last executing test programs: 2.656229016s ago: executing program 3 (id=1617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f01040000000800"], 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r5}, 0x38) syz_emit_ethernet(0xaf, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c9"], 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r5, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a0000000100000000000000", @ANYRES32, @ANYBLOB="c346fc9ef8", @ANYRES64=0x0], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.624233461s ago: executing program 4 (id=1632): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x148100, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000003000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x80001, 0x0) 1.346976176s ago: executing program 3 (id=1638): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) 1.248436336s ago: executing program 3 (id=1640): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x4, &(0x7f00000003c0)=[{0x1, 0x7, 0xf9, 0x7}, {0xda9, 0x7, 0x96, 0x63}, {0x3, 0x0, 0x3, 0xffffffff}, {0x3, 0x0, 0x1, 0x5}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) getresgid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mremap(&(0x7f0000f18000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000ba5000/0x2000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000002c0)=""/156, &(0x7f0000000180)=0x9c) 1.107825128s ago: executing program 3 (id=1645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@euid_eq}, {@uid_gt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$eJzs3V9rW+UfAPDvSZvu7++3DsZQL6SwCydz6dr6Z4LgvBQdDvR+hjYro+kymnSsdbDtwt14I0MQcSC+AO/Fq+EL0Fcx0MGQUfTCm8hJT7qsaZquy9ps+XzgtM9zzkm+5znnPE++JychAQyssfRPLuLliPg6iTjUsmw4soVjq+utPLw2nU5J1Ouf/pVEks1rrp9k/w9klZci4tcvI07k2uNWl5bniuVyaSGrj9fmL49Xl5ZPXpwvzpZmS5cmp6ZOvzU1+e47b/esra+f++e7T+5+ePqrYyvf/nT/8O0kzsTBbFlrO57CjdbKWIxl+yQfZ9atONGDYP0k2e0NYFuGsn6ej3QMOBRDWa8HXnzXI6LeKp8tqAMvvkRXhwHVzAOa1/Y9ug5+bjz4YPUCqL39w6vvjcTexrXR/pXksSuj9Hp3tAfx0xg//3nndjpFl/chrvcgHkDTjZsRcWp4uH38S7Lxb/tONd483tz6GIP2+gO76W6a/7yxUf6TW8t/oj3/qQ9t0He3o3v/z93vQZiO0vzvvQ3z37Wha3Qoq/2vkfPlkwsXy6VTEfH/iDge+T1pfbP7OadX7tU7LWvN/9Ipjd/MBbPtuD+85/HHzBRrxadpc6sHNyNeeZT/JtE2/u9t5Lrr8990f5zbYoyjpTuvdlrWvf3ZxjT0PgOu/xjx2obHP3ks+Cb3J8cb58N486xo9/eto793ir/F9j8z6fHfv3n7R5PW+7XVJ4/xw95/S52Wbff8H0k+a5RHsnlXi7XawkTESPJx+/zJR49t1pvrp+0/fmzz8W+j839fRHy+xfbfOnKr46r9cPxnnuj4P3nh3kdffN8p/taO/5uN0vFsTvfxb1/2v/sGbn/PAQAAAAAAQP/JRcTBSHKFtXIuVyisfof3SOzPlSvV2okLlcVLM9H4ruxo5HPNO92HWj4PMZF9HrZZn1xXn4qIwxHxzdC+Rr0wXSnP7HbjAQAAAAAAAAAAAAAAAAAAoE8c6PD9/9QfQ7u9dcAz5ye/YXB17f+9+KUnoC95/YfBpf/D4NL/YXDp/zC49H8YXPo/DC79HwaX/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2XSqrzy8Np3WZ64sLc5VrpycKVXnCvOL04XpysLlwmylMlsuFaYr892er1ypXJ6YjMWr47VStTZeXVo+P19ZvFQ7f3G+OFs6X8rvSKsAAAAAAAAAAAAAAAAAAADg+VJdWp4rlsulhZ0o5GLnYvWw8H70/JmTnWxFsnaUf8l3aOCqbYUY7pfD9EwKv2W7ZmeCjuxGr+xQ2KUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA28F8AAAD//8YDIpQ=") 1.104615679s ago: executing program 3 (id=1646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syncfs(r1) 1.08876113s ago: executing program 3 (id=1647): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f01040000000800"], 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) syz_emit_ethernet(0xaf, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c9"], 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r4, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a0000000100000000000000", @ANYRES32, @ANYBLOB="c346fc9ef8", @ANYRES64=0x0], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 921.464055ms ago: executing program 0 (id=1654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a86dd604dd31800140600fe800000000000000000000000000020fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="76bea9aa5996ab0101bc0000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000000003c47000000ca3d78f90fabd3969be897ddbe37dc79bc7943fdb7932f1271ba7ff1cb9d66205c2d3fd0a4204a098d46f8c25d59d5deb6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESDEC=0x0], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d65646961744b000000180002800c00028005000100c40200000800014000000008090005006a73797a300073797a320000000014000000110000000000000000"], 0x94}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r9, 0x4b2f, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) getpid() sched_setaffinity(0x0, 0x0, 0x0) 786.884768ms ago: executing program 1 (id=1658): r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r0, r0, 0x0) 769.787709ms ago: executing program 1 (id=1659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syncfs(r1) 746.438721ms ago: executing program 1 (id=1660): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000100001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0) 745.801452ms ago: executing program 4 (id=1661): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 712.566175ms ago: executing program 1 (id=1663): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x1800, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 695.740316ms ago: executing program 1 (id=1664): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00000052000100000000000000000002030000080009"], 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x341, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'pim6reg0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0xff, 0x2, 0x78, 0x6, 0x0, 0x4, 0x6, 0x8, 0xffffffc0, 0x4, 0x8, 0x4, 0x9, 0x6, 0x7fff, 0xa, 0x76, 0x5, 0x0, 0x3, 0xb22a, 0x80000000, 0x8, 0x1000, 0x8, 0x6, 0x10da25c0, 0x1, 0x3ff, 0x4, 0x6, 0x7, 0x9, 0x7, 0x8, 0x599, 0x2, 0x5, 0x4, 0x4, 0xfffff001, 0x400, 0xff, 0x8, 0x6, 0x0, 0x3, 0x9, 0xffffffff, 0xde, 0xf90, 0x8, 0x6, 0xff, 0x5, 0xa, 0x4, 0x1000, 0xd, 0x5, 0x80000000, 0x9, 0x8, 0x1, 0x40, 0xa, 0xfffffff8, 0x9, 0xfffffffe, 0x10005, 0x401, 0x9, 0x0, 0x9, 0x9, 0x1, 0x9, 0x3, 0xfffffc00, 0xf6b, 0x7, 0x5f858532, 0x9, 0x4, 0xffff8001, 0x7, 0x7, 0x8, 0x4, 0x5, 0x7e, 0x8e0f, 0x3, 0x2, 0x7, 0x2, 0xc5, 0x8, 0xa, 0x8001, 0x8, 0x5d, 0x8, 0x7, 0x0, 0x7b70, 0xff, 0x3, 0x1, 0x8, 0x4, 0x6, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, 0x5, 0x9, 0xcd, 0x122, 0x40, 0x4, 0x4, 0xf9a, 0x1], "84745ebace3bd800779ed2df59c338370c8b99dff564b7b0cc9a979540ef70c532e5e49417c7680eaa63ac97b1ec0e1dce84758024406155894b5d4ffa74dbacd85a8b9eb2b5e4603155b31ea238f99f26d8de5a1c3b84778150a8c2ae0ec3488657f3577e6c299db9b6"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x800005, 0x3, 0xf06, 0x7, 0xa2, 0xb1, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f00000000c0)={0x2, 0xff, 0x7}) setsockopt$inet6_opts(r9, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) 695.186156ms ago: executing program 4 (id=1665): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) getitimer(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 657.28491ms ago: executing program 0 (id=1666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b00)='filemap_set_wb_err\x00', r1, 0x0, 0x83a7}, 0x18) lstat(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000140)=0x1c, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r5 = getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@euid_eq={'euid', 0x3d, r5}}, {@uid_gt={'uid>', r5}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$eJzs3V9rW+UfAPDvSZvu7++3DsZQL6SwCydz6dr6Z4LgvBQdDvR+hjYro+kymnSsdbDtwt14I0MQcSC+AO/Fq+EL0Fcx0MGQUfTCm8hJT7qsaZquy9ps+XzgtM9zzkm+5znnPE++JychAQyssfRPLuLliPg6iTjUsmw4soVjq+utPLw2nU5J1Ouf/pVEks1rrp9k/w9klZci4tcvI07k2uNWl5bniuVyaSGrj9fmL49Xl5ZPXpwvzpZmS5cmp6ZOvzU1+e47b/esra+f++e7T+5+ePqrYyvf/nT/8O0kzsTBbFlrO57CjdbKWIxl+yQfZ9atONGDYP0k2e0NYFuGsn6ej3QMOBRDWa8HXnzXI6LeKp8tqAMvvkRXhwHVzAOa1/Y9ug5+bjz4YPUCqL39w6vvjcTexrXR/pXksSuj9Hp3tAfx0xg//3nndjpFl/chrvcgHkDTjZsRcWp4uH38S7Lxb/tONd483tz6GIP2+gO76W6a/7yxUf6TW8t/oj3/qQ9t0He3o3v/z93vQZiO0vzvvQ3z37Wha3Qoq/2vkfPlkwsXy6VTEfH/iDge+T1pfbP7OadX7tU7LWvN/9Ipjd/MBbPtuD+85/HHzBRrxadpc6sHNyNeeZT/JtE2/u9t5Lrr8990f5zbYoyjpTuvdlrWvf3ZxjT0PgOu/xjx2obHP3ks+Cb3J8cb58N486xo9/eto793ir/F9j8z6fHfv3n7R5PW+7XVJ4/xw95/S52Wbff8H0k+a5RHsnlXi7XawkTESPJx+/zJR49t1pvrp+0/fmzz8W+j839fRHy+xfbfOnKr46r9cPxnnuj4P3nh3kdffN8p/taO/5uN0vFsTvfxb1/2v/sGbn/PAQAAAAAAQP/JRcTBSHKFtXIuVyisfof3SOzPlSvV2okLlcVLM9H4ruxo5HPNO92HWj4PMZF9HrZZn1xXn4qIwxHxzdC+Rr0wXSnP7HbjAQAAAAAAAAAAAAAAAAAAoE8c6PD9/9QfQ7u9dcAz5ye/YXB17f+9+KUnoC95/YfBpf/D4NL/YXDp/zC49H8YXPo/DC79HwaX/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2XSqrzy8Np3WZ64sLc5VrpycKVXnCvOL04XpysLlwmylMlsuFaYr892er1ypXJ6YjMWr47VStTZeXVo+P19ZvFQ7f3G+OFs6X8rvSKsAAAAAAAAAAAAAAAAAAADg+VJdWp4rlsulhZ0o5GLnYvWw8H70/JmTnWxFsnaUf8l3aOCqbYUY7pfD9EwKv2W7ZmeCjuxGr+xQ2KUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA28F8AAAD//8YDIpQ=") r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x10000005, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r9, 0x0, 0x4804}, 0x18) r10 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ioctl$TIOCGSOFTCAR(r8, 0x5414, &(0x7f0000000000)) getpid() syz_init_net_socket$llc(0x1a, 0x802, 0x0) 564.413018ms ago: executing program 4 (id=1667): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="c195172800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000700008802400078008000600480000000800050040"], 0x164}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000005}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x30000040}, 0x20040000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 512.974123ms ago: executing program 0 (id=1668): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x400, 0xf182, 0x25dfdbfc, {0x48, 0x1, 0x0, 0xffffffffffffffff, 0xec3, 0x0, 0x3, 0x0, 0x0, 0xd17f, 0x3ff}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44005) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0xa, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x200) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000280)={0x656b, 0x58, 0x3, 0x8, 0x8e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000002c0)={0x8c52, 0x200, 0x800, 0x3, 0x6, 0xce71}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1b, 0x4, "1d9f92b2e0af1219fb8d047c3f9a4f7efb39b322bec528"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "17bfc3a1eadf575fbc8e74f81e9e386dad379f3582bfbd22cd5760dd59002f154868f2d894be51cf2d98c192a6f640a51563613f90502286d0c2a10abc441f0c6163d5fdc3e378bd78b45d971045d692e77cc567bf39310097783ca7811cc75479782f489084485bf5f4a86a40fd8ad726d59032fe46357524815920a367a96925d56fc54371c9e1cf8c41cdc5f7c4fdf5ab938583acf7a3424c5553cf3dd0bc4dca1237e23343341aee3aafbcf7e8cdb488f155d8"}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x20000004) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000540)={'icmp\x00'}, &(0x7f0000000580)=0x1e) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x4}, 0x10) io_setup(0x6, &(0x7f0000002bc0)) io_setup(0xffff, &(0x7f0000002e40)) 464.975687ms ago: executing program 4 (id=1670): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b00)='filemap_set_wb_err\x00', r1, 0x0, 0x83a7}, 0x18) lstat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00'}, 0x18) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000140)=0x1c, 0x1) 434.873ms ago: executing program 1 (id=1671): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x148100, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000003000000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x80001, 0x0) 403.396073ms ago: executing program 4 (id=1672): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x148100, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000003000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x80001, 0x0) 379.208255ms ago: executing program 2 (id=1674): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00000052000100000000000000000002030000080009"], 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x341, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x800005, 0x3, 0xf06, 0x7, 0xa2, 0xb1, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 331.179689ms ago: executing program 0 (id=1675): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0xfffffffd, {0x0, 0x4, 0x0, 0x0, {0x4e22, 0x4e23, [0x0, 0x8005, 0x0, 0x4000000], [0x1], 0x0, [0x7]}, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000084d}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x1a43) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x88) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) write$cgroup_int(r8, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write$qrtrtun(r6, &(0x7f0000000240)="e853", 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0xa, @val=@tcx={@void, @value=r10}}, 0x1c) shutdown(r5, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x808, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r11 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 204.580332ms ago: executing program 0 (id=1676): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000100001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0) 203.531132ms ago: executing program 2 (id=1677): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x5) open(&(0x7f00000002c0)='.\x00', 0x5a800, 0x150) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180"], 0x14b0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) 186.365513ms ago: executing program 0 (id=1678): r0 = epoll_create1(0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x3) 176.132264ms ago: executing program 2 (id=1679): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0xfffffffd, {0x0, 0x4, 0x0, 0x0, {0x4e22, 0x4e23, [0x0, 0x8005, 0x0, 0x4000000], [0x1], 0x0, [0x7]}, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000084d}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x1a43) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x88) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) write$cgroup_int(r7, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) write$qrtrtun(r5, &(0x7f0000000240)="e853", 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0xa, @val=@tcx={@void, @value=r8}}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x808, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) 116.045939ms ago: executing program 2 (id=1680): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x4, &(0x7f00000003c0)=[{0x1, 0x7, 0xf9, 0x7}, {0xda9, 0x7, 0x96, 0x63}, {0x3, 0x0, 0x3, 0xffffffff}, {0x3, 0x0, 0x1, 0x5}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) syz_init_net_socket$x25(0x9, 0x5, 0x0) 47.074516ms ago: executing program 2 (id=1681): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000011c0)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") chdir(&(0x7f0000000140)='./file0\x00') link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 2 (id=1682): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff}], ['\x00']}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x3, 0x2, 0x10, r0, 0x2, '\x00', r1, r2, 0x1, 0x2, 0x1, 0x6}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r3, 0x0, 0x3ffff) sendfile(r6, r3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Ignoring removed nobh option [ 95.067036][ T6092] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.074317][ T6092] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.088307][ T6092] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.874: corrupted inode contents [ 95.100540][ T6092] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.874: mark_inode_dirty error [ 95.112087][ T6092] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.874: corrupted inode contents [ 95.125615][ T6092] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.874: mark_inode_dirty error [ 95.139128][ T6092] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.874: mark inode dirty (error -117) [ 95.160096][ T6092] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 95.176783][ T6092] EXT4-fs (loop0): 1 orphan inode deleted [ 95.254092][ T6104] loop0: detected capacity change from 0 to 512 [ 95.274644][ T6104] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.290114][ T6104] EXT4-fs (loop0): mount failed [ 95.311387][ T6104] pim6reg: entered allmulticast mode [ 95.330627][ T6104] pim6reg: left allmulticast mode [ 95.393610][ T6114] loop1: detected capacity change from 0 to 512 [ 95.411791][ T6114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.431616][ T6114] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.445275][ T6114] EXT4-fs (loop1): 1 truncate cleaned up [ 95.452953][ T6114] EXT4-fs (loop1): shut down requested (0) [ 95.468420][ T6114] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 95.477759][ T6114] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 95.955466][ T6140] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 95.999493][ T6143] EXT4-fs: Ignoring removed nobh option [ 96.008519][ T6143] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.019720][ T6143] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.033849][ T6143] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.889: corrupted inode contents [ 96.046681][ T6143] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.889: mark_inode_dirty error [ 96.058252][ T6143] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.889: corrupted inode contents [ 96.070470][ T6143] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.889: mark_inode_dirty error [ 96.082608][ T6143] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.889: mark inode dirty (error -117) [ 96.095482][ T6143] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 96.104601][ T29] kauditd_printk_skb: 2011 callbacks suppressed [ 96.104619][ T29] audit: type=1326 audit(1767222532.548:31910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc436fe65e7 code=0x7ffc0000 [ 96.134317][ T29] audit: type=1326 audit(1767222532.548:31911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc436f8b829 code=0x7ffc0000 [ 96.157682][ T29] audit: type=1326 audit(1767222532.548:31912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 96.183422][ T6143] EXT4-fs (loop3): 1 orphan inode deleted [ 96.199670][ T29] audit: type=1326 audit(1767222532.558:31913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc436fe65e7 code=0x7ffc0000 [ 96.223239][ T29] audit: type=1326 audit(1767222532.558:31914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc436f8b829 code=0x7ffc0000 [ 96.246942][ T29] audit: type=1326 audit(1767222532.558:31915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 96.270675][ T29] audit: type=1326 audit(1767222532.568:31916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc436fe65e7 code=0x7ffc0000 [ 96.294154][ T29] audit: type=1326 audit(1767222532.568:31917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc436f8b829 code=0x7ffc0000 [ 96.317520][ T29] audit: type=1326 audit(1767222532.568:31918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 96.341187][ T29] audit: type=1326 audit(1767222532.578:31919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc436fe65e7 code=0x7ffc0000 [ 96.369865][ T6143] EXT4-fs unmount: 25 callbacks suppressed [ 96.369880][ T6143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.416019][ T6156] netlink: 3272 bytes leftover after parsing attributes in process `syz.2.892'. [ 96.426460][ T6157] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 96.447553][ T6154] xt_hashlimit: max too large, truncated to 1048576 [ 96.556002][ T6162] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.571243][ T6162] EXT4-fs (loop1): mount failed [ 96.583329][ T6164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.598679][ T6164] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.622569][ T6164] EXT4-fs (loop2): 1 truncate cleaned up [ 96.628729][ T6164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.644024][ T6162] pim6reg: entered allmulticast mode [ 96.667459][ T6169] pim6reg: left allmulticast mode [ 96.701252][ T6164] EXT4-fs (loop2): shut down requested (0) [ 96.723661][ T6164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 96.734693][ T6164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 96.815070][ T6178] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 96.826708][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.034265][ T6191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.047719][ T6191] EXT4-fs (loop2): unable to read superblock [ 97.581079][ T6209] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.596365][ T6209] EXT4-fs (loop3): mount failed [ 97.611844][ T6209] pim6reg: entered allmulticast mode [ 97.618040][ T6209] pim6reg: left allmulticast mode [ 97.716059][ T6218] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.733131][ T6218] EXT4-fs (loop3): 1 truncate cleaned up [ 97.740175][ T6218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.754375][ T6218] EXT4-fs (loop3): shut down requested (0) [ 97.829047][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.863077][ T6227] EXT4-fs: Ignoring removed nobh option [ 97.910864][ T6227] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.932307][ T6231] FAULT_INJECTION: forcing a failure. [ 97.932307][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.945522][ T6231] CPU: 0 UID: 0 PID: 6231 Comm: syz.3.916 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.945548][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.945561][ T6231] Call Trace: [ 97.945567][ T6231] [ 97.945575][ T6231] __dump_stack+0x1d/0x30 [ 97.945599][ T6231] dump_stack_lvl+0x95/0xd0 [ 97.945621][ T6231] dump_stack+0x15/0x1b [ 97.945642][ T6231] should_fail_ex+0x265/0x280 [ 97.945681][ T6231] should_fail+0xb/0x20 [ 97.945702][ T6231] should_fail_usercopy+0x1a/0x20 [ 97.945787][ T6231] _copy_from_user+0x1c/0xb0 [ 97.945889][ T6231] copy_everything_to_user+0xde/0x680 [ 97.945917][ T6231] ? cred_has_capability+0x210/0x280 [ 97.945950][ T6231] do_ebt_get_ctl+0x2f9/0x1230 [ 97.946004][ T6231] ? avc_has_perm_noaudit+0xab/0x130 [ 97.946033][ T6231] ? avc_has_perm+0xf7/0x180 [ 97.946053][ T6231] ? lockref_put_return+0xf7/0x130 [ 97.946080][ T6231] ? __rcu_read_unlock+0x4f/0x70 [ 97.946125][ T6231] ? _raw_spin_lock_bh+0x56/0xb0 [ 97.946153][ T6231] ? _raw_spin_unlock_bh+0x36/0x40 [ 97.946232][ T6231] ? tcp_release_cb+0xf1/0x370 [ 97.946285][ T6231] ? _raw_spin_unlock_bh+0x36/0x40 [ 97.946345][ T6231] ? release_sock+0x116/0x150 [ 97.946367][ T6231] ? sockopt_release_sock+0x42/0x50 [ 97.946393][ T6231] ? do_ip_getsockopt+0xb92/0xfe0 [ 97.946501][ T6231] ? _parse_integer+0x27/0x40 [ 97.946521][ T6231] ? avc_has_perm_noaudit+0xab/0x130 [ 97.946542][ T6231] nf_getsockopt+0x190/0x1b0 [ 97.946612][ T6231] ip_getsockopt+0x137/0x180 [ 97.946637][ T6231] ? selinux_socket_getsockopt+0x110/0x1b0 [ 97.946662][ T6231] tcp_getsockopt+0xad/0xe0 [ 97.946684][ T6231] sock_common_getsockopt+0x60/0x70 [ 97.946792][ T6231] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 97.946885][ T6231] do_sock_getsockopt+0x1c4/0x210 [ 97.946952][ T6231] __x64_sys_getsockopt+0x11e/0x1a0 [ 97.946981][ T6231] x64_sys_call+0x2dc7/0x3000 [ 97.947003][ T6231] do_syscall_64+0xca/0x2b0 [ 97.947136][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.947161][ T6231] RIP: 0033:0x7f823f44f749 [ 97.947176][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.947194][ T6231] RSP: 002b:00007f823de8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 97.947293][ T6231] RAX: ffffffffffffffda RBX: 00007f823f6a6090 RCX: 00007f823f44f749 [ 97.947306][ T6231] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 97.947319][ T6231] RBP: 00007f823de8e090 R08: 0000200000000000 R09: 0000000000000000 [ 97.947333][ T6231] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 97.947346][ T6231] R13: 00007f823f6a6128 R14: 00007f823f6a6090 R15: 00007ffdd6084dd8 [ 97.947426][ T6231] [ 98.104128][ T6227] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.232000][ T6227] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.915: corrupted inode contents [ 98.251038][ T6227] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.915: mark_inode_dirty error [ 98.270386][ T6227] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.915: corrupted inode contents [ 98.310053][ T6227] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.915: mark_inode_dirty error [ 98.332080][ T6227] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.915: mark inode dirty (error -117) [ 98.439268][ T6227] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 98.448678][ T6227] EXT4-fs (loop2): 1 orphan inode deleted [ 98.454882][ T6227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.514178][ T6227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.671782][ T6253] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.695806][ T6253] EXT4-fs (loop2): mount failed [ 98.733854][ T6253] pim6reg: entered allmulticast mode [ 98.746835][ T6253] pim6reg: left allmulticast mode [ 98.890369][ T6262] netlink: 2 bytes leftover after parsing attributes in process `syz.0.925'. [ 99.037282][ T6277] set_capacity_and_notify: 11 callbacks suppressed [ 99.037300][ T6277] loop2: detected capacity change from 0 to 1024 [ 99.068299][ T6277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.085862][ T6277] EXT4-fs (loop2): unable to read superblock [ 99.180233][ T6283] pim6reg: entered allmulticast mode [ 99.188229][ T6283] pim6reg: left allmulticast mode [ 99.291506][ T6290] FAULT_INJECTION: forcing a failure. [ 99.291506][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.304668][ T6290] CPU: 0 UID: 0 PID: 6290 Comm: syz.3.934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.304728][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.304741][ T6290] Call Trace: [ 99.304749][ T6290] [ 99.304757][ T6290] __dump_stack+0x1d/0x30 [ 99.304782][ T6290] dump_stack_lvl+0x95/0xd0 [ 99.304816][ T6290] dump_stack+0x15/0x1b [ 99.304834][ T6290] should_fail_ex+0x265/0x280 [ 99.304977][ T6290] should_fail+0xb/0x20 [ 99.304993][ T6290] should_fail_usercopy+0x1a/0x20 [ 99.305021][ T6290] _copy_from_user+0x1c/0xb0 [ 99.305057][ T6290] ___sys_sendmsg+0xc1/0x1d0 [ 99.305093][ T6290] __x64_sys_sendmsg+0xd4/0x160 [ 99.305119][ T6290] x64_sys_call+0x17ba/0x3000 [ 99.305165][ T6290] do_syscall_64+0xca/0x2b0 [ 99.305265][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.305288][ T6290] RIP: 0033:0x7f823f44f749 [ 99.305303][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.305321][ T6290] RSP: 002b:00007f823deaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.305342][ T6290] RAX: ffffffffffffffda RBX: 00007f823f6a5fa0 RCX: 00007f823f44f749 [ 99.305387][ T6290] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 99.305398][ T6290] RBP: 00007f823deaf090 R08: 0000000000000000 R09: 0000000000000000 [ 99.305409][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.305419][ T6290] R13: 00007f823f6a6038 R14: 00007f823f6a5fa0 R15: 00007ffdd6084dd8 [ 99.305439][ T6290] [ 99.501107][ T6294] xt_hashlimit: max too large, truncated to 1048576 [ 99.727522][ T6297] xt_hashlimit: max too large, truncated to 1048576 [ 99.926880][ T6306] loop0: detected capacity change from 0 to 512 [ 99.954246][ T6306] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.966078][ T6306] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.973212][ T6306] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.939: Allocating blocks 41-42 which overlap fs metadata [ 99.976702][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 99.996238][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 100.005224][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 100.015019][ T6306] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.939: Failed to acquire dquot type 1 [ 100.027273][ T6306] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 100.048110][ T6310] SELinux: Context system_u:object is not valid (left unmapped). [ 100.058666][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 100.067654][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 100.076616][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 100.085800][ T6306] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.939: corrupted inode contents [ 100.105533][ T6310] ------------[ cut here ]------------ [ 100.111310][ T6310] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 100.131356][ T6310] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.4.940/6310 [ 100.142199][ T6310] Modules linked in: [ 100.146101][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.4.940 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.155794][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.165875][ T6310] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 100.172221][ T6310] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 100.172353][ T6306] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.939: mark_inode_dirty error [ 100.191904][ T6310] RSP: 0018:ffffc9000146f3a0 EFLAGS: 00010246 [ 100.191925][ T6310] RAX: ffff888101671b10 RBX: 00000000ffffffff RCX: 0000000000000000 [ 100.191942][ T6310] RDX: ffffffff865fbaa4 RSI: ffffffff8660fcf7 RDI: ffffffff86db6c10 [ 100.203457][ T6306] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.939: corrupted inode contents [ 100.209211][ T6310] RBP: ffff888104751040 R08: 0000007800000000 R09: 0000000000000000 [ 100.217491][ T6306] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.939: mark_inode_dirty error [ 100.225182][ T6310] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888104751000 [ 100.237198][ T6306] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.939: corrupted inode contents [ 100.244900][ T6310] R13: 0000000000000000 R14: ffff88810475104c R15: ffff888104751038 [ 100.244918][ T6310] FS: 00007fc435a366c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 100.292763][ T6310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.299350][ T6310] CR2: 00002000000054c0 CR3: 000000011b470000 CR4: 00000000003506f0 [ 100.307353][ T6310] Call Trace: [ 100.307886][ T6306] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 100.310670][ T6310] [ 100.319562][ T6306] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.939: corrupted inode contents [ 100.322097][ T6310] reg_set_min_max+0x1f2/0x260 [ 100.338623][ T6310] check_cond_jmp_op+0x13bd/0x1a80 [ 100.343795][ T6310] do_check+0x3347/0x81f0 [ 100.348142][ T6310] do_check_common+0xccf/0x1300 [ 100.353099][ T6310] bpf_check+0x2f98/0xc860 [ 100.356110][ T6306] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.939: mark_inode_dirty error [ 100.357525][ T6310] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 100.369237][ T6306] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 100.374730][ T6310] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 100.386217][ T6306] EXT4-fs (loop0): 1 truncate cleaned up [ 100.389332][ T6310] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 100.396133][ T6306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.400907][ T6310] ? pcpu_block_update+0x377/0x3b0 [ 100.418444][ T6310] ? _find_next_zero_bit+0x29/0xa0 [ 100.423591][ T6310] ? pcpu_block_refresh_hint+0x157/0x170 [ 100.429259][ T6310] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 100.435387][ T6310] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 100.441494][ T6310] ? css_rstat_updated+0xbb/0x280 [ 100.446528][ T6310] ? mod_memcg_state+0x182/0x270 [ 100.451646][ T6310] ? __rcu_read_unlock+0x4f/0x70 [ 100.456586][ T6310] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 100.462447][ T6310] ? bpf_prog_alloc+0x5b/0x150 [ 100.467256][ T6310] ? pcpu_alloc_noprof+0xd0d/0x1240 [ 100.472505][ T6310] ? should_fail_ex+0x30/0x280 [ 100.477327][ T6310] ? __kmalloc_noprof+0x2b4/0x5a0 [ 100.482375][ T6310] ? security_bpf_prog_load+0x60/0x140 [ 100.487877][ T6310] ? selinux_bpf_prog_load+0xad/0xd0 [ 100.493256][ T6310] ? security_bpf_prog_load+0x9e/0x140 [ 100.498721][ T6310] bpf_prog_load+0xf6e/0x1140 [ 100.503490][ T6310] ? security_bpf+0x2b/0x90 [ 100.508071][ T6310] __sys_bpf+0x469/0x7c0 [ 100.512372][ T6310] __x64_sys_bpf+0x41/0x50 [ 100.516968][ T6310] x64_sys_call+0x28e1/0x3000 [ 100.521693][ T6310] do_syscall_64+0xca/0x2b0 [ 100.526260][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.532190][ T6310] RIP: 0033:0x7fc436fef749 [ 100.536652][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.556416][ T6310] RSP: 002b:00007fc435a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.564874][ T6310] RAX: ffffffffffffffda RBX: 00007fc437246090 RCX: 00007fc436fef749 [ 100.572972][ T6310] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 100.581063][ T6310] RBP: 00007fc437073f91 R08: 0000000000000000 R09: 0000000000000000 [ 100.589030][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.597141][ T6310] R13: 00007fc437246128 R14: 00007fc437246090 R15: 00007ffda9da8658 [ 100.605164][ T6310] [ 100.608172][ T6310] ---[ end trace 0000000000000000 ]--- [ 100.675363][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 100.684762][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 100.694549][ T6306] syz.0.939 (6306) used greatest stack depth: 9952 bytes left [ 100.707509][ T6325] loop3: detected capacity change from 0 to 512 [ 100.714299][ T6325] EXT4-fs: Ignoring removed nobh option [ 100.731253][ T6325] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.741340][ T6325] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.944: corrupted inode contents [ 100.754929][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.765887][ T6325] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.944: mark_inode_dirty error [ 100.797776][ T6325] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.944: corrupted inode contents [ 100.809979][ T6325] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.944: mark_inode_dirty error [ 100.822164][ T6325] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.944: mark inode dirty (error -117) [ 100.837795][ T6325] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 100.847212][ T6325] EXT4-fs (loop3): 1 orphan inode deleted [ 100.853700][ T6325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.882606][ T6334] loop0: detected capacity change from 0 to 512 [ 100.889633][ T6325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.899501][ T6334] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.911041][ T6334] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.924669][ T6334] EXT4-fs (loop0): 1 truncate cleaned up [ 100.931090][ T6334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.947358][ T6334] EXT4-fs (loop0): shut down requested (0) [ 100.956232][ T6343] loop3: detected capacity change from 0 to 512 [ 100.973127][ T6343] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.988357][ T6343] EXT4-fs (loop3): mount failed [ 101.007084][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.013057][ T6343] pim6reg: entered allmulticast mode [ 101.031019][ T6343] pim6reg: left allmulticast mode [ 101.055739][ T6349] loop0: detected capacity change from 0 to 512 [ 101.062981][ T6349] EXT4-fs: Ignoring removed nobh option [ 101.091514][ T6349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.104218][ T6349] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.104514][ T6351] loop3: detected capacity change from 0 to 512 [ 101.121233][ T29] kauditd_printk_skb: 1351 callbacks suppressed [ 101.121246][ T29] audit: type=1326 audit(1767222537.568:33264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18b2b4df90 code=0x7ffc0000 [ 101.151277][ T29] audit: type=1326 audit(1767222537.568:33265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f18b2b4e497 code=0x7ffc0000 [ 101.174972][ T29] audit: type=1326 audit(1767222537.568:33266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18b2b4df90 code=0x7ffc0000 [ 101.181079][ T6351] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 101.198402][ T29] audit: type=1326 audit(1767222537.568:33267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 101.208458][ T6351] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.231682][ T29] audit: type=1326 audit(1767222537.568:33268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 101.246707][ T6351] EXT4-fs (loop3): mount failed [ 101.269709][ T29] audit: type=1326 audit(1767222537.568:33269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 101.298343][ T29] audit: type=1326 audit(1767222537.568:33270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 101.321742][ T29] audit: type=1326 audit(1767222537.568:33271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 101.345151][ T29] audit: type=1326 audit(1767222537.568:33272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6348 comm="syz.0.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 101.370188][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.423860][ T6351] pim6reg: entered allmulticast mode [ 101.436204][ T6351] pim6reg: left allmulticast mode [ 101.817236][ T6402] loop1: detected capacity change from 0 to 512 [ 101.861271][ T6402] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.884826][ T6402] EXT4-fs (loop1): mount failed [ 101.903814][ T6402] pim6reg: entered allmulticast mode [ 101.918454][ T6402] pim6reg: left allmulticast mode [ 102.006362][ T6413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.029183][ T6416] Driver unsupported XDP return value 0 on prog (id 754) dev N/A, expect packet loss! [ 102.053629][ T6413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.073298][ T6419] __nla_validate_parse: 1 callbacks suppressed [ 102.073310][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 102.088404][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 102.098830][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 102.107795][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 102.120879][ T6419] vlan2: entered allmulticast mode [ 102.139213][ T6413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.187058][ T6413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.283697][ T2089] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.308625][ T6424] 9p: Bad value for 'rfdno' [ 102.315794][ T2089] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.331720][ T2089] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.347706][ T6426] SELinux: policydb magic number 0x69766564 does not match expected magic number 0xf97cff8c [ 102.369836][ T2089] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.378066][ T6426] SELinux: failed to load policy [ 102.397379][ T6426] loop0: detected capacity change from 0 to 764 [ 102.478172][ T6430] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.501598][ T6430] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 102.582400][ T6436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.972'. [ 102.622907][ T6437] loop1: detected capacity change from 0 to 1024 [ 102.629797][ T6437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.636745][ T6437] EXT4-fs (loop1): unable to read superblock [ 102.901107][ T6446] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 102.916004][ T6446] EXT4-fs (loop3): mount failed [ 102.939819][ T6446] pim6reg: entered allmulticast mode [ 102.950939][ T6446] pim6reg: left allmulticast mode [ 103.341974][ T6462] 9p: Bad value for 'rfdno' [ 103.404004][ T6471] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 103.418273][ T6472] netlink: 3272 bytes leftover after parsing attributes in process `syz.3.985'. [ 103.423257][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.984'. [ 103.461584][ T6473] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 103.540919][ T6480] netlink: 3272 bytes leftover after parsing attributes in process `syz.2.988'. [ 104.387961][ T6513] set_capacity_and_notify: 1 callbacks suppressed [ 104.387976][ T6513] loop2: detected capacity change from 0 to 32768 [ 104.438130][ T6523] loop1: detected capacity change from 0 to 512 [ 104.445874][ T6523] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.453469][ T5935] loop2: p1 p3 < > [ 104.462842][ T6523] EXT4-fs (loop1): 1 truncate cleaned up [ 104.470362][ T6523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.485400][ T6523] EXT4-fs (loop1): shut down requested (0) [ 104.493219][ T6513] loop2: p1 p3 < > [ 104.556511][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.577952][ T6527] loop2: detected capacity change from 0 to 1024 [ 104.593655][ T6527] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 104.608478][ T5935] udevd[5935]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 104.622400][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 104.650031][ T6529] loop1: detected capacity change from 0 to 512 [ 104.660082][ T6529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.672081][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1005'. [ 104.687267][ T5935] udevd[5935]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 104.698429][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 104.702050][ T6529] EXT4-fs (loop1): 1 truncate cleaned up [ 104.733071][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.752804][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 104.796771][ T6540] program syz.2.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.806356][ T6540] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 104.807554][ T6529] EXT4-fs (loop1): shut down requested (0) [ 104.822648][ T6540] lo speed is unknown, defaulting to 1000 [ 104.828639][ T6540] lo speed is unknown, defaulting to 1000 [ 104.838763][ T6540] lo speed is unknown, defaulting to 1000 [ 104.849370][ T6540] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.860700][ T6540] lo speed is unknown, defaulting to 1000 [ 104.866739][ T6540] lo speed is unknown, defaulting to 1000 [ 104.873256][ T6540] lo speed is unknown, defaulting to 1000 [ 104.885185][ T6540] lo speed is unknown, defaulting to 1000 [ 104.892130][ T6540] lo speed is unknown, defaulting to 1000 [ 104.898374][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.921655][ T6545] 9p: Bad value for 'rfdno' [ 104.989360][ T6552] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 105.068503][ T6556] lo speed is unknown, defaulting to 1000 [ 105.184015][ T6556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6556 comm=syz.3.1013 [ 105.196597][ T6556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6556 comm=syz.3.1013 [ 105.278948][ T6560] loop3: detected capacity change from 0 to 1024 [ 105.290252][ T6560] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 105.317066][ T6560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.346255][ T6566] loop0: detected capacity change from 0 to 512 [ 105.366674][ T6566] EXT4-fs: Ignoring removed nobh option [ 105.374970][ T6566] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.384110][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.394557][ T6566] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.408027][ T6566] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1014: corrupted inode contents [ 105.420207][ T6566] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.1014: mark_inode_dirty error [ 105.431952][ T6566] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1014: corrupted inode contents [ 105.444650][ T6566] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.1014: mark_inode_dirty error [ 105.456873][ T6566] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.1014: mark inode dirty (error -117) [ 105.470228][ T6566] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 105.479430][ T6566] EXT4-fs (loop0): 1 orphan inode deleted [ 105.489363][ T6566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.518550][ T6566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.602821][ T6577] loop0: detected capacity change from 0 to 1024 [ 105.612837][ T6577] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 105.681337][ T6580] loop3: detected capacity change from 0 to 128 [ 105.722402][ T6580] Process accounting resumed [ 105.732470][ T6580] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 105.739993][ T6580] FAT-fs (loop3): Filesystem has been set read-only [ 105.751497][ T3421] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 105.813627][ T6589] netlink: 'syz.0.1019': attribute type 30 has an invalid length. [ 105.815736][ T6588] 9p: Bad value for 'rfdno' [ 105.891067][ T6599] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 105.906487][ T6600] loop2: detected capacity change from 0 to 512 [ 105.913149][ T6600] EXT4-fs: Ignoring removed nobh option [ 105.920615][ T6600] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.927626][ T6600] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1026: corrupted inode contents [ 105.940461][ T6600] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.1026: mark_inode_dirty error [ 105.955068][ T6600] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1026: corrupted inode contents [ 105.967897][ T6600] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.1026: mark_inode_dirty error [ 105.983467][ T6600] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.1026: mark inode dirty (error -117) [ 105.996289][ T6600] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 106.005641][ T6600] EXT4-fs (loop2): 1 orphan inode deleted [ 106.012058][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.033294][ T6600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.053925][ T6612] loop2: detected capacity change from 0 to 2048 [ 106.062253][ T6612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.087217][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.327405][ T6626] 9p: Bad value for 'rfdno' [ 106.396196][ T29] kauditd_printk_skb: 1270 callbacks suppressed [ 106.396209][ T29] audit: type=1326 audit(1767222542.838:34541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.426422][ T29] audit: type=1326 audit(1767222542.838:34542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.450017][ T29] audit: type=1326 audit(1767222542.838:34543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.473584][ T29] audit: type=1326 audit(1767222542.838:34544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.497066][ T29] audit: type=1326 audit(1767222542.838:34545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.520644][ T29] audit: type=1326 audit(1767222542.838:34546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.544216][ T29] audit: type=1326 audit(1767222542.838:34547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.568130][ T29] audit: type=1326 audit(1767222542.838:34548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.591916][ T29] audit: type=1326 audit(1767222542.838:34549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.615425][ T29] audit: type=1326 audit(1767222542.838:34550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 106.883862][ T6652] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 106.904041][ T6652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.964230][ T6670] EXT4-fs: Ignoring removed nobh option [ 106.973663][ T6652] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.984544][ T6670] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.993258][ T6670] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1051: corrupted inode contents [ 107.027676][ T6670] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.1051: mark_inode_dirty error [ 107.046297][ T6652] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 107.052905][ T6652] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.060605][ T6652] vhci_hcd vhci_hcd.0: Device attached [ 107.086833][ T6652] __nla_validate_parse: 6 callbacks suppressed [ 107.086847][ T6652] netlink: 188 bytes leftover after parsing attributes in process `gtp'. [ 107.120624][ T6670] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1051: corrupted inode contents [ 107.174130][ T6670] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.1051: mark_inode_dirty error [ 107.202070][ T6670] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.1051: mark inode dirty (error -117) [ 107.242813][ T6670] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 107.254330][ T36] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 107.281599][ T6670] EXT4-fs (loop2): 1 orphan inode deleted [ 107.303905][ T6670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.328437][ T36] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 107.421162][ T6670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.499136][ T6677] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 107.532085][ T3421] kernel read not supported for file 530/task/531/auxv (pid: 3421 comm: kworker/0:4) [ 107.609156][ T6673] vhci_hcd: connection reset by peer [ 107.620162][ T2089] vhci_hcd vhci_hcd.1: stop threads [ 107.625421][ T2089] vhci_hcd vhci_hcd.1: release socket [ 107.625878][ T6694] EXT4-fs: inline encryption not supported [ 107.630912][ T2089] vhci_hcd vhci_hcd.1: disconnect device [ 107.644376][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.671661][ T6694] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1058: Allocating blocks 385-513 which overlap fs metadata [ 107.704406][ T6694] EXT4-fs (loop2): pa ffff888107e05230: logic 16, phys. 129, len 24 [ 107.712492][ T6694] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 107.723767][ T6694] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 107.742892][ T6707] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.760461][ T6707] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.780524][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.791181][ T6698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.844972][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.882386][ T6718] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 107.924158][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.937051][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.955145][ T6722] tipc: Trying to set illegal importance in message [ 108.143235][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.202216][ T6736] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.244425][ T6736] EXT4-fs (loop1): mount failed [ 108.399903][ T6756] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 108.452626][ T6763] netlink: 'syz.1.1081': attribute type 28 has an invalid length. [ 108.465072][ T6763] bridge_slave_0: entered promiscuous mode [ 108.471494][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 108.480419][ T6763] bridge_slave_0: left promiscuous mode [ 108.487699][ T6763] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1081'. [ 108.572259][ T6770] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.588192][ T6770] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.601631][ T6770] EXT4-fs (loop1): 1 truncate cleaned up [ 108.607848][ T6770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.624234][ T6770] EXT4-fs (loop1): shut down requested (0) [ 108.646348][ T6770] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 108.655547][ T6770] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 108.706893][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.959624][ T6784] FAULT_INJECTION: forcing a failure. [ 108.959624][ T6784] name fail_futex, interval 1, probability 0, space 0, times 1 [ 108.972501][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.4.1089 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.972530][ T6784] Tainted: [W]=WARN [ 108.972537][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.972555][ T6784] Call Trace: [ 108.972560][ T6784] [ 108.972579][ T6784] __dump_stack+0x1d/0x30 [ 108.972601][ T6784] dump_stack_lvl+0x95/0xd0 [ 108.972619][ T6784] dump_stack+0x15/0x1b [ 108.972635][ T6784] should_fail_ex+0x265/0x280 [ 108.972657][ T6784] should_fail+0xb/0x20 [ 108.972740][ T6784] get_futex_key+0x130/0xc00 [ 108.972770][ T6784] ? enqueue_hrtimer+0x8a/0x160 [ 108.972849][ T6784] futex_wait_setup+0x4a/0x3e0 [ 108.972871][ T6784] __futex_wait+0x9d/0x260 [ 108.972889][ T6784] ? __pfx_futex_wake_mark+0x10/0x10 [ 108.972972][ T6784] futex_wait+0x9d/0x1d0 [ 108.972991][ T6784] do_futex+0x2bf/0x380 [ 108.973015][ T6784] __se_sys_futex+0x2ed/0x360 [ 108.973041][ T6784] __x64_sys_futex+0x78/0x90 [ 108.973067][ T6784] x64_sys_call+0x2bc2/0x3000 [ 108.973096][ T6784] do_syscall_64+0xca/0x2b0 [ 108.973125][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.973143][ T6784] RIP: 0033:0x7fc436fef749 [ 108.973220][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.973237][ T6784] RSP: 002b:00007fc435a57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.973257][ T6784] RAX: ffffffffffffffda RBX: 00007fc437245fa0 RCX: 00007fc436fef749 [ 108.973269][ T6784] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000020000000cffc [ 108.973280][ T6784] RBP: 00007fc435a57090 R08: 0000000000000000 R09: 0000000000000000 [ 108.973292][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.973358][ T6784] R13: 00007fc437246038 R14: 00007fc437245fa0 R15: 00007ffda9da8658 [ 108.973450][ T6784] [ 109.236664][ T6786] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 110.363524][ T6838] set_capacity_and_notify: 12 callbacks suppressed [ 110.363538][ T6838] loop2: detected capacity change from 0 to 1024 [ 110.400166][ T6838] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 110.423724][ T6840] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1107'. [ 110.477740][ T6844] loop2: detected capacity change from 0 to 512 [ 110.494690][ T6844] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.505236][ T6847] SET target dimension over the limit! [ 110.512621][ T6847] FAULT_INJECTION: forcing a failure. [ 110.512621][ T6847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.525864][ T6847] CPU: 1 UID: 0 PID: 6847 Comm: syz.0.1110 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.525904][ T6847] Tainted: [W]=WARN [ 110.525911][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.525924][ T6847] Call Trace: [ 110.525931][ T6847] [ 110.525950][ T6847] __dump_stack+0x1d/0x30 [ 110.525975][ T6847] dump_stack_lvl+0x95/0xd0 [ 110.525996][ T6847] dump_stack+0x15/0x1b [ 110.526015][ T6847] should_fail_ex+0x265/0x280 [ 110.526039][ T6847] should_fail+0xb/0x20 [ 110.526070][ T6847] should_fail_usercopy+0x1a/0x20 [ 110.526090][ T6847] _copy_to_user+0x20/0xa0 [ 110.526183][ T6847] simple_read_from_buffer+0xb5/0x130 [ 110.526202][ T6847] proc_fail_nth_read+0x10e/0x150 [ 110.526287][ T6847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.526312][ T6847] vfs_read+0x1a8/0x770 [ 110.526328][ T6847] ? __rcu_read_unlock+0x4f/0x70 [ 110.526349][ T6847] ? __fget_files+0x184/0x1c0 [ 110.526402][ T6847] ? mutex_lock+0x58/0x90 [ 110.526424][ T6847] ksys_read+0xda/0x1a0 [ 110.526498][ T6847] __x64_sys_read+0x40/0x50 [ 110.526516][ T6847] x64_sys_call+0x2889/0x3000 [ 110.526566][ T6847] do_syscall_64+0xca/0x2b0 [ 110.526595][ T6847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.526611][ T6847] RIP: 0033:0x7f18b2b4e15c [ 110.526625][ T6847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.526642][ T6847] RSP: 002b:00007f18b15af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.526664][ T6847] RAX: ffffffffffffffda RBX: 00007f18b2da5fa0 RCX: 00007f18b2b4e15c [ 110.526678][ T6847] RDX: 000000000000000f RSI: 00007f18b15af0a0 RDI: 0000000000000004 [ 110.526691][ T6847] RBP: 00007f18b15af090 R08: 0000000000000000 R09: 0000000000000000 [ 110.526702][ T6847] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.526714][ T6847] R13: 00007f18b2da6038 R14: 00007f18b2da5fa0 R15: 00007ffceb576968 [ 110.526730][ T6847] [ 110.727327][ T6844] EXT4-fs (loop2): 1 truncate cleaned up [ 110.733540][ T6844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.751307][ T6844] EXT4-fs (loop2): shut down requested (0) [ 110.784880][ T6844] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 110.793779][ T6844] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 110.832861][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.012734][ T6861] netlink: 3272 bytes leftover after parsing attributes in process `syz.4.1115'. [ 111.094563][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1117'. [ 111.152089][ T6873] netlink: 3272 bytes leftover after parsing attributes in process `syz.2.1120'. [ 111.473926][ T6886] loop3: detected capacity change from 0 to 1024 [ 111.481321][ T29] kauditd_printk_skb: 1339 callbacks suppressed [ 111.481335][ T29] audit: type=1326 audit(1767222547.928:35889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f823f4465e7 code=0x7ffc0000 [ 111.510669][ T6886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.511012][ T29] audit: type=1326 audit(1767222547.928:35890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823f3eb829 code=0x7ffc0000 [ 111.518116][ T6886] EXT4-fs (loop3): unable to read superblock [ 111.540885][ T29] audit: type=1326 audit(1767222547.928:35891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 111.541281][ T29] audit: type=1326 audit(1767222547.928:35892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f823f4465e7 code=0x7ffc0000 [ 111.593814][ T29] audit: type=1326 audit(1767222547.928:35893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823f3eb829 code=0x7ffc0000 [ 111.617211][ T29] audit: type=1326 audit(1767222547.928:35894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 111.640731][ T29] audit: type=1326 audit(1767222547.938:35895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f823f4465e7 code=0x7ffc0000 [ 111.664107][ T29] audit: type=1326 audit(1767222547.938:35896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823f3eb829 code=0x7ffc0000 [ 111.687606][ T29] audit: type=1326 audit(1767222547.938:35897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 111.711637][ T29] audit: type=1326 audit(1767222547.948:35898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f823f4465e7 code=0x7ffc0000 [ 111.757859][ T6894] loop0: detected capacity change from 0 to 1024 [ 111.771129][ T6894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 111.780690][ T6894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.796699][ T6894] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1126: bg 0: block 88: padding at end of block bitmap is not set [ 111.814469][ T6894] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1126'. [ 111.840624][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.074664][ T6907] netlink: 3272 bytes leftover after parsing attributes in process `syz.2.1129'. [ 112.191703][ T6925] loop0: detected capacity change from 0 to 512 [ 112.213248][ T6925] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1137: bad orphan inode 15 [ 112.225294][ T6925] ext4_test_bit(bit=14, block=5) = 0 [ 112.231499][ T6925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.246563][ T6925] EXT4-fs warning (device loop0): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 112.292555][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.349871][ T36] usb 3-1: enqueue for inactive port 0 [ 112.368526][ T36] usb 3-1: enqueue for inactive port 0 [ 112.414553][ T6940] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.459886][ T36] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 112.484196][ T6943] hub 2-0:1.0: USB hub found [ 112.489193][ T6943] hub 2-0:1.0: 8 ports detected [ 112.533876][ T6950] tipc: Started in network mode [ 112.538792][ T6950] tipc: Node identity ac14140f, cluster identity 4711 [ 112.546908][ T6950] tipc: New replicast peer: 255.255.255.255 [ 112.553013][ T6950] tipc: Enabled bearer , priority 10 [ 112.559717][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 112.568783][ T6950] tipc: Disabling bearer [ 112.621245][ T6961] loop1: detected capacity change from 0 to 1024 [ 112.628176][ T6961] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 112.636627][ T6962] loop2: detected capacity change from 0 to 1024 [ 112.643674][ T6962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.650626][ T6962] EXT4-fs (loop2): unable to read superblock [ 112.681038][ T6966] loop1: detected capacity change from 0 to 256 [ 113.157747][ T6993] ip6t_rpfilter: unknown options [ 113.235816][ T6999] loop0: detected capacity change from 0 to 1024 [ 113.242874][ T6999] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 114.138333][ T7033] pim6reg: entered allmulticast mode [ 114.146471][ T7033] pim6reg: left allmulticast mode [ 114.361415][ T7044] loop2: detected capacity change from 0 to 1024 [ 114.373528][ T7044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.380794][ T7044] EXT4-fs (loop2): unable to read superblock [ 115.302890][ T7076] netlink: 3272 bytes leftover after parsing attributes in process `syz.3.1191'. [ 115.359360][ T7080] SELinux: policydb magic number 0x69766564 does not match expected magic number 0xf97cff8c [ 115.373113][ T7080] SELinux: failed to load policy [ 115.410652][ T7085] xt_hashlimit: max too large, truncated to 1048576 [ 115.445896][ T7087] set_capacity_and_notify: 1 callbacks suppressed [ 115.445911][ T7087] loop3: detected capacity change from 0 to 1024 [ 115.459284][ T7087] EXT4-fs: inline encryption not supported [ 115.469649][ T7089] loop1: detected capacity change from 0 to 1024 [ 115.476327][ T7089] EXT4-fs: inline encryption not supported [ 115.477590][ T7087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.498774][ T7087] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1195: Allocating blocks 385-513 which overlap fs metadata [ 115.514475][ T7089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.529674][ T7089] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1196: Allocating blocks 385-513 which overlap fs metadata [ 115.543762][ T7086] EXT4-fs (loop3): pa ffff888107e92620: logic 16, phys. 129, len 24 [ 115.551794][ T7086] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 115.562519][ T7089] EXT4-fs (loop1): pa ffff888107e92700: logic 16, phys. 129, len 24 [ 115.570562][ T7089] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 115.582146][ T7089] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 115.598920][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.632680][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.823032][ T7113] loop3: detected capacity change from 0 to 1024 [ 115.829985][ T7113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.837176][ T7113] EXT4-fs (loop3): unable to read superblock [ 115.981475][ T7123] netlink: 3272 bytes leftover after parsing attributes in process `syz.4.1205'. [ 116.510059][ T29] kauditd_printk_skb: 3200 callbacks suppressed [ 116.510074][ T29] audit: type=1326 audit(1767222552.958:39099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.3.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f823f4465e7 code=0x7ffc0000 [ 116.627629][ T7152] loop3: detected capacity change from 0 to 128 [ 116.652728][ T29] audit: type=1326 audit(1767222553.098:39100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.730910][ T29] audit: type=1326 audit(1767222553.098:39101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.754509][ T29] audit: type=1326 audit(1767222553.098:39102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.778129][ T29] audit: type=1326 audit(1767222553.118:39103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.801794][ T29] audit: type=1326 audit(1767222553.118:39104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.825319][ T29] audit: type=1326 audit(1767222553.118:39105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.848854][ T29] audit: type=1326 audit(1767222553.118:39106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.872455][ T29] audit: type=1326 audit(1767222553.118:39107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.895957][ T29] audit: type=1326 audit(1767222553.118:39108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 116.970101][ T7161] loop0: detected capacity change from 0 to 1024 [ 117.010591][ T7161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.050549][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.451628][ T7184] loop2: detected capacity change from 0 to 1024 [ 117.458675][ T7184] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 117.595756][ T7192] loop1: detected capacity change from 0 to 1024 [ 117.602868][ T7192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.610137][ T7192] EXT4-fs (loop1): unable to read superblock [ 117.993050][ T7200] loop0: detected capacity change from 0 to 1024 [ 118.012365][ T7200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.039916][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.076546][ T7208] loop0: detected capacity change from 0 to 512 [ 118.083603][ T7208] EXT4-fs: Ignoring removed nobh option [ 118.090371][ T7208] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.097168][ T7208] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.110612][ T7208] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1234: corrupted inode contents [ 118.123032][ T7208] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.1234: mark_inode_dirty error [ 118.134779][ T7208] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1234: corrupted inode contents [ 118.147126][ T7208] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.1234: mark_inode_dirty error [ 118.159522][ T7208] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.1234: mark inode dirty (error -117) [ 118.172437][ T7208] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 118.181497][ T7208] EXT4-fs (loop0): 1 orphan inode deleted [ 118.187646][ T7208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.207883][ T7208] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.232843][ T7212] loop0: detected capacity change from 0 to 1024 [ 118.239714][ T7212] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 118.288739][ T7214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1236'. [ 118.376530][ T7229] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 118.391517][ T7231] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.403171][ T7231] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.416512][ T7231] EXT4-fs (loop0): 1 truncate cleaned up [ 118.424359][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.438508][ T7231] EXT4-fs (loop0): shut down requested (0) [ 118.444880][ T7235] EXT4-fs: Ignoring removed nobh option [ 118.452058][ T7235] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.458922][ T7235] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.461414][ T7231] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 118.472129][ T7235] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1245: corrupted inode contents [ 118.481692][ T7231] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 118.501499][ T7235] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.1245: mark_inode_dirty error [ 118.514079][ T7235] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1245: corrupted inode contents [ 118.526276][ T7235] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.1245: mark_inode_dirty error [ 118.538533][ T7235] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.1245: mark inode dirty (error -117) [ 118.551460][ T7235] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 118.560606][ T7235] EXT4-fs (loop3): 1 orphan inode deleted [ 118.567698][ T7235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.580850][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.591413][ T7235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.846058][ T7248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.852865][ T7248] EXT4-fs (loop3): unable to read superblock [ 118.882268][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1249'. [ 119.237756][ T7266] EXT4-fs: Ignoring removed nobh option [ 119.245198][ T7266] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.252138][ T7266] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1257: corrupted inode contents [ 119.264399][ T7266] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.1257: mark_inode_dirty error [ 119.276207][ T7266] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1257: corrupted inode contents [ 119.288502][ T7266] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.1257: mark_inode_dirty error [ 119.300614][ T7266] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.1257: mark inode dirty (error -117) [ 119.314083][ T7266] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 119.323171][ T7266] EXT4-fs (loop2): 1 orphan inode deleted [ 119.329187][ T7266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 119.349082][ T7266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.514419][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1261'. [ 120.079938][ T7300] 9p: Bad value for 'wfdno' [ 120.370051][ T7318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.381173][ T7318] EXT4-fs (loop2): unable to read superblock [ 120.765428][ T7342] set_capacity_and_notify: 10 callbacks suppressed [ 120.765440][ T7342] loop3: detected capacity change from 0 to 1024 [ 120.778862][ T7342] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 120.803387][ T7345] loop3: detected capacity change from 0 to 256 [ 120.843308][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.851946][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.003411][ T7351] netlink: 3272 bytes leftover after parsing attributes in process `syz.1.1288'. [ 121.282969][ T7363] loop0: detected capacity change from 0 to 512 [ 121.290791][ T7363] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.327308][ T7363] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.341338][ T7363] EXT4-fs (loop0): 1 truncate cleaned up [ 121.347463][ T7363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.361632][ T7363] EXT4-fs (loop0): shut down requested (0) [ 121.371995][ T7363] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 121.382837][ T7363] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 121.413167][ T7371] xt_hashlimit: max too large, truncated to 1048576 [ 121.432157][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.442859][ T7375] loop1: detected capacity change from 0 to 256 [ 121.642606][ T7390] loop1: detected capacity change from 0 to 1024 [ 121.649119][ T29] kauditd_printk_skb: 3027 callbacks suppressed [ 121.649132][ T29] audit: type=1326 audit(1767222558.088:42136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7f98865e7 code=0x7ffc0000 [ 121.649579][ T7390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.655613][ T29] audit: type=1326 audit(1767222558.088:42137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7f982b829 code=0x7ffc0000 [ 121.686414][ T7390] EXT4-fs (loop1): unable to read superblock [ 121.709201][ T29] audit: type=1326 audit(1767222558.088:42138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe7f988f749 code=0x7ffc0000 [ 121.740180][ T29] audit: type=1326 audit(1767222558.188:42139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7f98865e7 code=0x7ffc0000 [ 121.765169][ T29] audit: type=1326 audit(1767222558.188:42140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7f982b829 code=0x7ffc0000 [ 121.788662][ T29] audit: type=1326 audit(1767222558.188:42141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe7f988f749 code=0x7ffc0000 [ 121.812888][ T29] audit: type=1326 audit(1767222558.188:42142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7f98865e7 code=0x7ffc0000 [ 121.836305][ T29] audit: type=1326 audit(1767222558.188:42143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7f982b829 code=0x7ffc0000 [ 121.859741][ T29] audit: type=1326 audit(1767222558.188:42144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe7f988f749 code=0x7ffc0000 [ 121.883351][ T29] audit: type=1326 audit(1767222558.208:42145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7f98865e7 code=0x7ffc0000 [ 122.023853][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 122.032866][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 122.050250][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 122.059283][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 122.408692][ T7417] loop1: detected capacity change from 0 to 256 [ 122.418052][ T7418] pim6reg: entered allmulticast mode [ 122.441933][ T7418] pim6reg: left allmulticast mode [ 122.508410][ T7424] loop2: detected capacity change from 0 to 1024 [ 122.520920][ T7424] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 122.540212][ T7422] hub 2-0:1.0: USB hub found [ 122.544875][ T7422] hub 2-0:1.0: 8 ports detected [ 122.546491][ T7426] loop0: detected capacity change from 0 to 512 [ 122.566068][ T7426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.571437][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1316'. [ 122.584914][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1316'. [ 122.615006][ T7426] EXT4-fs (loop0): 1 truncate cleaned up [ 122.621181][ T7426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.637084][ T7426] EXT4-fs (loop0): shut down requested (0) [ 122.656755][ T7426] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 122.665948][ T7426] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 122.716952][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.819551][ T7446] loop2: detected capacity change from 0 to 256 [ 123.212946][ T7470] hub 2-0:1.0: USB hub found [ 123.217695][ T7470] hub 2-0:1.0: 8 ports detected [ 123.335557][ T7478] loop0: detected capacity change from 0 to 1024 [ 123.337488][ T7480] lo speed is unknown, defaulting to 1000 [ 123.351217][ T7478] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 123.461703][ T7494] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 123.562290][ T7503] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 123.633408][ T7506] hub 2-0:1.0: USB hub found [ 123.638339][ T7506] hub 2-0:1.0: 8 ports detected [ 123.849176][ T7525] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 123.861001][ T7523] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.876147][ T7523] EXT4-fs (loop0): mount failed [ 123.889337][ T7523] pim6reg: entered allmulticast mode [ 123.920868][ T7537] lo speed is unknown, defaulting to 1000 [ 123.949892][ T7538] EXT4-fs: inline encryption not supported [ 123.961456][ T7538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.977608][ T7538] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1361: Allocating blocks 385-513 which overlap fs metadata [ 124.003122][ T7537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7537 comm=syz.0.1362 [ 124.015737][ T7537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7537 comm=syz.0.1362 [ 124.037683][ T7538] EXT4-fs (loop3): pa ffff888107e051c0: logic 16, phys. 129, len 24 [ 124.045722][ T7538] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 124.057918][ T7537] __nla_validate_parse: 2 callbacks suppressed [ 124.057933][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 124.093865][ T7537] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 124.106325][ T7538] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 124.167680][ T7553] EXT4-fs: Ignoring removed orlov option [ 124.449361][ T7577] xt_hashlimit: max too large, truncated to 1048576 [ 124.551902][ T7584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 124.773874][ T7591] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 124.804086][ T7593] netlink: 3272 bytes leftover after parsing attributes in process `syz.3.1379'. [ 125.263235][ T7603] hub 2-0:1.0: USB hub found [ 125.268471][ T7603] hub 2-0:1.0: 8 ports detected [ 125.313284][ T7607] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.328458][ T7607] EXT4-fs (loop1): mount failed [ 125.333470][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1386'. [ 125.349141][ T7607] pim6reg: entered allmulticast mode [ 125.355620][ T7607] pim6reg: left allmulticast mode [ 125.403176][ T7615] hub 2-0:1.0: USB hub found [ 125.403537][ T7617] 9pnet_fd: Insufficient options for proto=fd [ 125.407840][ T7615] hub 2-0:1.0: 8 ports detected [ 125.857997][ T7647] set_capacity_and_notify: 11 callbacks suppressed [ 125.858010][ T7647] loop0: detected capacity change from 0 to 1024 [ 125.871430][ T7647] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 125.898725][ T7650] 9pnet_fd: Insufficient options for proto=fd [ 125.962737][ T7654] hub 2-0:1.0: USB hub found [ 125.967421][ T7654] hub 2-0:1.0: 8 ports detected [ 125.988562][ T7656] loop3: detected capacity change from 0 to 1024 [ 125.995335][ T7656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.002119][ T7656] EXT4-fs (loop3): unable to read superblock [ 126.073687][ T7658] hub 2-0:1.0: USB hub found [ 126.078426][ T7658] hub 2-0:1.0: 8 ports detected [ 126.144665][ T7662] xt_hashlimit: max too large, truncated to 1048576 [ 126.653124][ T29] kauditd_printk_skb: 2529 callbacks suppressed [ 126.653151][ T29] audit: type=1326 audit(1767222563.098:44673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f823f4465e7 code=0x7ffc0000 [ 126.701548][ T29] audit: type=1326 audit(1767222563.128:44674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823f3eb829 code=0x7ffc0000 [ 126.725213][ T29] audit: type=1326 audit(1767222563.128:44675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f823f4465e7 code=0x7ffc0000 [ 126.748722][ T29] audit: type=1326 audit(1767222563.128:44676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823f3eb829 code=0x7ffc0000 [ 126.772206][ T29] audit: type=1326 audit(1767222563.128:44677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f823f4465e7 code=0x7ffc0000 [ 126.795611][ T29] audit: type=1326 audit(1767222563.128:44678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f823f3eb829 code=0x7ffc0000 [ 126.819151][ T29] audit: type=1326 audit(1767222563.128:44679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 126.842713][ T29] audit: type=1326 audit(1767222563.128:44680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 126.866259][ T29] audit: type=1326 audit(1767222563.128:44681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.3.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823f44f749 code=0x7ffc0000 [ 126.896197][ T29] audit: type=1326 audit(1767222563.338:44682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef37bf749 code=0x7ffc0000 [ 126.921051][ T7677] loop3: detected capacity change from 0 to 512 [ 126.928125][ T7677] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.940827][ T7677] EXT4-fs (loop3): 1 truncate cleaned up [ 126.946876][ T7677] EXT4-fs mount: 7 callbacks suppressed [ 126.946887][ T7677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.966984][ T7677] EXT4-fs (loop3): shut down requested (0) [ 126.979905][ T7677] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 126.996962][ T7677] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 127.043138][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.062396][ T7685] loop3: detected capacity change from 0 to 256 [ 127.078823][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1412'. [ 127.145191][ T7689] loop2: detected capacity change from 0 to 1024 [ 127.152959][ T7689] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 127.192864][ T7693] hub 2-0:1.0: USB hub found [ 127.197975][ T7693] hub 2-0:1.0: 8 ports detected [ 127.226230][ T7697] loop2: detected capacity change from 0 to 1024 [ 127.233510][ T7697] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 127.291506][ T7705] 9pnet_fd: Insufficient options for proto=fd [ 127.314251][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'. [ 127.323249][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'. [ 127.333285][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'. [ 127.342347][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'. [ 127.372050][ T7711] loop2: detected capacity change from 0 to 1024 [ 127.378731][ T7711] EXT4-fs: inline encryption not supported [ 127.435584][ T7711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.451342][ T7711] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1423: Allocating blocks 385-513 which overlap fs metadata [ 127.494057][ T7711] EXT4-fs (loop2): pa ffff888107e925b0: logic 16, phys. 129, len 24 [ 127.502144][ T7711] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 127.513235][ T7711] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 127.560037][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.973358][ T7738] hub 2-0:1.0: USB hub found [ 127.978185][ T7738] hub 2-0:1.0: 8 ports detected [ 128.016182][ T7740] lo speed is unknown, defaulting to 1000 [ 128.120642][ T7745] 9p: Bad value for 'rfdno' [ 128.125837][ T7746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7746 comm=syz.2.1431 [ 128.138316][ T7746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7746 comm=syz.2.1431 [ 128.138741][ T7743] loop3: detected capacity change from 0 to 1024 [ 128.153514][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 128.157866][ T7743] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.202955][ T7740] loop2: detected capacity change from 0 to 1024 [ 128.210985][ T7740] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 128.227998][ T7748] loop1: detected capacity change from 0 to 1024 [ 128.235208][ T7748] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.251163][ T7740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.271844][ T7755] netlink: 3272 bytes leftover after parsing attributes in process `syz.3.1437'. [ 128.295913][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.481857][ T7771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.496988][ T7771] EXT4-fs (loop1): 1 truncate cleaned up [ 128.503336][ T7771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.519828][ T7771] EXT4-fs (loop1): shut down requested (0) [ 128.528520][ T7771] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 128.537517][ T7771] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 128.556075][ T7775] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.574791][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.607003][ T7779] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.676626][ T7777] hub 2-0:1.0: USB hub found [ 128.681894][ T7777] hub 2-0:1.0: 8 ports detected [ 128.854602][ T7797] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.931343][ T7797] EXT4-fs (loop1): mount failed [ 128.963646][ T7797] pim6reg: entered allmulticast mode [ 128.969706][ T7797] pim6reg: left allmulticast mode [ 129.150861][ T7815] __nla_validate_parse: 2 callbacks suppressed [ 129.150875][ T7815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1459'. [ 129.185026][ T7809] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 129.197102][ T7809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.224591][ T7809] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1457: bg 0: block 88: padding at end of block bitmap is not set [ 129.270599][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.294154][ T7823] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 129.323641][ T7829] netlink: 3272 bytes leftover after parsing attributes in process `syz.1.1463'. [ 129.385192][ T7838] EXT4-fs: Ignoring removed orlov option [ 129.409045][ T7838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.523308][ T7843] pim6reg: entered allmulticast mode [ 129.529078][ T7845] pim6reg: left allmulticast mode [ 129.666569][ T7851] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 129.732094][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.747617][ T7859] EXT4-fs: inline encryption not supported [ 129.763953][ T7859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.778917][ T7859] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1475: Allocating blocks 385-513 which overlap fs metadata [ 129.816877][ T7873] EXT4-fs: inline encryption not supported [ 129.821040][ T7859] EXT4-fs (loop2): pa ffff888107e05310: logic 16, phys. 129, len 24 [ 129.830680][ T7859] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 129.835508][ T7873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.841904][ T7859] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 129.877093][ T7873] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1478: Allocating blocks 385-513 which overlap fs metadata [ 129.903304][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.914208][ T7873] EXT4-fs (loop0): pa ffff888107e92770: logic 16, phys. 129, len 24 [ 129.922337][ T7873] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 129.933599][ T7873] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 129.936378][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 129.979652][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.003284][ T7884] hub 2-0:1.0: USB hub found [ 130.008029][ T7884] hub 2-0:1.0: 8 ports detected [ 130.043496][ T7886] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.058818][ T7886] EXT4-fs (loop0): mount failed [ 130.095106][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.107044][ T7894] hub 2-0:1.0: USB hub found [ 130.111851][ T7894] hub 2-0:1.0: 8 ports detected [ 130.113630][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.132923][ T7900] EXT4-fs: Ignoring removed orlov option [ 130.140813][ T7900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.185536][ T7903] hub 2-0:1.0: USB hub found [ 130.191015][ T7903] hub 2-0:1.0: 8 ports detected [ 130.239578][ T7908] tipc: Started in network mode [ 130.244558][ T7908] tipc: Node identity ac14140f, cluster identity 4711 [ 130.251579][ T7908] tipc: New replicast peer: 255.255.255.255 [ 130.257685][ T7908] tipc: Enabled bearer , priority 10 [ 130.292812][ T7910] lo speed is unknown, defaulting to 1000 [ 130.343281][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.362152][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.370917][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.393455][ T7914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7914 comm=syz.3.1491 [ 130.405943][ T7914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7914 comm=syz.3.1491 [ 130.424376][ T7914] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 130.441839][ T7914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.468636][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.490530][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 130.543881][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 130.553118][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 130.568283][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 130.577524][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 130.781306][ T7933] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.811142][ T7933] EXT4-fs (loop2): mount failed [ 130.853770][ T7933] pim6reg: entered allmulticast mode [ 130.861841][ T7933] pim6reg: left allmulticast mode [ 130.874085][ T7939] tmpfs: Bad value for 'nr_inodes' [ 130.893600][ T7937] hub 2-0:1.0: USB hub found [ 130.898368][ T7937] hub 2-0:1.0: 8 ports detected [ 130.907580][ T7939] infiniband !yz!: set active [ 130.912441][ T7939] infiniband !yz!: added team_slave_0 [ 130.923641][ T7939] RDS/IB: !yz!: added [ 130.927633][ T7939] smc: adding ib device !yz! with port count 1 [ 130.933988][ T7939] smc: ib device !yz! port 1 has no pnetid [ 130.941503][ T7941] C: renamed from team_slave_0 (while UP) [ 130.958435][ T7941] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1501'. [ 130.982865][ T7941] netlink: 'syz.4.1501': attribute type 13 has an invalid length. [ 131.044401][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.051931][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.106031][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.117557][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.192646][ T861] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.204818][ T861] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.215144][ T861] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.224565][ T861] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.330976][ T7954] xt_hashlimit: max too large, truncated to 1048576 [ 131.369811][ T36] tipc: Node number set to 2886997007 [ 131.542982][ T7975] hub 2-0:1.0: USB hub found [ 131.547960][ T7975] hub 2-0:1.0: 8 ports detected [ 131.600448][ T7984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1517'. [ 131.622980][ T7989] set_capacity_and_notify: 15 callbacks suppressed [ 131.622996][ T7989] loop0: detected capacity change from 0 to 512 [ 131.636838][ T7989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.649253][ T7989] EXT4-fs (loop0): 1 truncate cleaned up [ 131.655474][ T7989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.671351][ T7989] EXT4-fs (loop0): shut down requested (0) [ 131.681346][ T7989] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 131.691780][ T7989] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 131.700848][ T7995] loop1: detected capacity change from 0 to 1024 [ 131.707559][ T7995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.714738][ T7995] EXT4-fs (loop1): unable to read superblock [ 131.757781][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.823525][ T8002] hub 2-0:1.0: USB hub found [ 131.828340][ T8002] hub 2-0:1.0: 8 ports detected [ 131.837486][ T29] kauditd_printk_skb: 2631 callbacks suppressed [ 131.837500][ T29] audit: type=1326 audit(1767222568.278:47311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 131.868062][ T29] audit: type=1326 audit(1767222568.278:47312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 131.891643][ T29] audit: type=1326 audit(1767222568.278:47313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 131.915096][ T29] audit: type=1326 audit(1767222568.278:47314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 131.938622][ T29] audit: type=1326 audit(1767222568.278:47315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 131.962093][ T29] audit: type=1326 audit(1767222568.278:47316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 131.973632][ T8007] hub 2-0:1.0: USB hub found [ 131.985577][ T29] audit: type=1326 audit(1767222568.278:47317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 131.990480][ T8007] hub 2-0:1.0: 8 ports detected [ 132.013621][ T29] audit: type=1326 audit(1767222568.278:47318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 132.013666][ T29] audit: type=1326 audit(1767222568.278:47319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 132.065513][ T29] audit: type=1326 audit(1767222568.278:47320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.0.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b2b4f749 code=0x7ffc0000 [ 132.124822][ T8011] loop3: detected capacity change from 0 to 1024 [ 132.132147][ T8011] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 132.176852][ T8015] loop3: detected capacity change from 0 to 1024 [ 132.187972][ T8015] EXT4-fs: Ignoring removed orlov option [ 132.196499][ T8015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.224174][ T8009] loop0: detected capacity change from 0 to 1024 [ 132.256384][ T8009] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 132.273508][ T8009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.301088][ T8009] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1527: bg 0: block 88: padding at end of block bitmap is not set [ 132.336321][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.424467][ T8031] tipc: Started in network mode [ 132.429453][ T8031] tipc: Node identity ac14140f, cluster identity 4711 [ 132.436846][ T8031] tipc: New replicast peer: 255.255.255.255 [ 132.442937][ T8031] tipc: Enabled bearer , priority 10 [ 132.482348][ T8033] loop0: detected capacity change from 0 to 512 [ 132.492415][ T8033] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.510601][ T8033] EXT4-fs (loop0): 1 truncate cleaned up [ 132.532189][ T8033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.546273][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.556683][ T8033] EXT4-fs (loop0): shut down requested (0) [ 132.596426][ T8033] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 132.627183][ T8033] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 132.665061][ T8046] loop3: detected capacity change from 0 to 512 [ 132.671878][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.672139][ T8046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.693538][ T8046] EXT4-fs (loop3): 1 truncate cleaned up [ 132.701151][ T8046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.716242][ T8051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8051 comm=syz.0.1540 [ 132.728758][ T8051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8051 comm=syz.0.1540 [ 132.731174][ T8046] EXT4-fs (loop3): shut down requested (0) [ 132.756042][ T8046] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 132.765196][ T8046] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 132.791385][ T8057] loop0: detected capacity change from 0 to 1024 [ 132.798146][ T8057] EXT4-fs: inline encryption not supported [ 132.814326][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.827099][ T8057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.846993][ T8057] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1543: Allocating blocks 385-513 which overlap fs metadata [ 132.847285][ T8063] loop3: detected capacity change from 0 to 1024 [ 132.867607][ T8063] EXT4-fs: inline encryption not supported [ 132.877603][ T8057] EXT4-fs (loop0): pa ffff888107e92850: logic 16, phys. 129, len 24 [ 132.885711][ T8057] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 132.888626][ T8063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.897459][ T8057] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 132.932174][ T8063] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1544: Allocating blocks 385-513 which overlap fs metadata [ 132.947683][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.968310][ T8063] EXT4-fs (loop3): pa ffff888107e92850: logic 16, phys. 129, len 24 [ 132.976371][ T8063] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 132.987424][ T8063] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 133.018772][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.046761][ T8076] loop3: detected capacity change from 0 to 1024 [ 133.053599][ T8076] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 133.083802][ T8079] tipc: Disabling bearer [ 133.249035][ T8086] EXT4-fs: inline encryption not supported [ 133.257517][ T8084] hub 2-0:1.0: USB hub found [ 133.262326][ T8084] hub 2-0:1.0: 8 ports detected [ 133.265791][ T8086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.282573][ T8086] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1552: Allocating blocks 385-513 which overlap fs metadata [ 133.312013][ T8086] EXT4-fs (loop0): pa ffff888107e928c0: logic 16, phys. 129, len 24 [ 133.320152][ T8086] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 133.331955][ T8086] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 133.360012][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.391876][ T8099] EXT4-fs: inline encryption not supported [ 133.401556][ T8099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.416096][ T8099] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1556: Allocating blocks 385-513 which overlap fs metadata [ 133.444339][ T8099] EXT4-fs (loop3): pa ffff888107e927e0: logic 16, phys. 129, len 24 [ 133.452366][ T8099] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 133.463882][ T8099] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 133.516953][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.544300][ T8110] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 133.569828][ T3479] tipc: Node number set to 2886997007 [ 133.602755][ T8113] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 133.693816][ T8119] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.719972][ T8119] EXT4-fs (loop0): mount failed [ 133.765160][ T8129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.784538][ T8131] EXT4-fs: inline encryption not supported [ 133.810933][ T8129] EXT4-fs (loop3): 1 truncate cleaned up [ 133.817125][ T8129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.838301][ T8131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.841202][ T8129] EXT4-fs (loop3): shut down requested (0) [ 133.872957][ T8131] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1567: Allocating blocks 385-513 which overlap fs metadata [ 133.912130][ T8129] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 133.913180][ T8131] EXT4-fs (loop0): pa ffff888107e928c0: logic 16, phys. 129, len 24 [ 133.928994][ T8131] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 133.939540][ T8129] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 133.940768][ T8131] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 133.999642][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.009526][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.055774][ T8146] EXT4-fs: inline encryption not supported [ 134.072505][ T8146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.114316][ T8146] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1571: Allocating blocks 385-513 which overlap fs metadata [ 134.203671][ T8146] EXT4-fs (loop3): pa ffff888107e927e0: logic 16, phys. 129, len 24 [ 134.211791][ T8146] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 134.239441][ T8146] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 134.291861][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.338932][ T8156] __nla_validate_parse: 6 callbacks suppressed [ 134.338947][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 134.394730][ T8160] tipc: Enabling of bearer rejected, already enabled [ 134.406421][ T8159] lo speed is unknown, defaulting to 1000 [ 134.497820][ T8164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8164 comm=syz.3.1575 [ 134.510354][ T8164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8164 comm=syz.3.1575 [ 134.529692][ T8161] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 134.553975][ T8161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.607587][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1578'. [ 134.617116][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.641988][ T8175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.690876][ T8175] EXT4-fs (loop1): 1 truncate cleaned up [ 134.692979][ T8181] lo speed is unknown, defaulting to 1000 [ 134.697192][ T8175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.704148][ T8179] hub 2-0:1.0: USB hub found [ 134.729948][ T8179] hub 2-0:1.0: 8 ports detected [ 134.800949][ T8175] EXT4-fs (loop1): shut down requested (0) [ 134.837822][ T8181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8181 comm=syz.0.1582 [ 134.850504][ T8181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8181 comm=syz.0.1582 [ 134.881583][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 134.992110][ T8192] 9p: Could not find request transport: fd0x0000000000000003 [ 135.001090][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.120687][ T8209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1593'. [ 135.170927][ T8213] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.201876][ T8213] EXT4-fs (loop2): 1 truncate cleaned up [ 135.219590][ T8213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.285863][ T8213] EXT4-fs (loop2): shut down requested (0) [ 135.303416][ T8213] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 135.314511][ T8213] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 135.356720][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.460733][ T8225] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.472951][ T8225] EXT4-fs (loop0): 1 truncate cleaned up [ 135.478995][ T8225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.493748][ T8225] EXT4-fs (loop0): shut down requested (0) [ 135.560422][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.961915][ T8241] pim6reg: entered allmulticast mode [ 135.970160][ T8241] pim6reg: left allmulticast mode [ 135.995181][ T8247] xt_hashlimit: max too large, truncated to 1048576 [ 136.038726][ T8252] tipc: Started in network mode [ 136.043657][ T8252] tipc: Node identity ac14140f, cluster identity 4711 [ 136.051782][ T8252] tipc: New replicast peer: 255.255.255.255 [ 136.057811][ T8252] tipc: Enabled bearer , priority 10 [ 136.090221][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1605'. [ 136.105734][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 136.114986][ T8254] tipc: Disabling bearer [ 136.184725][ T8260] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.210886][ T8260] EXT4-fs (loop3): 1 truncate cleaned up [ 136.217054][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.257908][ T8260] EXT4-fs (loop3): shut down requested (0) [ 136.330707][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.356153][ T8270] EXT4-fs: inline encryption not supported [ 136.372480][ T8270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.387486][ T8270] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1613: Allocating blocks 385-513 which overlap fs metadata [ 136.422667][ T8277] lo speed is unknown, defaulting to 1000 [ 136.428555][ T8269] EXT4-fs (loop3): pa ffff888107e05380: logic 16, phys. 129, len 24 [ 136.436606][ T8269] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 136.455160][ T8275] hub 2-0:1.0: USB hub found [ 136.461021][ T8275] hub 2-0:1.0: 8 ports detected [ 136.468597][ T8281] xt_hashlimit: max too large, truncated to 1048576 [ 136.499598][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.528777][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.537857][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.538941][ T8277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8277 comm=syz.2.1615 [ 136.558163][ T8277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8277 comm=syz.2.1615 [ 136.579479][ T8277] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 136.602100][ T8277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.628690][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.903950][ T8305] set_capacity_and_notify: 18 callbacks suppressed [ 136.903968][ T8305] loop2: detected capacity change from 0 to 1024 [ 136.972010][ T8305] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 136.989449][ T8305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.006312][ T8301] loop1: detected capacity change from 0 to 1024 [ 137.035179][ T8301] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 137.043600][ T8305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1624: bg 0: block 88: padding at end of block bitmap is not set [ 137.058493][ T8301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.073948][ T8301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1622: bg 0: block 88: padding at end of block bitmap is not set [ 137.121639][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.131573][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.149805][ T29] kauditd_printk_skb: 1122 callbacks suppressed [ 137.149819][ T29] audit: type=1326 audit(1767222573.588:48442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8311 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.179614][ T29] audit: type=1326 audit(1767222573.588:48443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8311 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.203136][ T29] audit: type=1326 audit(1767222573.588:48444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8311 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.248293][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 137.257298][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 137.266682][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 137.275720][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 137.289358][ T8315] hub 2-0:1.0: USB hub found [ 137.294076][ T8315] hub 2-0:1.0: 8 ports detected [ 137.310661][ T29] audit: type=1326 audit(1767222573.748:48445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.334278][ T29] audit: type=1326 audit(1767222573.748:48446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.357894][ T29] audit: type=1326 audit(1767222573.748:48447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.381671][ T29] audit: type=1326 audit(1767222573.748:48448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.405212][ T29] audit: type=1326 audit(1767222573.748:48449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.429169][ T29] audit: type=1326 audit(1767222573.748:48450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.452701][ T29] audit: type=1326 audit(1767222573.748:48451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.4.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc436fef749 code=0x7ffc0000 [ 137.456002][ T8324] lo speed is unknown, defaulting to 1000 [ 137.487056][ T8320] loop0: detected capacity change from 0 to 1024 [ 137.497122][ T8320] EXT4-fs: inline encryption not supported [ 137.506505][ T8322] loop1: detected capacity change from 0 to 256 [ 137.539435][ T8320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.562436][ T8320] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1629: Allocating blocks 385-513 which overlap fs metadata [ 137.583378][ T8324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8324 comm=syz.2.1631 [ 137.595981][ T8324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8324 comm=syz.2.1631 [ 137.599541][ T8334] loop1: detected capacity change from 0 to 1024 [ 137.614972][ T8324] loop2: detected capacity change from 0 to 1024 [ 137.615165][ T8319] EXT4-fs (loop0): pa ffff888107e053f0: logic 16, phys. 129, len 24 [ 137.623775][ T8334] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 137.629344][ T8319] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 137.632092][ T8324] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 137.680804][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.706992][ T8341] loop1: detected capacity change from 0 to 512 [ 137.713403][ T8344] loop0: detected capacity change from 0 to 1024 [ 137.720567][ T8344] EXT4-fs: inline encryption not supported [ 137.735754][ T8341] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.750836][ T8341] EXT4-fs (loop1): mount failed [ 137.751492][ T8344] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1635: Allocating blocks 385-513 which overlap fs metadata [ 137.777925][ T8341] pim6reg: entered allmulticast mode [ 137.791895][ T8341] pim6reg: left allmulticast mode [ 137.793486][ T8351] loop2: detected capacity change from 0 to 1024 [ 137.813887][ T8351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 137.813919][ T8344] EXT4-fs (loop0): pa ffff888107e928c0: logic 16, phys. 129, len 24 [ 137.813944][ T8344] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 137.830484][ T8351] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1637: bg 0: block 88: padding at end of block bitmap is not set [ 137.843033][ T8344] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 137.906784][ T8359] loop1: detected capacity change from 0 to 1024 [ 137.920281][ T8359] EXT4-fs: inline encryption not supported [ 137.928030][ T8361] hub 2-0:1.0: USB hub found [ 137.937307][ T8361] hub 2-0:1.0: 8 ports detected [ 137.937711][ T8359] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1639: Allocating blocks 385-513 which overlap fs metadata [ 137.965103][ T8365] 9pnet_fd: Insufficient options for proto=fd [ 137.975541][ T8367] tipc: Enabling of bearer rejected, already enabled [ 138.017673][ T8374] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 138.050995][ T8376] EXT4-fs (loop1): pa ffff888107e05380: logic 16, phys. 129, len 24 [ 138.059016][ T8376] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 138.073322][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.084333][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.086794][ T8376] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 138.110498][ T8383] tipc: Enabling of bearer rejected, already enabled [ 138.172557][ T8387] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.189345][ T8387] EXT4-fs (loop0): mount failed [ 138.257902][ T8398] EXT4-fs: inline encryption not supported [ 138.260731][ T8396] xt_hashlimit: max too large, truncated to 1048576 [ 138.285489][ T8400] hub 2-0:1.0: USB hub found [ 138.290378][ T8400] hub 2-0:1.0: 8 ports detected [ 138.295743][ T8398] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1654: Allocating blocks 385-513 which overlap fs metadata [ 138.346590][ T8408] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 138.353424][ T8398] EXT4-fs (loop0): pa ffff888107e92930: logic 16, phys. 129, len 24 [ 138.363017][ T8398] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 138.391224][ T8398] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 138.415223][ T8417] tipc: New replicast peer: 255.255.255.255 [ 138.421312][ T8417] tipc: Enabled bearer , priority 10 [ 138.462977][ T8419] EXT4-fs: inline encryption not supported [ 138.485202][ T8425] pim6reg: entered allmulticast mode [ 138.491723][ T8425] pim6reg: left allmulticast mode [ 138.533902][ T8419] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1662: Allocating blocks 385-513 which overlap fs metadata [ 138.546737][ T8429] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 138.604979][ T8419] EXT4-fs (loop2): pa ffff888107e929a0: logic 16, phys. 129, len 24 [ 138.613125][ T8419] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 138.624963][ T8419] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 138.651550][ T8433] xt_hashlimit: max too large, truncated to 1048576 [ 138.743983][ T8441] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 138.838475][ T8453] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.853836][ T8453] EXT4-fs (loop0): 1 truncate cleaned up [ 138.861460][ T8453] EXT4-fs (loop0): shut down requested (0) [ 138.949885][ T8457] tipc: Enabling of bearer rejected, already enabled [ 138.992582][ T8463] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.003870][ T8463] EXT4-fs (loop2): 1 truncate cleaned up [ 139.073425][ T8466] hub 2-0:1.0: USB hub found [ 139.078112][ T8466] hub 2-0:1.0: 8 ports detected [ 139.121115][ T8468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 139.131150][ T8468] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1681: bg 0: block 88: padding at end of block bitmap is not set [ 139.163126][ T8472] EXT4-fs: Ignoring removed orlov option [ 139.263792][ T8474] ================================================================== [ 139.271889][ T8474] BUG: KCSAN: data-race in filemap_read / filemap_read [ 139.278740][ T8474] [ 139.281058][ T8474] read to 0xffff88811b021b28 of 8 bytes by task 8472 on cpu 1: [ 139.288595][ T8474] filemap_read+0x6f/0xa00 [ 139.293011][ T8474] generic_file_read_iter+0x79/0x330 [ 139.298299][ T8474] ext4_file_read_iter+0x1cc/0x290 [ 139.303426][ T8474] copy_splice_read+0x442/0x660 [ 139.308276][ T8474] splice_direct_to_actor+0x290/0x680 [ 139.313639][ T8474] do_splice_direct+0xda/0x150 [ 139.318391][ T8474] do_sendfile+0x380/0x650 [ 139.322793][ T8474] __x64_sys_sendfile64+0x105/0x150 [ 139.327976][ T8474] x64_sys_call+0x2db1/0x3000 [ 139.332634][ T8474] do_syscall_64+0xca/0x2b0 [ 139.337122][ T8474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.342991][ T8474] [ 139.345302][ T8474] write to 0xffff88811b021b28 of 8 bytes by task 8474 on cpu 0: [ 139.352932][ T8474] filemap_read+0x974/0xa00 [ 139.357427][ T8474] generic_file_read_iter+0x79/0x330 [ 139.362704][ T8474] ext4_file_read_iter+0x1cc/0x290 [ 139.367805][ T8474] copy_splice_read+0x442/0x660 [ 139.372638][ T8474] splice_direct_to_actor+0x290/0x680 [ 139.377998][ T8474] do_splice_direct+0xda/0x150 [ 139.382757][ T8474] do_sendfile+0x380/0x650 [ 139.387158][ T8474] __x64_sys_sendfile64+0x105/0x150 [ 139.392333][ T8474] x64_sys_call+0x2db1/0x3000 [ 139.396991][ T8474] do_syscall_64+0xca/0x2b0 [ 139.401483][ T8474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.407359][ T8474] [ 139.409663][ T8474] value changed: 0x0000000000000205 -> 0x0000000000000206 [ 139.416745][ T8474] [ 139.419047][ T8474] Reported by Kernel Concurrency Sanitizer on: [ 139.425183][ T8474] CPU: 0 UID: 0 PID: 8474 Comm: syz.2.1682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.436443][ T8474] Tainted: [W]=WARN [ 139.440225][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.450257][ T8474] ================================================================== [ 139.458544][ T3421] tipc: Node number set to 2886997007