] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2000: Freeing blocks not in datazone - block = 1, count = 3 [ 178.756648][ T9096] netlink: 'syz.1.2009': attribute type 11 has an invalid length. [ 178.778500][ T9079] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2000: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.831695][ T9079] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 178.844098][ T9106] sctp: [Deprecated]: syz.3.2000 (pid 9106) Use of int in max_burst socket option. [ 178.844098][ T9106] Use struct sctp_assoc_value instead [ 178.844157][ T9079] EXT4-fs (loop3): This should not happen!! Data will be lost [ 178.844157][ T9079] [ 178.870993][ T9104] loop1: detected capacity change from 0 to 512 [ 178.879676][ T9104] EXT4-fs: Ignoring removed orlov option [ 178.886295][ T9104] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.910279][ T7314] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 178.926489][ T9104] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 178.946186][ T9104] EXT4-fs (loop1): 1 orphan inode deleted [ 178.952776][ T7314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 178.965119][ T7314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 178.965119][ T7314] [ 178.997803][ T7314] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 179.013522][ T7314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 179.026037][ T7314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.026037][ T7314] [ 179.035695][ T7314] EXT4-fs (loop3): Total free blocks count 0 [ 179.041814][ T7314] EXT4-fs (loop3): Free/Dirty block details [ 179.043010][ T9113] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 179.047850][ T7314] EXT4-fs (loop3): free_blocks=4293918720 [ 179.047880][ T7314] EXT4-fs (loop3): dirty_blocks=64 [ 179.067950][ T9113] vhci_hcd: invalid port number 96 [ 179.073102][ T9113] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 179.262034][ T9130] 9pnet_fd: Insufficient options for proto=fd [ 179.281214][ T9130] 9pnet_fd: Insufficient options for proto=fd [ 179.369751][ T9135] sctp: [Deprecated]: syz.1.2019 (pid 9135) Use of int in max_burst socket option. [ 179.369751][ T9135] Use struct sctp_assoc_value instead [ 179.393759][ T9137] netlink: 'syz.3.2023': attribute type 11 has an invalid length. [ 179.450882][ T9142] loop3: detected capacity change from 0 to 1024 [ 179.494035][ T9142] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.521212][ T9142] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.2025: lblock 1 mapped to illegal pblock 1 (length 15) [ 179.601635][ T9142] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2025: Freeing blocks not in datazone - block = 1, count = 3 [ 179.618050][ T9142] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2025: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.632378][ T9142] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 179.644855][ T9142] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.644855][ T9142] [ 179.657070][ T9142] sctp: [Deprecated]: syz.3.2025 (pid 9142) Use of int in max_burst socket option. [ 179.657070][ T9142] Use struct sctp_assoc_value instead [ 179.718250][ T7314] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 179.745985][ T7314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 179.758353][ T7314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.758353][ T7314] [ 179.789846][ T9148] loop0: detected capacity change from 0 to 1024 [ 179.801979][ T7329] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 179.841333][ T7329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 179.853890][ T7329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.853890][ T7329] [ 179.863783][ T7329] EXT4-fs (loop3): Total free blocks count 0 [ 179.869849][ T7329] EXT4-fs (loop3): Free/Dirty block details [ 179.875846][ T7329] EXT4-fs (loop3): free_blocks=4293918720 [ 179.881614][ T7329] EXT4-fs (loop3): dirty_blocks=64 [ 179.932631][ T9148] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.993759][ T9148] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2027: Freeing blocks not in datazone - block = 0, count = 16 [ 180.053245][ T9148] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 180.098760][ T9148] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 180.111221][ T9148] EXT4-fs (loop0): This should not happen!! Data will be lost [ 180.111221][ T9148] [ 180.120979][ T9148] EXT4-fs (loop0): Total free blocks count 0 [ 180.127012][ T9148] EXT4-fs (loop0): Free/Dirty block details [ 180.132990][ T9148] EXT4-fs (loop0): free_blocks=4293918720 [ 180.138824][ T9148] EXT4-fs (loop0): dirty_blocks=80 [ 180.144054][ T9148] EXT4-fs (loop0): Block reservation details [ 180.150064][ T9148] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 180.177442][ T9160] sctp: [Deprecated]: syz.0.2027 (pid 9160) Use of int in max_burst socket option. [ 180.177442][ T9160] Use struct sctp_assoc_value instead [ 180.303783][ T9162] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.311396][ T9162] vhci_hcd: invalid port number 96 [ 180.316634][ T9162] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 180.357256][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2033'. [ 180.440746][ T9167] loop2: detected capacity change from 0 to 8192 [ 180.629961][ T9179] loop1: detected capacity change from 0 to 1024 [ 180.651236][ T9179] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.663802][ T9179] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.2039: lblock 1 mapped to illegal pblock 1 (length 15) [ 180.681001][ T9179] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2039: Freeing blocks not in datazone - block = 1, count = 3 [ 180.697607][ T9179] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2039: lblock 3 mapped to illegal pblock 3 (length 1) [ 180.713920][ T9179] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 180.726320][ T9179] EXT4-fs (loop1): This should not happen!! Data will be lost [ 180.726320][ T9179] [ 180.737931][ T9179] sctp: [Deprecated]: syz.1.2039 (pid 9179) Use of int in max_burst socket option. [ 180.737931][ T9179] Use struct sctp_assoc_value instead [ 180.763211][ T173] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 180.777835][ T173] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 180.790431][ T173] EXT4-fs (loop1): This should not happen!! Data will be lost [ 180.790431][ T173] [ 180.800792][ T7314] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 180.817982][ T7314] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 180.830502][ T7314] EXT4-fs (loop1): This should not happen!! Data will be lost [ 180.830502][ T7314] [ 180.840420][ T7314] EXT4-fs (loop1): Total free blocks count 0 [ 180.846785][ T7314] EXT4-fs (loop1): Free/Dirty block details [ 180.852775][ T7314] EXT4-fs (loop1): free_blocks=4293918720 [ 180.858588][ T7314] EXT4-fs (loop1): dirty_blocks=64 [ 180.903092][ T9191] loop1: detected capacity change from 0 to 1024 [ 180.912013][ T9193] netlink: 'syz.4.2045': attribute type 11 has an invalid length. [ 180.939720][ T9191] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.962734][ T9191] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.2042: lblock 1 mapped to illegal pblock 1 (length 15) [ 181.050160][ T9208] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2042: Freeing blocks not in datazone - block = 1, count = 3 [ 181.093020][ T9191] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2042: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.122966][ T9191] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 181.135397][ T9191] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.135397][ T9191] [ 181.199457][ T9191] sctp: [Deprecated]: syz.1.2042 (pid 9191) Use of int in max_burst socket option. [ 181.199457][ T9191] Use struct sctp_assoc_value instead [ 181.258299][ T7332] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:34: lblock 8 mapped to illegal pblock 8 (length 8) [ 181.273371][ T7332] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 181.285896][ T7332] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.285896][ T7332] [ 181.297628][ T7332] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 181.313204][ T7332] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 181.325755][ T7332] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.325755][ T7332] [ 181.335542][ T7332] EXT4-fs (loop1): Total free blocks count 0 [ 181.341693][ T7332] EXT4-fs (loop1): Free/Dirty block details [ 181.347648][ T7332] EXT4-fs (loop1): free_blocks=4293918720 [ 181.353378][ T7332] EXT4-fs (loop1): dirty_blocks=64 [ 181.416970][ T9221] loop2: detected capacity change from 0 to 512 [ 181.423774][ T9221] EXT4-fs: Ignoring removed oldalloc option [ 181.432744][ T9221] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.443577][ T9221] EXT4-fs (loop2): 1 truncate cleaned up [ 181.510748][ T9228] netlink: 'syz.0.2058': attribute type 11 has an invalid length. [ 181.682880][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2064'. [ 181.727165][ T9241] loop2: detected capacity change from 0 to 8192 [ 181.996269][ T9246] loop3: detected capacity change from 0 to 512 [ 182.003086][ T9246] EXT4-fs: Ignoring removed orlov option [ 182.016686][ T9246] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.029929][ T9246] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 182.045591][ T9246] EXT4-fs (loop3): 1 orphan inode deleted [ 182.223501][ T9249] loop1: detected capacity change from 0 to 512 [ 182.230351][ T9249] EXT4-fs: Ignoring removed oldalloc option [ 182.239588][ T9249] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.254541][ T9249] EXT4-fs (loop1): 1 truncate cleaned up [ 182.290442][ T9251] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.298818][ T9251] vhci_hcd: invalid port number 96 [ 182.304042][ T9251] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 182.313428][ T9254] loop1: detected capacity change from 0 to 512 [ 182.320864][ T9254] EXT4-fs: Ignoring removed oldalloc option [ 182.330724][ T9254] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.343557][ T9254] EXT4-fs (loop1): 1 truncate cleaned up [ 182.390344][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2070'. [ 182.468782][ T9271] loop1: detected capacity change from 0 to 512 [ 182.478283][ T9271] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.533926][ T9271] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 182.541526][ T9271] FAT-fs (loop1): Filesystem has been set read-only [ 182.649157][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2084'. [ 182.661158][ T9287] loop2: detected capacity change from 0 to 512 [ 182.705488][ T9287] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.769560][ T9287] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 182.777241][ T9287] FAT-fs (loop2): Filesystem has been set read-only [ 182.777877][ T9291] loop1: detected capacity change from 0 to 512 [ 182.835647][ T9291] EXT4-fs: Ignoring removed orlov option [ 182.844697][ T9297] loop0: detected capacity change from 0 to 512 [ 182.853849][ T9297] EXT4-fs: Ignoring removed oldalloc option [ 182.877770][ T9297] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.888942][ T9291] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.902588][ T9297] EXT4-fs (loop0): 1 truncate cleaned up [ 182.960031][ T9291] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 182.991596][ T9307] 9pnet: Could not find request transport: f [ 183.009487][ T9291] EXT4-fs (loop1): 1 orphan inode deleted [ 183.016892][ T9311] 9pnet: Could not find request transport: f [ 183.061828][ T9314] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2094'. [ 183.214257][ T9329] netlink: 'syz.0.2101': attribute type 11 has an invalid length. [ 183.262460][ T9337] 9pnet: Could not find request transport: f [ 183.315906][ T9345] netlink: 'syz.4.2108': attribute type 11 has an invalid length. [ 183.324816][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 183.324834][ T29] audit: type=1326 audit(1756065285.349:12061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.0.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.355184][ T29] audit: type=1326 audit(1756065285.349:12062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.0.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.378669][ T29] audit: type=1326 audit(1756065285.349:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.0.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.402164][ T29] audit: type=1326 audit(1756065285.349:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.0.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.425752][ T29] audit: type=1326 audit(1756065285.349:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.0.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.456020][ T29] audit: type=1326 audit(1756065285.429:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.0.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.479666][ T29] audit: type=1326 audit(1756065285.429:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.0.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.503459][ T29] audit: type=1326 audit(1756065285.429:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.0.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.527339][ T29] audit: type=1326 audit(1756065285.429:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.0.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.530811][ T9353] loop1: detected capacity change from 0 to 512 [ 183.550941][ T29] audit: type=1326 audit(1756065285.429:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.0.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe218a7ebe9 code=0x7ffc0000 [ 183.601882][ T9353] EXT4-fs: Ignoring removed oldalloc option [ 183.616136][ T9353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.637644][ T9353] EXT4-fs (loop1): 1 truncate cleaned up [ 183.685162][ T9368] 9pnet: Could not find request transport: f [ 183.783699][ T9382] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 183.783699][ T9382] program syz.4.2121 not setting count and/or reply_len properly [ 183.818336][ T9382] pimreg: entered allmulticast mode [ 183.830942][ T9382] pimreg: left allmulticast mode [ 183.872891][ T9385] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 183.880628][ T9385] vhci_hcd: invalid port number 96 [ 183.885774][ T9385] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 184.012696][ T9391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2127'. [ 184.021339][ T9400] 9pnet: Could not find request transport: f [ 184.075680][ T9404] 9pnet: Could not find request transport: f [ 184.170046][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2135'. [ 184.214078][ T9412] loop2: detected capacity change from 0 to 8192 [ 184.627524][ T9424] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2140'. [ 184.641798][ T9425] loop0: detected capacity change from 0 to 512 [ 184.659482][ T9425] EXT4-fs: Ignoring removed orlov option [ 184.679900][ T9425] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.710725][ T9424] loop3: detected capacity change from 0 to 512 [ 184.721628][ T9425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.731513][ T9424] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.766136][ T9425] EXT4-fs (loop0): 1 orphan inode deleted [ 184.788995][ T9424] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2140: invalid indirect mapped block 4294967295 (level 0) [ 184.828654][ T9424] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2140: invalid indirect mapped block 4294967295 (level 1) [ 184.843289][ T9424] EXT4-fs (loop3): 1 orphan inode deleted [ 184.849141][ T9424] EXT4-fs (loop3): 1 truncate cleaned up [ 185.022901][ T9435] 9pnet: Could not find request transport: f [ 185.311416][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2144'. [ 185.312664][ T9452] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 185.312664][ T9452] program syz.1.2150 not setting count and/or reply_len properly [ 185.344485][ T9452] pimreg: entered allmulticast mode [ 185.350607][ T9452] pimreg: left allmulticast mode [ 185.419478][ T9459] loop2: detected capacity change from 0 to 1024 [ 185.451339][ T9459] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.470307][ T9459] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.2153: lblock 1 mapped to illegal pblock 1 (length 15) [ 185.487197][ T9459] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2153: Freeing blocks not in datazone - block = 1, count = 3 [ 185.502713][ T9459] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.2153: lblock 3 mapped to illegal pblock 3 (length 1) [ 185.517090][ T9459] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 185.529950][ T9459] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.529950][ T9459] [ 185.543704][ T9459] sctp: [Deprecated]: syz.2.2153 (pid 9459) Use of int in max_burst socket option. [ 185.543704][ T9459] Use struct sctp_assoc_value instead [ 185.570960][ T51] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 185.587011][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 185.599352][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.599352][ T51] [ 185.610892][ T51] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 185.627384][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 185.639877][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.639877][ T51] [ 185.649593][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 185.655661][ T51] EXT4-fs (loop2): Free/Dirty block details [ 185.661599][ T51] EXT4-fs (loop2): free_blocks=4293918720 [ 185.667421][ T51] EXT4-fs (loop2): dirty_blocks=64 [ 185.685242][ T9468] loop2: detected capacity change from 0 to 512 [ 185.696840][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2157'. [ 185.717193][ T9468] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.749590][ T9468] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 185.757232][ T9468] FAT-fs (loop2): Filesystem has been set read-only [ 185.829584][ T9472] vhci_hcd: invalid port number 224 [ 185.879770][ T9476] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 185.888481][ T9476] vhci_hcd: invalid port number 96 [ 185.893637][ T9476] vhci_hcd: default hub control req: 0000 veffc i0060 l0 [ 186.038295][ T9484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 186.105483][ T9490] loop1: detected capacity change from 0 to 512 [ 186.114663][ T9490] EXT4-fs: Ignoring removed oldalloc option [ 186.132440][ T9490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.146026][ T9490] EXT4-fs (loop1): 1 truncate cleaned up [ 186.251157][ T2992] ================================================================== [ 186.259388][ T2992] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 186.266642][ T2992] [ 186.268967][ T2992] write to 0xffff88811a55ec30 of 8 bytes by task 4771 on cpu 1: [ 186.276596][ T2992] dentry_unlink_inode+0x65/0x260 [ 186.281634][ T2992] d_delete+0x164/0x180 [ 186.285806][ T2992] d_delete_notify+0x32/0x100 [ 186.290489][ T2992] vfs_unlink+0x30b/0x420 [ 186.294840][ T2992] do_unlinkat+0x24e/0x480 [ 186.299273][ T2992] __x64_sys_unlink+0x2e/0x40 [ 186.303975][ T2992] x64_sys_call+0x2dc0/0x2ff0 [ 186.308663][ T2992] do_syscall_64+0xd2/0x200 [ 186.313185][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.319195][ T2992] [ 186.321867][ T2992] read to 0xffff88811a55ec30 of 8 bytes by task 2992 on cpu 0: [ 186.329410][ T2992] step_into+0x122/0x820 [ 186.333679][ T2992] walk_component+0x162/0x220 [ 186.338372][ T2992] path_lookupat+0xfe/0x2a0 [ 186.342895][ T2992] filename_lookup+0x147/0x340 [ 186.347677][ T2992] do_readlinkat+0x7d/0x320 [ 186.352203][ T2992] __x64_sys_readlink+0x47/0x60 [ 186.357071][ T2992] x64_sys_call+0x28da/0x2ff0 [ 186.361758][ T2992] do_syscall_64+0xd2/0x200 [ 186.366274][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.372188][ T2992] [ 186.374616][ T2992] value changed: 0xffff88811addd1f0 -> 0x0000000000000000 [ 186.381739][ T2992] [ 186.384147][ T2992] Reported by Kernel Concurrency Sanitizer on: [ 186.390301][ T2992] CPU: 0 UID: 0 PID: 2992 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.399593][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.409657][ T2992] ==================================================================