last executing test programs: 3.972378134s ago: executing program 1 (id=512): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@check_strict}, {@overriderock}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@check_relaxed}, {@hide}, {@nojoliet}, {@nojoliet}]}, 0x3d, 0x554, &(0x7f0000000500)="$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") io_uring_setup(0x4837, &(0x7f0000001240)={0x0, 0x2875, 0x0, 0xfffffffc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x2, 0xe6}, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) pipe(&(0x7f0000000280)) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75"], 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140)=@int=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.735113076s ago: executing program 1 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 2.905097442s ago: executing program 2 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_read_part_table(0x105d, &(0x7f0000001080)="$eJzsz7FNA0EQBdC/wN3tBUQkZLRCSAOUAxItUAQStIbkAi4Za+3AkguwHbwX/d2ZH0y4rrts1ata/p+Tn/HzlmQ9zGpXlamN2J8ev9bM7bxey+9yTB/1Oacn41mV9Ne8JA/Jd7LVqTGNpeQ+aXn/u9CVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDT9gEAAP//1jwUcA==") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sync() sync() open(0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x7ff, 0x0) getdents64(r1, 0x0, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) mincore(&(0x7f000091d000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/133) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) 2.82101231s ago: executing program 1 (id=523): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x9}, &(0x7f0000000240)=0x6, 0x0, 0x6, 0x400, 0x70, 0x40006, 0x60, 0x5}}], 0x58}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x88, 0x65, 0x0, 0xfffffffffffffe17) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.411477008s ago: executing program 2 (id=526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x43, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8e, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) socket$phonet(0x23, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.203325107s ago: executing program 2 (id=528): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', @random='\x00\x00\x00 \x00'}) 2.165035891s ago: executing program 2 (id=529): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="c3", 0x1}]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'macvlan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x640c7000, 0x0, 0x11, 0x0, 0x0, 0x0) 2.138444283s ago: executing program 3 (id=530): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x90) io_uring_setup(0x67ef, 0x0) io_uring_setup(0x3ad5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000400)}, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x17, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x4d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0xd3, &(0x7f0000000840)=""/211, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x2, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1, r3, r0, r1, 0xffffffffffffffff, r6, r3, 0xffffffffffffffff, r6], &(0x7f0000000840), 0x10, 0x8, @void, @value}, 0x94) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7) dup(r4) 2.137965913s ago: executing program 3 (id=531): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x4a0800, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffc, @remote, 0x74}, 0x1c) 1.574171505s ago: executing program 2 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 1.573788085s ago: executing program 4 (id=534): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup3(r2, r1, 0x0) read$hiddev(r1, &(0x7f00000001c0)=""/92, 0x5c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x822b01) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xb, 0x4, 0x3}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r5, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.537269998s ago: executing program 1 (id=535): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)='\f', 0x1, 0x4000000, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), 0x0, 0xbed, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) removexattr(&(0x7f00000001c0)='./file1\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x0) 1.527480389s ago: executing program 4 (id=536): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x8080) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = io_uring_setup(0x5fcd, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect(0x0, 0x41, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000500)=""/4096) 1.526752979s ago: executing program 3 (id=537): socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x3, 0xb, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.222159447s ago: executing program 4 (id=539): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = semget$private(0x0, 0xe, 0x104) semop(r3, &(0x7f0000000040)=[{0x1, 0x35, 0x800}], 0x1) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000240)={{0x0, 0x492}, {0x7, 0x3}, 0x5, 0x1}) sigaltstack(0x0, 0x0) msgget$private(0x0, 0x86) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(r4, 0x0, 0x0) 720.685774ms ago: executing program 3 (id=540): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', @random='\x00\x00\x00 \x00'}) 717.475844ms ago: executing program 4 (id=541): io_uring_setup(0x7fdb, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 659.982939ms ago: executing program 3 (id=542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x528d}, &(0x7f0000000380)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000dc0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/10, 0xa, 0x1, &(0x7f0000000cc0)=""/233, 0xe9}, &(0x7f0000000e00)=0x40) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0xce3, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, 0x0, &(0x7f0000000c00)=""/165}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) io_uring_enter(r1, 0x4ac9, 0x0, 0x0, 0x0, 0x0) 548.544959ms ago: executing program 2 (id=544): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200c840, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") 521.069112ms ago: executing program 4 (id=545): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x1f0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00100001000010000001000ffdbdf25fe8800000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/309], 0x1a0}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008501000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000300)}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 519.823422ms ago: executing program 1 (id=546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x25dfdbfd, {0x1c}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x15c}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f30600aa773888c21c000000000002"], 0x0) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, 0x0) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000300)=[{}], 0x1, 0xfff50000, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 455.772678ms ago: executing program 0 (id=547): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0xfffffffe, r4}, 0x10) 414.180492ms ago: executing program 4 (id=548): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x4a0800, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffc, @remote, 0x74}, 0x1c) 373.832835ms ago: executing program 0 (id=549): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@check_strict}, {@overriderock}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@check_relaxed}, {@hide}, {@nojoliet}, {@nojoliet}]}, 0x3d, 0x554, &(0x7f0000000500)="$eJzs3dFu01YYwPHPpYUskxAaE0KowKFsUpFKcBIIirjynJP0gGNHtoPaK1TRFFWkMFEmrb3ZesM2aXsIbvcQu9vjoD0Ck+2kNKRpYKUN6v6/CM6pfezzHTfyV7fxsQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALHcmm0XLfGM315So7m1MGi++7K39dACuTFQHNCviJX8k1xOLmaLLn79bvWF5L85mc2+mpVcUuRk+8sL5+6dn57qb39AwMdic2v76Uq323kx6UCO0OUzo9c1tG+iwDSdhlYmClS1UrFvLdYjVTeejpajWDeVG2onDkI1795QxWq1rHRhOWj7jZrj6f7CuzdLtl1R9wst7YRR4N+6X4jcReN5xm+kbZLVSZu7yRvxgYlVrJ2mUmvr3U553ACSRsUPaVQa16hkl0rFYqlUrNyp3rlr29NDC+z3yFCLyb9pMVmf8OwNHM5UL/+LJ0Z8acuSqH1frtQklECaI9b39PP/t7f0gf3uzf/9LN/7OUB2euWcXMkqV0bl/xGxHN9rU7ZkW57KinSlKx15MfGIjvfVEC2+GIkkECNNcdIlqrdESVUqUhFbHsmi1CUSJXUx4omWSJYlklh0+o5yJRQtjsQSSChK5sWVG6KkKFWpSlmUaCnIsgTSFl8aUhMn3cuarKfHvSzKGhXjbqPiyGHk+2/LjpQOGC35H4f3Sc/fwGG87ed/AAAAAABwYlnpb9+T6/8ZuZzW6sbT9qTDAgAAAAAAn1D6l//ZpJhJapfF4vofAAAAAICTxkrvsbNEJC9Xs9qaWOntUvwSAAAAAACAEyL9+/+VpEjnQLkq1u50KVz/AwAAAABwQvw6do79qHXG+usfyYUz1k5r6Rtrw0naORunsu1Ovb/HuH7JOtvbSVpUsmJ62tWzVi5rtDsJ5ptesTYmjr+rIsMB/PwxAZyflt/lWtbm2mpWrvbXZL3k68bTBTfw7hXFcc5OxXop/uHZ+o8iYThj/eY3z1qytt7tFB4/766msaRzFe9s9CZQHJpH8YBYXqbzLaT3XOw74pn0Roxev/msX3vv+Keyzac+os9XMpe1mevNeJsfHH8u6bNYGBh9sm43ipysdzvFQ478lVzP2lyfv54V+0RRKoz6HvSORWlvFP/pWAxHYb0fRXlcFOVDRgEAk7I2JgtZ6flu55B5Z1x2t6yhXj72x4v0jD6ftZm/lJ5Ypy/tk1fscWd0+5DZ7c+hZyCNyrFJv3/s9ptl1dfJBq9H9ht5JSs5hKdebnwvFza3tm+ub6w86TzpPCuVyhX7tm3fKclMOoxesSfSt2fIPQCAzPhn7IxtYd3OrqrPiex/Vf3V7kcKCvJYnktXVmUhvdsg/cTBvnvN7/kYwsKYq9Z8miazJ7wsHHBteTq9y6G/39KBbQdjKB/HtwIAgGMzNyYPf0j+Xxhz3T2Yywevjk/LqLbFYz8WAAD8X+jwjZWPf7HC0LQeFavVohMvahUG7gMVmlpDK+PHOnQXHb+hVSsM4sANvKTy0NR0pKJ2qxWEsaoHoWoFkVlKn/yueo9+j3TT8WPjRi1PO5FWbuDHjhurmom+UK32d56JFnWYbhy1tGvqxnViE/gqCtqhqwtKRVrvaWhq2o9N3SRVX7VC03TCZfUw8NpNrSyxJDStOMh22O/L+PUgbKa7LUz6YAMA8JnY3Np+utLtdl4cYWXSYwQAAIPI0gAAAAAAAAAAAAAAAAAAAAAAfP6O4/4/Kie80p8K+nOJ54gq1kkf4EBl7KnjpyM/OQE4Uv8GAAD//9IOTPM=") io_uring_setup(0x4837, &(0x7f0000001240)={0x0, 0x2875, 0x0, 0xfffffffc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x2, 0xe6}, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) pipe(&(0x7f0000000280)) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75"], 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140)=@int=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 372.606955ms ago: executing program 3 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pipe(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 253.171856ms ago: executing program 0 (id=551): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000026180)=ANY=[@ANYBLOB="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", @ANYRES64], 0x20, 0x6a5, &(0x7f0000000f00)="$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") r0 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21081e, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@nobarrier}, {@nolazytime}]}, 0x1, 0x51d, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0xe01, 0x0) unlink(&(0x7f0000000a00)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(r0, &(0x7f0000000700)=""/132, 0x84) 86.453972ms ago: executing program 0 (id=552): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) r3 = io_uring_setup(0x17c7, &(0x7f0000000580)={0x0, 0x0, 0x400, 0x20000000}) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r4, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 52.777005ms ago: executing program 0 (id=553): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) 855.49µs ago: executing program 1 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pipe(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 0s ago: executing program 0 (id=564): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xf000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012", @ANYRES32=0x0], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.85: couldn't read orphan inode 15 (err -117) [ 38.007299][ T3663] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.020271][ T3659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.85'. [ 38.029177][ T3659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.85'. [ 38.037992][ T3659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.85'. [ 38.084307][ T3662] mmap: syz.2.86 (3662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.208894][ T3265] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 38.232283][ T3677] syz.0.91[3677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.232356][ T3677] syz.0.91[3677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.500040][ T3691] Cannot find set identified by id 0 to match [ 38.987919][ T3695] loop0: detected capacity change from 0 to 1024 [ 38.995131][ T3695] EXT4-fs: Ignoring removed orlov option [ 39.000830][ T3695] ext4: Unknown parameter 'noacl' [ 39.222941][ T3696] syzkaller0: entered promiscuous mode [ 39.228480][ T3696] syzkaller0: entered allmulticast mode [ 39.435714][ T3701] loop4: detected capacity change from 0 to 512 [ 39.450759][ T3701] EXT4-fs: Ignoring removed nobh option [ 39.456419][ T3701] EXT4-fs: quotafile must be on filesystem root [ 39.575378][ T3703] loop3: detected capacity change from 0 to 2048 [ 39.591662][ T3644] coredump: 51(syz.3.77): written to core: VMAs: 34, size 91389952; core: 73999346 bytes, pos 91398144 [ 39.616043][ T3703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.639151][ T3703] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.648582][ T3705] loop1: detected capacity change from 0 to 128 [ 39.755835][ T3720] loop2: detected capacity change from 0 to 1024 [ 39.772866][ T3720] EXT4-fs: Ignoring removed orlov option [ 39.778630][ T3720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.883141][ T3720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.906067][ T3705] syz.1.99: attempt to access beyond end of device [ 39.906067][ T3705] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 39.919364][ T3705] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 39.965205][ T3716] syz.1.99: attempt to access beyond end of device [ 39.965205][ T3716] loop1: rw=0, sector=128, nr_sectors = 1 limit=128 [ 39.978244][ T3716] Buffer I/O error on dev loop1, logical block 128, async page read [ 40.130258][ T3732] process 'syz.2.102' launched './file0/file0' with NULL argv: empty string added [ 40.430965][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.434440][ T3740] team0: Device ipvlan2 failed to register rx_handler [ 40.489414][ T3754] loop1: detected capacity change from 0 to 512 [ 40.515423][ T3754] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 40.590670][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 40.590687][ T29] audit: type=1400 audit(1726940938.981:550): avc: denied { create } for pid=3760 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.648509][ T29] audit: type=1400 audit(1726940939.031:551): avc: denied { create } for pid=3761 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 40.764134][ T29] audit: type=1400 audit(1726940939.111:552): avc: denied { create } for pid=3760 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.784346][ T29] audit: type=1400 audit(1726940939.111:553): avc: denied { ioctl } for pid=3768 comm="syz.3.116" path="socket:[5396]" dev="sockfs" ino=5396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.797763][ T3775] ieee802154 phy0 wpan0: encryption failed: -22 [ 40.809012][ T29] audit: type=1400 audit(1726940939.121:554): avc: denied { bind } for pid=3760 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.820927][ T3777] loop0: detected capacity change from 0 to 512 [ 40.834527][ T29] audit: type=1400 audit(1726940939.121:555): avc: denied { write } for pid=3760 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.838148][ T29] audit: type=1326 audit(1726940939.171:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 40.883878][ T29] audit: type=1326 audit(1726940939.171:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 40.907190][ T29] audit: type=1326 audit(1726940939.171:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 40.930457][ T29] audit: type=1326 audit(1726940939.171:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 40.967917][ T3778] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 40.997485][ T3777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.010212][ T3777] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.102940][ T3786] loop4: detected capacity change from 0 to 512 [ 41.118821][ T3786] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.119: iget: bogus i_mode (0) [ 41.143966][ T3786] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.119: couldn't read orphan inode 17 (err -117) [ 41.158266][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.645749][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.689402][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.892850][ T3803] netlink: 'syz.3.124': attribute type 4 has an invalid length. [ 41.958112][ T3800] __nla_validate_parse: 4 callbacks suppressed [ 41.958132][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 41.981456][ T3806] loop2: detected capacity change from 0 to 128 [ 42.117722][ T3806] syz.2.125: attempt to access beyond end of device [ 42.117722][ T3806] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 42.143035][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 42.152561][ T3809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 42.237549][ T3817] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 42.346472][ T3822] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 42.535416][ T3817] Cannot find del_set index 0 as target [ 43.386435][ T3834] loop4: detected capacity change from 0 to 512 [ 43.441446][ T3834] EXT4-fs: Ignoring removed i_version option [ 43.447964][ T3834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.496410][ T3834] EXT4-fs (loop4): 1 truncate cleaned up [ 43.506568][ T3834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.548324][ T3840] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 43.613234][ T3840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.641882][ T3840] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 43.865308][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.951854][ T3848] loop0: detected capacity change from 0 to 2048 [ 44.056321][ T3854] loop4: detected capacity change from 0 to 1024 [ 44.064965][ T3854] EXT4-fs: Ignoring removed orlov option [ 44.218636][ T3858] loop3: detected capacity change from 0 to 512 [ 44.314673][ T3854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.332970][ T3858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.346210][ T3858] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.367666][ T3858] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 44.368231][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.402724][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.425432][ T3867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.143'. [ 44.439808][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 44.449528][ T3870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.523865][ T3874] loop3: detected capacity change from 0 to 256 [ 44.549397][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 44.574288][ T3876] loop4: detected capacity change from 0 to 1024 [ 44.581413][ T3876] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 44.591357][ T3876] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 44.601080][ T3876] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.611773][ T3876] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #5: comm syz.4.145: unexpected bad inode w/o EXT4_IGET_BAD [ 44.669679][ T3876] EXT4-fs (loop4): no journal found [ 44.675042][ T3876] EXT4-fs (loop4): can't get journal size [ 44.725496][ T3884] serio: Serial port ptm0 [ 44.801670][ T3876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.045392][ T3873] syz.4.145 uses obsolete (PF_INET,SOCK_PACKET) [ 45.107097][ T3873] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1404: inode #12: block 16: comm syz.4.145: path /28/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 45.239809][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.263848][ T3901] syz.4.153[3901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.264029][ T3901] syz.4.153[3901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.286784][ T3901] loop4: detected capacity change from 0 to 512 [ 45.324370][ T3901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.339283][ T3901] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.549859][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 45.614309][ T3907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.690755][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 45.690768][ T29] audit: type=1326 audit(1726940944.081:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 45.726632][ T29] audit: type=1326 audit(1726940944.111:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 45.783581][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.792173][ T29] audit: type=1400 audit(1726940944.171:697): avc: denied { execute } for pid=3909 comm="syz.3.155" path="/32/cpu.stat" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.854675][ T3914] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 45.879154][ T3907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.894940][ T29] audit: type=1400 audit(1726940944.281:698): avc: denied { create } for pid=3912 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.919465][ T3916] netlink: 'syz.3.158': attribute type 2 has an invalid length. [ 45.945099][ T29] audit: type=1326 audit(1726940944.331:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 45.971537][ T29] audit: type=1326 audit(1726940944.361:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 45.995000][ T29] audit: type=1326 audit(1726940944.361:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 46.018447][ T29] audit: type=1326 audit(1726940944.361:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 46.041805][ T29] audit: type=1400 audit(1726940944.361:703): avc: denied { watch } for pid=3918 comm="syz.4.159" path="/31" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.063545][ T29] audit: type=1326 audit(1726940944.361:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 46.168025][ T3926] netlink: 256 bytes leftover after parsing attributes in process `syz.3.163'. [ 46.184579][ T3907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.211204][ T3923] lo speed is unknown, defaulting to 1000 [ 46.221094][ T3923] lo speed is unknown, defaulting to 1000 [ 46.227201][ T3923] lo speed is unknown, defaulting to 1000 [ 46.277063][ T3923] infiniband syz1: set active [ 46.281849][ T3923] infiniband syz1: added lo [ 46.295999][ T3907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.297255][ T3923] RDS/IB: syz1: added [ 46.313008][ T3923] smc: adding ib device syz1 with port count 1 [ 46.319639][ T3923] smc: ib device syz1 port 1 has pnetid [ 46.335521][ T35] lo speed is unknown, defaulting to 1000 [ 46.341405][ T3341] lo speed is unknown, defaulting to 1000 [ 46.347580][ T3923] lo speed is unknown, defaulting to 1000 [ 46.384740][ T3941] random: crng reseeded on system resumption [ 46.391974][ T3923] lo speed is unknown, defaulting to 1000 [ 46.409145][ T3907] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.444646][ T3907] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.476811][ T3907] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.498430][ T3907] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.507241][ T3923] lo speed is unknown, defaulting to 1000 [ 46.577211][ T3941] pimreg3: entered allmulticast mode [ 46.583111][ T3923] lo speed is unknown, defaulting to 1000 [ 46.594279][ T3949] hub 9-0:1.0: USB hub found [ 46.601315][ T3949] hub 9-0:1.0: 8 ports detected [ 46.638897][ T3923] lo speed is unknown, defaulting to 1000 [ 46.663622][ T3951] netlink: 'syz.2.170': attribute type 10 has an invalid length. [ 46.690296][ T3951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.170'. [ 46.720589][ T3951] x_tables: duplicate entry at hook 3 [ 46.730838][ T3951] netlink: 'syz.2.170': attribute type 16 has an invalid length. [ 46.784929][ T3958] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3958 comm=syz.2.173 [ 46.793027][ T3955] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 46.866186][ T3962] loop2: detected capacity change from 0 to 1024 [ 46.895824][ T3962] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.945679][ T3966] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.954922][ T3962] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 46.963936][ T3962] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.974967][ T3962] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.173: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.989732][ T3962] EXT4-fs (loop2): 1 orphan inode deleted [ 47.001777][ T3962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.028907][ T3961] syz.0.174[3961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.029106][ T3961] syz.0.174[3961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.045241][ T3962] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz.2.173: path /30/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 47.078135][ T3962] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 17: comm syz.2.173: path /30/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.100421][ T3962] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 18: comm syz.2.173: path /30/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.130682][ T3962] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 19: comm syz.2.173: path /30/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.137106][ T3974] loop3: detected capacity change from 0 to 256 [ 47.161845][ T3979] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm syz.2.173: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 47.181177][ T3962] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 20: comm syz.2.173: path /30/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.224636][ T3962] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 21: comm syz.2.173: path /30/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.246147][ T3962] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 22: comm syz.2.173: path /30/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.267934][ T3962] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 23: comm syz.2.173: path /30/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 47.629380][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.781457][ T4052] lo speed is unknown, defaulting to 1000 [ 47.944469][ T4119] loop1: detected capacity change from 0 to 512 [ 47.999672][ T4119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.097472][ T4119] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.209494][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.255931][ T4138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 48.316622][ T4142] loop1: detected capacity change from 0 to 512 [ 48.353848][ T4142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.420400][ T4142] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.552148][ T4142] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.190: corrupted inode contents [ 48.555232][ T4157] loop3: detected capacity change from 0 to 1024 [ 48.585853][ T4157] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.596150][ T4142] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.190: mark_inode_dirty error [ 48.603027][ T4159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.193'. [ 48.620701][ T4142] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.190: corrupted inode contents [ 48.637793][ T4157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.638229][ T4142] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #19: comm syz.1.190: mark_inode_dirty error [ 48.691352][ T4142] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #19: comm syz.1.190: mark inode dirty (error -117) [ 48.704221][ T4142] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 48.736984][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.853587][ T4171] loop2: detected capacity change from 0 to 512 [ 48.891356][ T4171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 48.899494][ T4171] System zones: 0-2, 18-18, 34-34 [ 48.906675][ T4171] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.196: bg 0: block 248: padding at end of block bitmap is not set [ 48.922743][ T4171] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.196: Failed to acquire dquot type 1 [ 48.943715][ T4171] EXT4-fs (loop2): 1 truncate cleaned up [ 48.950031][ T4171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.962669][ T4171] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.989834][ T4169] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 49.008058][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.081759][ T4178] loop2: detected capacity change from 0 to 2048 [ 49.116268][ T4180] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 49.133341][ T4178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.157203][ T4178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.188164][ T4187] loop0: detected capacity change from 0 to 512 [ 49.211070][ T4187] EXT4-fs: Ignoring removed i_version option [ 49.229248][ T4187] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.242702][ T4187] EXT4-fs (loop0): 1 truncate cleaned up [ 49.255625][ T4187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.294319][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.328085][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 49.336987][ T4197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.344453][ T4197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.374804][ T4197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.382357][ T4197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.404645][ T4197] bond0: (slave batadv0): Releasing backup interface [ 49.419962][ T4209] random: crng reseeded on system resumption [ 49.475873][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.504401][ T4213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4213 comm=syz.4.206 [ 49.545692][ T4215] loop3: detected capacity change from 0 to 512 [ 49.577684][ T4209] pimreg3: entered allmulticast mode [ 49.594216][ T4215] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.205: iget: bogus i_mode (0) [ 49.621933][ T4215] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.205: couldn't read orphan inode 17 (err -117) [ 49.648923][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.688730][ T4222] loop4: detected capacity change from 0 to 512 [ 49.747656][ T4224] loop1: detected capacity change from 0 to 512 [ 49.758728][ T4222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.774022][ T4222] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.786494][ T4224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.821398][ T4222] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 49.835105][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.853604][ T4224] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.870916][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.895260][ T4233] loop2: detected capacity change from 0 to 512 [ 49.907213][ T4233] EXT4-fs: Ignoring removed i_version option [ 49.927572][ T4235] loop3: detected capacity change from 0 to 512 [ 49.934335][ T4233] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.964516][ T4233] EXT4-fs (loop2): 1 truncate cleaned up [ 49.978304][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.003345][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.019387][ T4235] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.032650][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.068377][ T4237] can0: slcan on ttyS3. [ 50.077932][ T4245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'. [ 50.098422][ T4243] loop0: detected capacity change from 0 to 512 [ 50.109869][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 50.119573][ T4235] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.213: corrupted inode contents [ 50.133740][ T4235] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #19: comm syz.3.213: mark_inode_dirty error [ 50.134972][ T4243] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.150553][ T4235] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.213: corrupted inode contents [ 50.171433][ T4235] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3005: inode #19: comm syz.3.213: mark_inode_dirty error [ 50.183898][ T4243] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.216: bg 0: block 264: padding at end of block bitmap is not set [ 50.200159][ T4235] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3008: inode #19: comm syz.3.213: mark inode dirty (error -117) [ 50.200816][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.233496][ T4243] EXT4-fs (loop0): Remounting filesystem read-only [ 50.240963][ T4248] lo speed is unknown, defaulting to 1000 [ 50.256483][ T4243] EXT4-fs (loop0): 1 truncate cleaned up [ 50.263434][ T4235] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 50.284734][ T4243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.308630][ T4257] loop2: detected capacity change from 0 to 512 [ 50.315766][ T4243] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 50.336563][ T4243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.348815][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.350910][ T4262] serio: Serial port ptm0 [ 50.435957][ T4269] loop2: detected capacity change from 0 to 8192 [ 50.446515][ T4274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4274 comm=syz.3.220 [ 50.474371][ T4273] loop0: detected capacity change from 0 to 1024 [ 50.504822][ T4273] EXT4-fs: Ignoring removed orlov option [ 50.515515][ T4271] loop3: detected capacity change from 0 to 1024 [ 50.536105][ T4271] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.546296][ T4279] loop2: detected capacity change from 0 to 2048 [ 50.554746][ T4271] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.562833][ T4271] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.569287][ T4271] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.220: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.583588][ T4271] EXT4-fs (loop3): 1 orphan inode deleted [ 50.589739][ T4271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.602400][ T4277] syzkaller0: entered allmulticast mode [ 50.615780][ T4271] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz.3.220: path /45/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 50.651042][ T4273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.651422][ T4271] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 17: comm syz.3.220: path /45/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.706272][ T4271] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 18: comm syz.3.220: path /45/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.726659][ T4236] can0 (unregistered): slcan off ttyS3. [ 50.727486][ T4271] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 19: comm syz.3.220: path /45/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.733899][ T4277] syzkaller0 (unregistering): left allmulticast mode [ 50.772325][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.783534][ T4296] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #2: block 16: comm syz.3.220: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 50.802970][ T4271] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 20: comm syz.3.220: path /45/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.826021][ T4271] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 21: comm syz.3.220: path /45/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.854760][ T4271] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 22: comm syz.3.220: path /45/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.878197][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 50.878218][ T29] audit: type=1400 audit(1726940949.261:984): avc: denied { create } for pid=4302 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.906376][ T4271] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 23: comm syz.3.220: path /45/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.923892][ T4303] vlan2: entered promiscuous mode [ 50.931809][ T4303] vlan2: entered allmulticast mode [ 50.937898][ T29] audit: type=1400 audit(1726940949.301:985): avc: denied { ioctl } for pid=4302 comm="syz.0.224" path="socket:[5880]" dev="sockfs" ino=5880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.968190][ T4303] vlan0: entered allmulticast mode [ 50.973426][ T4303] veth0_vlan: entered allmulticast mode [ 50.979032][ T4303] vlan0: entered promiscuous mode [ 51.003623][ T4303] team0: Port device vlan2 added [ 51.011446][ T4309] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 51.047254][ T4308] veth0_vlan: left allmulticast mode [ 51.061790][ T4308] vlan0: left allmulticast mode [ 51.066713][ T4308] vlan0: left promiscuous mode [ 51.077353][ T4308] team0: Port device vlan2 removed [ 51.208911][ T4309] Cannot find del_set index 0 as target [ 51.235508][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.265034][ T29] audit: type=1326 audit(1726940949.651:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 51.294174][ T4317] loop3: detected capacity change from 0 to 512 [ 51.306728][ T29] audit: type=1326 audit(1726940949.681:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 51.330081][ T29] audit: type=1326 audit(1726940949.681:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 51.353525][ T29] audit: type=1326 audit(1726940949.681:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 51.376803][ T29] audit: type=1326 audit(1726940949.681:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 51.400243][ T29] audit: type=1326 audit(1726940949.681:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 51.423577][ T29] audit: type=1326 audit(1726940949.681:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 51.446992][ T29] audit: type=1326 audit(1726940949.681:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 51.510450][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 51.620013][ T4315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.702734][ T4323] loop4: detected capacity change from 0 to 512 [ 51.726343][ T4317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.744886][ T4317] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.807852][ T4323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.820946][ T4323] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.114726][ T4328] loop2: detected capacity change from 0 to 512 [ 52.127610][ T4315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.140479][ T4328] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.152825][ T4328] EXT4-fs (loop2): 1 truncate cleaned up [ 52.159037][ T4328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.185456][ T4328] EXT4-fs (loop2): shut down requested (0) [ 52.192524][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.203533][ T4329] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.230: corrupted inode contents [ 52.216239][ T4329] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.230: mark_inode_dirty error [ 52.228833][ T4329] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.230: corrupted inode contents [ 52.242008][ T4329] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3005: inode #19: comm syz.4.230: mark_inode_dirty error [ 52.254296][ T4329] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3008: inode #19: comm syz.4.230: mark inode dirty (error -117) [ 52.255469][ T4315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.267684][ T4329] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 52.299829][ T4336] loop3: detected capacity change from 0 to 512 [ 52.310602][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.325549][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.347055][ T4336] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 52.356658][ T4315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.362527][ T4336] System zones: 0-2, 18-18, 34-34 [ 52.377470][ T4336] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.232: bg 0: block 248: padding at end of block bitmap is not set [ 52.394139][ T4340] lo speed is unknown, defaulting to 1000 [ 52.405065][ T4342] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 52.414930][ T4336] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.232: Failed to acquire dquot type 1 [ 52.432352][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.434604][ T4336] EXT4-fs (loop3): 1 truncate cleaned up [ 52.442371][ T4342] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 52.446397][ T4336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.466152][ T4336] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.517473][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.521100][ T4315] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.539462][ T4315] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.573766][ T4315] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.592135][ T4349] can0: slcan on ttyS3. [ 52.594742][ T4315] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.911649][ T4349] lo speed is unknown, defaulting to 1000 [ 53.100386][ T4363] serio: Serial port ptm0 [ 53.157682][ T4373] loop0: detected capacity change from 0 to 164 [ 53.173313][ T4373] syz.0.241[4373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.173553][ T4373] syz.0.241[4373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.258866][ T4379] syzkaller0: entered allmulticast mode [ 53.278127][ T4373] SELinux: policydb string SE Linu does not match my string SE Linux [ 53.286595][ T4373] SELinux: failed to load policy [ 53.292300][ T4373] sctp: [Deprecated]: syz.0.241 (pid 4373) Use of int in max_burst socket option deprecated. [ 53.292300][ T4373] Use struct sctp_assoc_value instead [ 53.334257][ T4379] syzkaller0 (unregistering): left allmulticast mode [ 53.347679][ T4381] loop0: detected capacity change from 0 to 512 [ 53.364309][ T4381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.403705][ T4381] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.534192][ T4386] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.246: corrupted inode contents [ 53.546437][ T4386] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.246: mark_inode_dirty error [ 53.602085][ T4386] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.246: corrupted inode contents [ 53.614570][ T4386] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3005: inode #19: comm syz.0.246: mark_inode_dirty error [ 53.631578][ T4386] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3008: inode #19: comm syz.0.246: mark inode dirty (error -117) [ 53.644389][ T4386] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 53.698688][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.711395][ T4395] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 53.735456][ T4395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.745560][ T4395] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 53.860915][ T4403] loop4: detected capacity change from 0 to 512 [ 53.910149][ T4403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.932428][ T4403] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.943468][ T4404] cgroup: Unknown subsys name 'cpuset' [ 53.965234][ T4403] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #12: comm syz.4.251: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 54.006915][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.059141][ T4392] lo speed is unknown, defaulting to 1000 [ 54.247955][ T4075] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.290738][ T4415] can0 (unregistered): slcan off ttyS3. [ 54.354623][ T4075] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.509458][ T4075] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.647057][ T4075] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.661238][ T4431] loop0: detected capacity change from 0 to 164 [ 54.689975][ T4431] isofs: isofs_export_get_parent(): child directory not normalized! [ 54.704189][ T4431] SELinux: policydb string SE Linu does not match my string SE Linux [ 54.723258][ T4431] SELinux: failed to load policy [ 54.729543][ T4431] sctp: [Deprecated]: syz.0.253 (pid 4431) Use of int in max_burst socket option deprecated. [ 54.729543][ T4431] Use struct sctp_assoc_value instead [ 54.824823][ T4392] chnl_net:caif_netlink_parms(): no params data found [ 54.847927][ T4075] bridge_slave_1: left allmulticast mode [ 54.853743][ T4075] bridge_slave_1: left promiscuous mode [ 54.859519][ T4075] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.869143][ T4075] bridge_slave_0: left allmulticast mode [ 54.874885][ T4075] bridge_slave_0: left promiscuous mode [ 54.880647][ T4075] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.891983][ T4444] loop0: detected capacity change from 0 to 164 [ 54.965347][ T4449] loop4: detected capacity change from 0 to 2048 [ 54.981629][ T4444] isofs: isofs_export_get_parent(): child directory not normalized! [ 55.001410][ T4444] SELinux: policydb string SE Linu does not match my string SE Linux [ 55.009694][ T4444] SELinux: failed to load policy [ 55.015332][ T4444] sctp: [Deprecated]: syz.0.254 (pid 4444) Use of int in max_burst socket option deprecated. [ 55.015332][ T4444] Use struct sctp_assoc_value instead [ 55.085504][ T4075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.118267][ T4075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.133958][ T4075] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 55.163040][ T4075] bond0 (unregistering): Released all slaves [ 55.275870][ T4458] lo speed is unknown, defaulting to 1000 [ 55.292421][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.299705][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.307996][ T4392] bridge_slave_0: entered allmulticast mode [ 55.318038][ T4392] bridge_slave_0: entered promiscuous mode [ 55.409621][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.416831][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.430570][ T4392] bridge_slave_1: entered allmulticast mode [ 55.439944][ T4392] bridge_slave_1: entered promiscuous mode [ 55.491045][ T4075] hsr_slave_0: left promiscuous mode [ 55.496796][ T4075] hsr_slave_1: left promiscuous mode [ 55.502701][ T4075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.511588][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.519059][ T4075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.528999][ T4075] veth1_macvtap: left promiscuous mode [ 55.534551][ T4075] veth0_macvtap: left promiscuous mode [ 55.540151][ T4075] veth1_vlan: left promiscuous mode [ 55.545415][ T4075] veth0_vlan: left promiscuous mode [ 55.595880][ T4075] pimreg3 (unregistering): left allmulticast mode [ 55.642077][ T4075] team0 (unregistering): Port device team_slave_1 removed [ 55.652550][ T4075] team0 (unregistering): Port device team_slave_0 removed [ 55.706373][ T4392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.722829][ T4392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.745929][ T4392] team0: Port device team_slave_0 added [ 55.754316][ T4392] team0: Port device team_slave_1 added [ 55.776040][ T4392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.783235][ T4392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.809217][ T4392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.820545][ T4392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.827563][ T4392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.853560][ T4392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.883141][ T4392] hsr_slave_0: entered promiscuous mode [ 55.889451][ T4392] hsr_slave_1: entered promiscuous mode [ 55.895963][ T4392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.904724][ T4392] Cannot create hsr debugfs directory [ 55.935236][ T4500] loop4: detected capacity change from 0 to 164 [ 55.955848][ T4500] isofs: isofs_export_get_parent(): child directory not normalized! [ 55.963118][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 55.963135][ T29] audit: type=1326 audit(1726940954.341:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 55.984519][ T4506] syzkaller0: entered allmulticast mode [ 56.000439][ T4500] SELinux: policydb string SE Linu does not match my string SE Linux [ 56.008722][ T4500] SELinux: failed to load policy [ 56.027609][ T4500] sctp: [Deprecated]: syz.4.261 (pid 4500) Use of int in max_burst socket option deprecated. [ 56.027609][ T4500] Use struct sctp_assoc_value instead [ 56.068658][ T29] audit: type=1326 audit(1726940954.391:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.092133][ T29] audit: type=1326 audit(1726940954.391:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.115509][ T29] audit: type=1326 audit(1726940954.391:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.138982][ T29] audit: type=1326 audit(1726940954.391:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.162362][ T29] audit: type=1326 audit(1726940954.391:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.185733][ T29] audit: type=1326 audit(1726940954.391:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.209111][ T29] audit: type=1326 audit(1726940954.391:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.232456][ T29] audit: type=1326 audit(1726940954.391:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.255690][ T29] audit: type=1326 audit(1726940954.391:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 56.329104][ T4075] IPVS: stop unused estimator thread 0... [ 56.357435][ C0] ------------[ cut here ]------------ [ 56.363009][ C0] refcount_t: underflow; use-after-free. [ 56.368920][ C0] WARNING: CPU: 0 PID: 4518 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 56.375171][ T4520] loop4: detected capacity change from 0 to 164 [ 56.378373][ C0] Modules linked in: [ 56.388559][ C0] CPU: 0 UID: 0 PID: 4518 Comm: syz.3.263 Not tainted 6.11.0-syzkaller-07983-g7856a565416e #0 [ 56.398862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.409004][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 56.415253][ C0] Code: 72 ff ff ff e8 5b 06 72 ff 48 c7 c7 2d ea b2 86 e8 ff 6c 8a ff c6 05 25 b8 f4 04 01 90 48 c7 c7 d9 64 1b 86 e8 db c2 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 2c 06 72 ff 48 c7 c7 2a ea b2 86 e8 [ 56.434975][ C0] RSP: 0018:ffffc90000003b50 EFLAGS: 00010246 [ 56.441123][ C0] RAX: 9d2012f009072600 RBX: ffff8881157763e4 RCX: ffff888102f0a100 [ 56.449196][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.449216][ C0] RBP: 0000000000000003 R08: ffffffff8111f657 R09: 0000000000000000 [ 56.465207][ C0] R10: 0001ffffffffffff R11: ffff888102f0a100 R12: 0000000000000001 [ 56.465228][ C0] R13: ffff888114d6d000 R14: ffff8881157763e4 R15: 0000000000000000 [ 56.481312][ C0] FS: 00007f32584b76c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 56.490308][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.497016][ C0] CR2: 0000001b2fe13ff8 CR3: 000000011a206000 CR4: 00000000003506f0 [ 56.505089][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.513114][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.521133][ C0] Call Trace: [ 56.524436][ C0] [ 56.527296][ C0] ? __warn+0x141/0x350 [ 56.531572][ C0] ? report_bug+0x315/0x420 [ 56.536138][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 56.541776][ C0] ? handle_bug+0x60/0x90 [ 56.546175][ C0] ? exc_invalid_op+0x1a/0x50 [ 56.550937][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 56.554519][ T4530] SELinux: policydb string SE Linu does not match my string SE Linux [ 56.555996][ C0] ? __warn_printk+0x167/0x1b0 [ 56.568989][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 56.574632][ C0] sk_skb_reason_drop+0xe9/0x290 [ 56.579626][ C0] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 56.584578][ C0] j1939_tp_recv+0x699/0xa80 [ 56.585115][ T4520] isofs: isofs_export_get_parent(): child directory not normalized! [ 56.589206][ C0] j1939_can_recv+0x45f/0x550 [ 56.601965][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 56.607235][ C0] can_rcv_filter+0x225/0x4c0 [ 56.611994][ C0] can_receive+0x182/0x1f0 [ 56.616447][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 56.621017][ C0] can_rcv+0xe7/0x180 [ 56.625043][ C0] ? __pfx_can_rcv+0x10/0x10 [ 56.629296][ T4537] sctp: [Deprecated]: syz.4.264 (pid 4537) Use of int in max_burst socket option deprecated. [ 56.629296][ T4537] Use struct sctp_assoc_value instead [ 56.629654][ C0] __netif_receive_skb+0x123/0x280 [ 56.650214][ C0] process_backlog+0x22e/0x440 [ 56.655027][ C0] __napi_poll+0x63/0x3c0 [ 56.659392][ C0] ? net_rx_action+0x376/0x7f0 [ 56.664230][ C0] net_rx_action+0x3a1/0x7f0 [ 56.668984][ C0] handle_softirqs+0xbf/0x280 [ 56.673829][ C0] irq_exit_rcu+0x3e/0x90 [ 56.678195][ C0] sysvec_irq_work+0x6b/0x80 [ 56.682877][ C0] [ 56.685830][ C0] [ 56.687308][ T4530] SELinux: failed to load policy [ 56.688768][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 56.698713][ C0] RIP: 0010:default_send_IPI_self+0x38/0x80 [ 56.704669][ C0] Code: 04 25 00 c3 5f ff a9 00 10 00 00 74 10 f3 90 8b 04 25 00 c3 5f ff a9 00 10 00 00 75 f0 81 cb 00 00 04 00 89 1c 25 00 c3 5f ff <5b> 5d c3 cc cc cc cc bd e8 03 00 00 bb 00 04 00 00 bf 00 03 00 00 [ 56.724342][ C0] RSP: 0018:ffffc9000d99baa0 EFLAGS: 00000206 [ 56.730524][ C0] RAX: 00000000000400f6 RBX: 00000000000400f6 RCX: 0000000000040000 [ 56.738527][ C0] RDX: ffffc90002d8b000 RSI: 0000000000000060 RDI: 00000000000000f6 [ 56.746560][ C0] RBP: 0000000000000000 R08: ffffffff8106fd57 R09: 0000000000000000 [ 56.754585][ C0] R10: 0001ffffffffffff R11: 0001c9000d99ba8f R12: ffffc9000d561018 [ 56.762608][ C0] R13: ffffc9000d561000 R14: 2c1008001f8bfbff R15: 0000000000000020 [ 56.770635][ C0] ? arch_irq_work_raise+0x27/0x50 [ 56.775788][ C0] arch_irq_work_raise+0x48/0x50 [ 56.780791][ C0] __irq_work_queue_local+0x82/0x1d0 [ 56.786150][ C0] irq_work_queue+0x85/0x120 [ 56.790819][ C0] bpf_ringbuf_discard+0xcd/0xf0 [ 56.795795][ C0] bpf_prog_8c296d0debb99b26+0x46/0x4a [ 56.801300][ C0] bpf_trace_run2+0x104/0x1d0 [ 56.806025][ C0] ? security_compute_sid+0xda7/0xe10 [ 56.811456][ C0] ? security_compute_sid+0xda7/0xe10 [ 56.816967][ C0] __traceiter_kfree+0x2b/0x50 [ 56.821823][ C0] ? security_compute_sid+0xda7/0xe10 [ 56.827262][ C0] kfree+0x247/0x2f0 [ 56.831249][ C0] security_compute_sid+0xda7/0xe10 [ 56.836518][ C0] security_transition_sid+0x58/0x70 [ 56.841892][ C0] selinux_socket_create+0x11f/0x180 [ 56.847233][ C0] security_socket_create+0x4f/0x90 [ 56.852504][ C0] __sock_create+0xe2/0x4f0 [ 56.857048][ C0] ? xfd_validate_state+0x46/0xf0 [ 56.862127][ C0] __sys_socket+0xae/0x240 [ 56.866644][ C0] __x64_sys_socket+0x3f/0x50 [ 56.871392][ C0] x64_sys_call+0x2c97/0x2d60 [ 56.876113][ C0] do_syscall_64+0xc9/0x1c0 [ 56.880707][ C0] ? clear_bhb_loop+0x55/0xb0 [ 56.885451][ C0] ? clear_bhb_loop+0x55/0xb0 [ 56.890212][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.896167][ C0] RIP: 0033:0x7f325983def9 [ 56.900619][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.920267][ C0] RSP: 002b:00007f32584b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 56.928683][ C0] RAX: ffffffffffffffda RBX: 00007f32599f5f80 RCX: 00007f325983def9 [ 56.936692][ C0] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 000000000000001d [ 56.943927][ T4545] rdma_rxe: rxe_newlink: failed to add lo [ 56.944706][ C0] RBP: 00007f32598b0b76 R08: 0000000000000000 R09: 0000000000000000 [ 56.958482][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.966513][ C0] R13: 0000000000000000 R14: 00007f32599f5f80 R15: 00007fff2992be88 [ 56.974533][ C0] [ 56.977564][ C0] ---[ end trace 0000000000000000 ]--- [ 57.021004][ T4547] loop4: detected capacity change from 0 to 164 [ 57.039308][ T4547] isofs: isofs_export_get_parent(): child directory not normalized! [ 57.052027][ T4547] SELinux: policydb string SE Linu does not match my string SE Linux [ 57.060373][ T4547] SELinux: failed to load policy [ 57.065916][ T4547] sctp: [Deprecated]: syz.4.266 (pid 4547) Use of int in max_burst socket option deprecated. [ 57.065916][ T4547] Use struct sctp_assoc_value instead [ 57.114877][ T4549] loop4: detected capacity change from 0 to 512 [ 57.123330][ T4549] EXT4-fs: Ignoring removed oldalloc option [ 57.137815][ T4549] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.269: Parent and EA inode have the same ino 15 [ 57.151722][ T4549] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.269: Parent and EA inode have the same ino 15 [ 57.164702][ T4549] EXT4-fs (loop4): 1 orphan inode deleted [ 57.194551][ T4549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.341684][ T4524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 57.370788][ T4549] lo speed is unknown, defaulting to 1000 [ 57.376674][ T4549] lo speed is unknown, defaulting to 1000 [ 57.383187][ T4549] lo speed is unknown, defaulting to 1000 [ 57.389329][ T4549] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.401224][ T4549] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 57.427880][ T4549] lo speed is unknown, defaulting to 1000 [ 57.430763][ T4558] lo speed is unknown, defaulting to 1000 [ 57.444348][ T4549] lo speed is unknown, defaulting to 1000 [ 57.456997][ T4549] lo speed is unknown, defaulting to 1000 [ 57.481330][ T4549] lo speed is unknown, defaulting to 1000 [ 57.490867][ T4549] lo speed is unknown, defaulting to 1000 [ 57.505299][ T4549] lo speed is unknown, defaulting to 1000 [ 57.512191][ T4549] lo speed is unknown, defaulting to 1000 [ 57.616270][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.668567][ T4392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.684652][ T4392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.715309][ T4392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.732351][ T4392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.753078][ T4584] lo speed is unknown, defaulting to 1000 [ 57.815666][ T4392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.827433][ T4584] lo speed is unknown, defaulting to 1000 [ 57.831141][ T4392] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.844388][ T4098] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.851541][ T4098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.867027][ T4075] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.874228][ T4075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.938316][ T4392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.948839][ T4392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.035662][ C0] vcan0: j1939_tp_rxtimer: 0xffff888114d6d000: rx timeout, send abort [ 58.044034][ C0] vcan0: j1939_tp_rxtimer: 0xffff888114d6dc00: rx timeout, send abort [ 58.052471][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888114d6d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.055131][ T4392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.066824][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888114d6dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.116103][ T4622] loop3: detected capacity change from 0 to 512 [ 58.151830][ T4625] loop0: detected capacity change from 0 to 164 [ 58.172610][ T4622] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.187592][ T4625] isofs: isofs_export_get_parent(): child directory not normalized! [ 58.197508][ T4625] SELinux: policydb string SE Linu does not match my string SE Linux [ 58.206170][ T4625] SELinux: failed to load policy [ 58.212554][ T4625] sctp: [Deprecated]: syz.0.277 (pid 4625) Use of int in max_burst socket option deprecated. [ 58.212554][ T4625] Use struct sctp_assoc_value instead [ 58.243114][ T4392] veth0_vlan: entered promiscuous mode [ 58.271915][ T4641] loop1: detected capacity change from 0 to 164 [ 58.306442][ T4392] veth1_vlan: entered promiscuous mode [ 58.319674][ T4641] isofs: isofs_export_get_parent(): child directory not normalized! [ 58.349808][ T4392] veth0_macvtap: entered promiscuous mode [ 58.369563][ T4392] veth1_macvtap: entered promiscuous mode [ 58.371070][ T4648] SELinux: policydb string SE Linu does not match my string SE Linux [ 58.386732][ T4648] SELinux: failed to load policy [ 58.396222][ T4641] sctp: [Deprecated]: syz.1.278 (pid 4641) Use of int in max_burst socket option deprecated. [ 58.396222][ T4641] Use struct sctp_assoc_value instead [ 58.399091][ T4651] loop0: detected capacity change from 0 to 164 [ 58.426844][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.437433][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.452039][ T4392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.490770][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.499680][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 58.501414][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.501430][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.501450][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.505559][ T4392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.552646][ T4392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.561492][ T4392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.570308][ T4392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.570347][ T4392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.574834][ T4651] isofs: isofs_export_get_parent(): child directory not normalized! [ 58.602429][ T4664] SELinux: policydb string SE Linu does not match my string SE Linux [ 58.661183][ T4664] SELinux: failed to load policy [ 58.679464][ T4651] sctp: [Deprecated]: syz.0.289 (pid 4651) Use of int in max_burst socket option deprecated. [ 58.679464][ T4651] Use struct sctp_assoc_value instead [ 58.745618][ T4676] loop0: detected capacity change from 0 to 2048 [ 58.752993][ T4652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.776155][ T4660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.281'. [ 58.899831][ T4686] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 58.906354][ T4686] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 58.936606][ T4652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.967999][ T4686] hsr_slave_0: left promiscuous mode [ 58.974727][ T4686] hsr_slave_1: left promiscuous mode [ 59.011196][ T4676] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.283: bg 0: block 234: padding at end of block bitmap is not set [ 59.034672][ T4676] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 59.047352][ T4676] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.047352][ T4676] [ 59.057160][ T4676] EXT4-fs (loop0): Total free blocks count 0 [ 59.063203][ T4676] EXT4-fs (loop0): Free/Dirty block details [ 59.069123][ T4676] EXT4-fs (loop0): free_blocks=0 [ 59.074143][ T4676] EXT4-fs (loop0): dirty_blocks=8192 [ 59.079424][ T4676] EXT4-fs (loop0): Block reservation details [ 59.085457][ T4676] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 59.103184][ T4687] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 59.116064][ T4687] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.116064][ T4687] [ 59.123122][ T4652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.173730][ T4692] loop4: detected capacity change from 0 to 164 [ 59.195358][ T4692] isofs: isofs_export_get_parent(): child directory not normalized! [ 59.216976][ T4692] SELinux: policydb string SE Linu does not match my string SE Linux [ 59.239641][ T4692] SELinux: failed to load policy [ 59.246572][ T4692] sctp: [Deprecated]: syz.4.286 (pid 4692) Use of int in max_burst socket option deprecated. [ 59.246572][ T4692] Use struct sctp_assoc_value instead [ 59.317670][ T4705] loop4: detected capacity change from 0 to 512 [ 59.342044][ T4652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.359367][ T4700] netlink: 'syz.0.284': attribute type 10 has an invalid length. [ 59.373015][ T4705] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.386290][ T4705] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.287: corrupted inode contents [ 59.405264][ T4652] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.416568][ T4652] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.418444][ T4705] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.287: mark_inode_dirty error [ 59.453957][ T4652] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.464247][ T4705] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.287: corrupted inode contents [ 59.481284][ T4652] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.747333][ T4721] lo speed is unknown, defaulting to 1000 [ 59.773982][ T4734] netlink: 'syz.1.299': attribute type 10 has an invalid length. [ 59.785001][ T4734] team0: Port device netdevsim1 added [ 59.789207][ T4736] netlink: 48 bytes leftover after parsing attributes in process `syz.3.293'. [ 59.800464][ T4721] lo speed is unknown, defaulting to 1000 [ 59.809572][ T4734] netlink: 'syz.1.299': attribute type 10 has an invalid length. [ 59.826004][ T4734] team0: Port device netdevsim1 removed [ 59.834437][ T4734] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 59.895446][ T4738] can0: slcan on ttyS3. [ 59.994071][ T4738] lo speed is unknown, defaulting to 1000 [ 60.155698][ T4738] lo speed is unknown, defaulting to 1000 [ 60.236266][ T4755] loop2: detected capacity change from 0 to 512 [ 60.243801][ T4755] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.255027][ T4755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.301: bg 0: block 264: padding at end of block bitmap is not set [ 60.270418][ T4755] EXT4-fs (loop2): Remounting filesystem read-only [ 60.277208][ T4755] EXT4-fs (loop2): 1 truncate cleaned up [ 60.284286][ T4755] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 60.361846][ T4758] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.302'. [ 60.376720][ T4758] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.302'. [ 60.397250][ T4762] 9pnet_fd: Insufficient options for proto=fd [ 60.414308][ T4758] loop0: detected capacity change from 0 to 512 [ 60.431162][ T4758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.457163][ T4758] EXT4-fs (loop0): 1 orphan inode deleted [ 60.463609][ T4758] EXT4-fs (loop0): 1 truncate cleaned up [ 60.516805][ T4769] 9pnet_fd: Insufficient options for proto=fd [ 60.565791][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 60.631169][ T4777] 9pnet_fd: Insufficient options for proto=fd [ 60.635805][ T4775] loop3: detected capacity change from 0 to 512 [ 60.663609][ T4775] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.677607][ T4767] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.681410][ T4779] loop0: detected capacity change from 0 to 512 [ 60.696545][ T4782] loop2: detected capacity change from 0 to 164 [ 60.704530][ T4779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.704762][ T4775] EXT4-fs (loop3): 1 orphan inode deleted [ 60.720484][ T4775] EXT4-fs (loop3): 1 truncate cleaned up [ 60.736458][ T4782] isofs: isofs_export_get_parent(): child directory not normalized! [ 60.745553][ T4782] SELinux: policydb string SE Linu does not match my string SE Linux [ 60.745945][ T4775] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 60.753975][ T4782] SELinux: failed to load policy [ 60.754329][ T4782] sctp: [Deprecated]: syz.2.309 (pid 4782) Use of int in max_burst socket option deprecated. [ 60.754329][ T4782] Use struct sctp_assoc_value instead [ 60.762250][ T4775] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.784580][ T4779] EXT4-fs (loop0): 1 truncate cleaned up [ 60.796913][ T4775] EXT4-fs (loop3): Remounting filesystem read-only [ 60.822498][ T4779] EXT4-fs (loop0): shut down requested (0) [ 60.861336][ T4737] can0 (unregistered): slcan off ttyS3. [ 60.868799][ T4790] netlink: 'syz.2.311': attribute type 5 has an invalid length. [ 60.889654][ T4790] loop2: detected capacity change from 0 to 1024 [ 60.944817][ T4790] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 60.971608][ T4790] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 60.972557][ T4794] loop1: detected capacity change from 0 to 164 [ 60.984337][ T4790] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.984337][ T4790] [ 61.000425][ T4790] EXT4-fs (loop2): Total free blocks count 0 [ 61.006425][ T4790] EXT4-fs (loop2): Free/Dirty block details [ 61.012388][ T4790] EXT4-fs (loop2): free_blocks=68451041280 [ 61.018460][ T4790] EXT4-fs (loop2): dirty_blocks=16 [ 61.023694][ T4790] EXT4-fs (loop2): Block reservation details [ 61.029734][ T4790] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 61.046433][ T4794] isofs: isofs_export_get_parent(): child directory not normalized! [ 61.076208][ T4794] SELinux: policydb string SE Linu does not match my string SE Linux [ 61.101883][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 61.111556][ T4794] SELinux: failed to load policy [ 61.124318][ T4794] sctp: [Deprecated]: syz.1.313 (pid 4794) Use of int in max_burst socket option deprecated. [ 61.124318][ T4794] Use struct sctp_assoc_value instead [ 61.143946][ T4767] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.167719][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 61.177300][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 61.191572][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 61.212468][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 61.230350][ T4788] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 61.327965][ T4767] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.407744][ T4811] loop3: detected capacity change from 0 to 512 [ 61.418494][ T4796] lo speed is unknown, defaulting to 1000 [ 61.429200][ T4767] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.431594][ T4817] loop1: detected capacity change from 0 to 512 [ 61.457998][ T4811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.492399][ T4811] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.314: bg 0: block 264: padding at end of block bitmap is not set [ 61.507506][ T4817] EXT4-fs: Ignoring removed oldalloc option [ 61.516617][ T4811] EXT4-fs (loop3): Remounting filesystem read-only [ 61.535299][ T4767] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.541004][ T4811] EXT4-fs (loop3): 1 truncate cleaned up [ 61.556900][ T4767] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.561165][ T4817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.327: Parent and EA inode have the same ino 15 [ 61.578935][ T4767] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.592339][ T4811] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 61.599767][ T4817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.327: Parent and EA inode have the same ino 15 [ 61.653689][ T4767] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.676928][ T4817] EXT4-fs (loop1): 1 orphan inode deleted [ 61.723702][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 61.723787][ T29] audit: type=1400 audit(1726940960.111:1115): avc: denied { getopt } for pid=4835 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.801355][ T4841] 9pnet_fd: Insufficient options for proto=fd [ 62.079957][ T4844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.317'. [ 62.236924][ T4846] loop3: detected capacity change from 0 to 2048 [ 62.256756][ T4846] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.272401][ T4846] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 62.278387][ T4827] lo speed is unknown, defaulting to 1000 [ 62.284810][ T4846] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.284810][ T4846] [ 62.300333][ T4846] EXT4-fs (loop3): Total free blocks count 0 [ 62.306492][ T4846] EXT4-fs (loop3): Free/Dirty block details [ 62.312525][ T4846] EXT4-fs (loop3): free_blocks=2415919104 [ 62.318293][ T4846] EXT4-fs (loop3): dirty_blocks=16 [ 62.318985][ T4827] lo speed is unknown, defaulting to 1000 [ 62.323474][ T4846] EXT4-fs (loop3): Block reservation details [ 62.335251][ T4846] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 62.367869][ T4796] lo speed is unknown, defaulting to 1000 [ 62.383805][ T4817] siw: device registration error -23 [ 62.502063][ T4853] loop1: detected capacity change from 0 to 164 [ 62.526473][ T4854] loop2: detected capacity change from 0 to 512 [ 62.541292][ T4853] isofs: isofs_export_get_parent(): child directory not normalized! [ 62.560007][ T4853] SELinux: policydb string SE Linu does not match my string SE Linux [ 62.575132][ T4853] SELinux: failed to load policy [ 62.629132][ T4854] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.643573][ T4853] sctp: [Deprecated]: syz.1.323 (pid 4853) Use of int in max_burst socket option deprecated. [ 62.643573][ T4853] Use struct sctp_assoc_value instead [ 62.659084][ T29] audit: type=1400 audit(1726940961.031:1116): avc: denied { create } for pid=4845 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.678483][ T29] audit: type=1400 audit(1726940961.031:1117): avc: denied { bind } for pid=4845 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.697676][ T29] audit: type=1400 audit(1726940961.031:1118): avc: denied { write } for pid=4845 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.803136][ T4867] geneve2: entered promiscuous mode [ 62.808531][ T4867] geneve2: entered allmulticast mode [ 62.879651][ T29] audit: type=1400 audit(1726940961.261:1119): avc: denied { getopt } for pid=4858 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.929528][ T4872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4872 comm=syz.1.330 [ 63.022113][ T4846] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 63.030705][ T4846] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 63.508497][ T4881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4881 comm=syz.0.341 [ 63.525103][ T4880] loop4: detected capacity change from 0 to 512 [ 63.531623][ T29] audit: type=1400 audit(1726940961.911:1120): avc: denied { ioctl } for pid=4878 comm="syz.2.333" path="socket:[8176]" dev="sockfs" ino=8176 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.558892][ T4884] netlink: 'syz.3.335': attribute type 5 has an invalid length. [ 63.567024][ T4880] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.572164][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 63.588598][ T4887] loop0: detected capacity change from 0 to 1024 [ 63.589234][ T4887] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.602591][ T4886] loop2: detected capacity change from 0 to 164 [ 63.619849][ T4880] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.331: bg 0: block 264: padding at end of block bitmap is not set [ 63.640243][ T4887] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 63.648343][ T4887] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.655059][ T4880] EXT4-fs (loop4): Remounting filesystem read-only [ 63.662389][ T4880] EXT4-fs (loop4): 1 truncate cleaned up [ 63.668193][ T4887] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.341: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.682160][ T4880] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 63.686145][ T4887] EXT4-fs (loop0): 1 orphan inode deleted [ 63.689127][ T4886] /dev/loop2: Can't open blockdev [ 63.708200][ T29] audit: type=1400 audit(1726940962.091:1121): avc: denied { accept } for pid=4885 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.712708][ T4886] netlink: 80 bytes leftover after parsing attributes in process `syz.2.336'. [ 63.727985][ T29] audit: type=1400 audit(1726940962.101:1122): avc: denied { mount } for pid=4885 comm="syz.2.336" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 63.742137][ T4887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.341: path /66/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 63.784956][ T4892] loop3: detected capacity change from 0 to 1024 [ 63.786026][ T4887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz.0.341: path /66/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.818829][ T4887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 18: comm syz.0.341: path /66/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.840136][ T4893] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 16: comm syz.0.341: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 63.874447][ T4882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.881162][ T4887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 19: comm syz.0.341: path /66/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.912113][ T4887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 20: comm syz.0.341: path /66/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.917980][ T29] audit: type=1400 audit(1726940962.301:1123): avc: denied { unmount } for pid=4392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 63.944210][ T4892] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.953195][ T4887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 21: comm syz.0.341: path /66/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.969655][ T4892] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 63.990565][ T4887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 22: comm syz.0.341: path /66/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 64.000102][ T4892] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.000102][ T4892] [ 64.000121][ T4892] EXT4-fs (loop3): Total free blocks count 0 [ 64.000134][ T4892] EXT4-fs (loop3): Free/Dirty block details [ 64.033497][ T4887] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 23: comm syz.0.341: path /66/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 64.035933][ T4892] EXT4-fs (loop3): free_blocks=68451041280 [ 64.046095][ T4896] loop4: detected capacity change from 0 to 2048 [ 64.062016][ T4892] EXT4-fs (loop3): dirty_blocks=16 [ 64.062043][ T4892] EXT4-fs (loop3): Block reservation details [ 64.085622][ T4892] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 64.149045][ T4909] loop3: detected capacity change from 0 to 164 [ 64.198401][ T4882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.209859][ T4909] isofs: isofs_export_get_parent(): child directory not normalized! [ 64.210537][ T4909] SELinux: policydb string SE Linu does not match my string SE Linux [ 64.210565][ T4909] SELinux: failed to load policy [ 64.210879][ T4909] sctp: [Deprecated]: syz.3.339 (pid 4909) Use of int in max_burst socket option deprecated. [ 64.210879][ T4909] Use struct sctp_assoc_value instead [ 64.293764][ T4917] loop3: detected capacity change from 0 to 512 [ 64.367866][ T4921] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.375658][ T4882] bond0: (slave netdevsim1): Releasing backup interface [ 64.394348][ T4882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.409245][ T4917] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.422324][ T4917] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.342: corrupted inode contents [ 64.436338][ T29] audit: type=1400 audit(1726940962.821:1124): avc: denied { bind } for pid=4927 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.456113][ T4917] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.342: mark_inode_dirty error [ 64.469390][ T4917] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.342: corrupted inode contents [ 64.483829][ T4882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.548211][ T4882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.560944][ T4882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.573149][ T4882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.585596][ T4882] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.763148][ T4940] lo speed is unknown, defaulting to 1000 [ 64.813880][ T4940] lo speed is unknown, defaulting to 1000 [ 65.422324][ T4957] loop2: detected capacity change from 0 to 164 [ 65.422528][ T4953] Zero length message leads to an empty skb [ 65.431347][ T4952] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 65.449707][ T4957] isofs: isofs_export_get_parent(): child directory not normalized! [ 65.469582][ T4957] SELinux: policydb string SE Linu does not match my string SE Linux [ 65.470688][ T4953] loop4: detected capacity change from 0 to 512 [ 65.479763][ T4952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.504509][ T4957] SELinux: failed to load policy [ 65.508024][ T4955] loop1: detected capacity change from 0 to 512 [ 65.517294][ T4953] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.519541][ T4957] sctp: [Deprecated]: syz.2.352 (pid 4957) Use of int in max_burst socket option deprecated. [ 65.519541][ T4957] Use struct sctp_assoc_value instead [ 65.538277][ T4955] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.543397][ T4952] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 65.598184][ T4955] EXT4-fs (loop1): 1 truncate cleaned up [ 65.603714][ T4966] loop3: detected capacity change from 0 to 164 [ 65.607377][ T4967] 9pnet_fd: Insufficient options for proto=fd [ 65.617083][ T4966] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 65.642250][ T4955] EXT4-fs (loop1): shut down requested (0) [ 65.652636][ T4966] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 65.694303][ T4971] loop4: detected capacity change from 0 to 512 [ 65.740945][ T4975] loop3: detected capacity change from 0 to 512 [ 65.753277][ T4977] loop2: detected capacity change from 0 to 512 [ 65.766757][ T4975] EXT4-fs: Ignoring removed nobh option [ 65.776436][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 65.828552][ T4975] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 65.836898][ T4975] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #13: comm syz.3.361: casefold flag without casefold feature [ 65.850598][ T4975] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.361: couldn't read orphan inode 13 (err -117) [ 65.851251][ T4977] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.883431][ T4983] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 65.915890][ T4990] loop0: detected capacity change from 0 to 512 [ 66.047129][ T4994] loop2: detected capacity change from 0 to 164 [ 66.065959][ T4990] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.110582][ T4994] isofs: isofs_export_get_parent(): child directory not normalized! [ 66.114255][ T4988] lo speed is unknown, defaulting to 1000 [ 66.124083][ T4994] SELinux: policydb string SE Linu does not match my string SE Linux [ 66.153034][ T4988] lo speed is unknown, defaulting to 1000 [ 66.166763][ T4994] SELinux: failed to load policy [ 66.174227][ T5003] netlink: 48 bytes leftover after parsing attributes in process `syz.1.358'. [ 66.183100][ T5005] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 66.190996][ T4994] sctp: [Deprecated]: syz.2.365 (pid 4994) Use of int in max_burst socket option deprecated. [ 66.190996][ T4994] Use struct sctp_assoc_value instead [ 66.271266][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 66.297431][ T5010] loop3: detected capacity change from 0 to 512 [ 66.300294][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 66.323077][ T5010] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.600137][ T5024] loop2: detected capacity change from 0 to 2048 [ 66.691989][ T5029] loop2: detected capacity change from 0 to 4096 [ 66.820449][ T5035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5035 comm=syz.2.376 [ 66.891721][ T5036] loop1: detected capacity change from 0 to 512 [ 66.922227][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 66.928056][ T5040] lo speed is unknown, defaulting to 1000 [ 66.964236][ T5040] lo speed is unknown, defaulting to 1000 [ 66.988693][ T5036] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 66.996869][ T5036] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.999363][ T5045] netlink: 'syz.4.381': attribute type 10 has an invalid length. [ 67.014158][ T5036] __quota_error: 104 callbacks suppressed [ 67.014176][ T5036] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 67.031196][ T5036] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.046024][ T5036] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 67.053992][ T5036] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.377: bg 0: block 40: padding at end of block bitmap is not set [ 67.068441][ T5036] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 67.085979][ T5036] EXT4-fs (loop1): 1 truncate cleaned up [ 67.097491][ T5052] loop4: detected capacity change from 0 to 764 [ 67.104662][ T5052] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.159994][ T5056] loop3: detected capacity change from 0 to 512 [ 67.169565][ T29] audit: type=1326 audit(1726940965.551:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 67.193727][ T29] audit: type=1326 audit(1726940965.561:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 67.217200][ T29] audit: type=1326 audit(1726940965.561:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 67.240544][ T29] audit: type=1326 audit(1726940965.561:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 67.263874][ T29] audit: type=1326 audit(1726940965.561:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 67.287150][ T5054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.383'. [ 67.289221][ T5056] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.300725][ T29] audit: type=1326 audit(1726940965.581:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.1.383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadd3bfdef9 code=0x0 [ 67.329443][ T29] audit: type=1326 audit(1726940965.601:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 67.353497][ T29] audit: type=1326 audit(1726940965.601:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 67.376976][ T29] audit: type=1326 audit(1726940965.601:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4af763def9 code=0x7ffc0000 [ 67.416331][ T5064] loop0: detected capacity change from 0 to 512 [ 67.429158][ T5056] Process accounting resumed [ 67.438265][ T5066] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.458006][ T5056] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 67.477141][ T5072] tipc: Started in network mode [ 67.482098][ T5072] tipc: Node identity ac1414aa, cluster identity 4711 [ 67.484999][ T5064] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.489047][ T5072] tipc: New replicast peer: 100.1.1.1 [ 67.504771][ T5072] tipc: Enabled bearer , priority 10 [ 67.520103][ T5074] veth0_vlan: entered allmulticast mode [ 67.568625][ T5074] ÿÿÿÿÿÿ: renamed from vlan1 [ 67.614155][ T5078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.390'. [ 67.668453][ T5083] loop3: detected capacity change from 0 to 164 [ 67.682294][ T5081] hub 2-0:1.0: USB hub found [ 67.687644][ T5081] hub 2-0:1.0: 8 ports detected [ 67.714448][ T5083] isofs: isofs_export_get_parent(): child directory not normalized! [ 67.723433][ T5083] SELinux: policydb string SE Linu does not match my string SE Linux [ 67.732324][ T5083] SELinux: failed to load policy [ 67.738113][ T5083] sctp: [Deprecated]: syz.3.393 (pid 5083) Use of int in max_burst socket option deprecated. [ 67.738113][ T5083] Use struct sctp_assoc_value instead [ 67.925538][ T5091] loop2: detected capacity change from 0 to 512 [ 67.938169][ T5091] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.959129][ T5091] EXT4-fs (loop2): 1 truncate cleaned up [ 68.001879][ T5093] loop3: detected capacity change from 0 to 2048 [ 68.027312][ T5100] syz.0.395[5100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.027405][ T5100] syz.0.395[5100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.093636][ T4392] EXT4-fs unmount: 57 callbacks suppressed [ 68.093656][ T4392] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.136972][ T5093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.158339][ T5093] EXT4-fs (loop3): shut down requested (0) [ 68.189625][ T5093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 68.233040][ T5093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 68.245225][ T5093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 68.366928][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.509324][ T5111] loop3: detected capacity change from 0 to 256 [ 68.529884][ T5111] FAT-fs (loop3): Directory bread(block 64) failed [ 68.537353][ T5111] FAT-fs (loop3): Directory bread(block 65) failed [ 68.544093][ T5111] FAT-fs (loop3): Directory bread(block 66) failed [ 68.550921][ T5111] FAT-fs (loop3): Directory bread(block 67) failed [ 68.558225][ T5111] FAT-fs (loop3): Directory bread(block 68) failed [ 68.564975][ T5111] FAT-fs (loop3): Directory bread(block 69) failed [ 68.571620][ T5111] FAT-fs (loop3): Directory bread(block 70) failed [ 68.579052][ T5111] FAT-fs (loop3): Directory bread(block 71) failed [ 68.585636][ T5111] FAT-fs (loop3): Directory bread(block 72) failed [ 68.592302][ T5111] FAT-fs (loop3): Directory bread(block 73) failed [ 68.620217][ T35] tipc: Node number set to 2886997162 [ 68.631667][ T5111] syz.3.401: attempt to access beyond end of device [ 68.631667][ T5111] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 69.374840][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.643690][ T5134] lo speed is unknown, defaulting to 1000 [ 69.682579][ T5134] lo speed is unknown, defaulting to 1000 [ 69.738135][ T5141] loop3: detected capacity change from 0 to 164 [ 69.775304][ T5141] isofs: isofs_export_get_parent(): child directory not normalized! [ 69.800711][ T5141] SELinux: policydb string SE Linu does not match my string SE Linux [ 69.809074][ T5141] SELinux: failed to load policy [ 69.814645][ T5141] sctp: [Deprecated]: syz.3.412 (pid 5141) Use of int in max_burst socket option deprecated. [ 69.814645][ T5141] Use struct sctp_assoc_value instead [ 69.853056][ T5155] loop0: detected capacity change from 0 to 128 [ 69.877227][ T5159] loop1: detected capacity change from 0 to 1024 [ 69.889486][ T5159] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 69.899354][ T5159] EXT4-fs (loop1): group descriptors corrupted! [ 69.906536][ T5155] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.940650][ T5165] loop2: detected capacity change from 0 to 128 [ 69.947199][ T5155] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.019404][ T3262] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.064828][ T5165] syz.2.420: attempt to access beyond end of device [ 70.064828][ T5165] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 70.078304][ T5165] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 70.083680][ T5169] loop3: detected capacity change from 0 to 2048 [ 70.157339][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 70.167285][ T5169] loop3: p1 < > p4 [ 70.174525][ T5169] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.210076][ T5176] loop1: detected capacity change from 0 to 164 [ 70.232783][ T2965] loop3: p1 < > p4 [ 70.241666][ T5176] isofs: isofs_export_get_parent(): child directory not normalized! [ 70.250972][ T5176] SELinux: policydb string SE Linu does not match my string SE Linux [ 70.259269][ T5176] SELinux: failed to load policy [ 70.265087][ T2965] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.273706][ T5176] sctp: [Deprecated]: syz.1.423 (pid 5176) Use of int in max_burst socket option deprecated. [ 70.273706][ T5176] Use struct sctp_assoc_value instead [ 70.328719][ T5184] SELinux: policydb string SE Linu does not match my string SE Linux [ 70.351977][ T5181] hsr0: entered promiscuous mode [ 70.357682][ T5181] hsr_slave_0: left promiscuous mode [ 70.363687][ T5184] SELinux: failed to load policy [ 70.369284][ T5181] hsr_slave_1: left promiscuous mode [ 70.374852][ T2965] loop3: p1 < > p4 [ 70.379378][ T2965] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.391550][ T5184] sctp: [Deprecated]: syz.1.426 (pid 5184) Use of int in max_burst socket option deprecated. [ 70.391550][ T5184] Use struct sctp_assoc_value instead [ 70.422952][ T5181] hsr0 (unregistering): left promiscuous mode [ 70.438932][ T3247] udevd[3247]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 70.454893][ T3706] udevd[3706]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 70.512563][ T5188] lo speed is unknown, defaulting to 1000 [ 70.585117][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.593743][ T5188] lo speed is unknown, defaulting to 1000 [ 70.608968][ T5192] hub 2-0:1.0: USB hub found [ 70.628752][ T5192] hub 2-0:1.0: 8 ports detected [ 70.647072][ T5201] 9pnet_fd: Insufficient options for proto=fd [ 70.759300][ T5208] loop0: detected capacity change from 0 to 1024 [ 70.859008][ T5212] loop4: detected capacity change from 0 to 128 [ 70.870917][ T5208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.873633][ T5210] loop2: detected capacity change from 0 to 764 [ 70.892150][ T5210] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 70.908421][ T5212] syz.4.435[5212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.908563][ T5212] syz.4.435[5212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.928578][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.958162][ T5212] syz.4.435: attempt to access beyond end of device [ 70.958162][ T5212] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 70.975027][ T5217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 70.985082][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 71.055493][ T5226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5226 comm=syz.2.440 [ 71.136347][ T5231] capability: warning: `syz.0.437' uses deprecated v2 capabilities in a way that may be insecure [ 71.161298][ T5233] loop4: detected capacity change from 0 to 512 [ 71.184060][ T5233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.200437][ T5233] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.208482][ T5233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 71.220414][ T5233] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 71.230015][ T5233] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 71.246746][ T5235] loop2: detected capacity change from 0 to 128 [ 71.247754][ T5233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.275873][ T5235] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.285161][ T5233] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.442: dx entry: limit 65535 != root limit 120 [ 71.300098][ T5233] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.442: Corrupt directory, running e2fsck is recommended [ 71.323209][ T5235] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.369796][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.398535][ T5239] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.431048][ T4392] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.607655][ T5253] lo speed is unknown, defaulting to 1000 [ 71.787433][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 71.798008][ T5264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 71.897292][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 71.950383][ T5253] lo speed is unknown, defaulting to 1000 [ 72.112361][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 72.121772][ T5277] bridge_slave_1: left allmulticast mode [ 72.127528][ T5277] bridge_slave_1: left promiscuous mode [ 72.133283][ T5277] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.146174][ T5277] bridge_slave_0: left allmulticast mode [ 72.152031][ T5277] bridge_slave_0: left promiscuous mode [ 72.155945][ T5279] loop1: detected capacity change from 0 to 4096 [ 72.157763][ T5277] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.187612][ T5279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.305015][ T5284] lo speed is unknown, defaulting to 1000 [ 72.346136][ T5284] lo speed is unknown, defaulting to 1000 [ 72.414195][ T5291] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 72.432739][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.588267][ T5301] loop4: detected capacity change from 0 to 128 [ 72.602608][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 72.602621][ T29] audit: type=1400 audit(1726940970.991:1414): avc: denied { relabelfrom } for pid=5302 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.629003][ T29] audit: type=1400 audit(1726940970.991:1415): avc: denied { relabelto } for pid=5302 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.677777][ T5296] syz.4.460: attempt to access beyond end of device [ 72.677777][ T5296] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 72.697602][ T5303] syzkaller0: entered promiscuous mode [ 72.703240][ T5303] syzkaller0: entered allmulticast mode [ 72.796957][ T5305] lo speed is unknown, defaulting to 1000 [ 73.076235][ T5305] lo speed is unknown, defaulting to 1000 [ 73.136758][ T29] audit: type=1326 audit(1726940971.521:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 73.162536][ T29] audit: type=1326 audit(1726940971.551:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 73.185912][ T29] audit: type=1326 audit(1726940971.551:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 73.209307][ T29] audit: type=1326 audit(1726940971.551:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 73.232957][ T29] audit: type=1326 audit(1726940971.551:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 73.256402][ T29] audit: type=1326 audit(1726940971.551:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 73.279996][ T29] audit: type=1326 audit(1726940971.551:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 73.303656][ T29] audit: type=1326 audit(1726940971.551:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c033def9 code=0x7ffc0000 [ 73.331651][ T5328] loop0: detected capacity change from 0 to 256 [ 73.339499][ T5328] vfat: Bad value for 'shortname' [ 73.361866][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 73.371952][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.379208][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.446065][ T5336] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 73.693041][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 73.702825][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 73.943624][ T5373] loop1: detected capacity change from 0 to 512 [ 73.959157][ T5375] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.975108][ T5377] loop3: detected capacity change from 0 to 512 [ 73.975519][ T5373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.994621][ T5373] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.011641][ T5377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.024281][ T5377] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.042048][ T5375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.152309][ T5375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.361891][ T5375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.532038][ T5375] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.605476][ T5389] loop2: detected capacity change from 0 to 512 [ 74.633057][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.649577][ T5375] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.668630][ T5389] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 74.735989][ T5375] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.791968][ T5375] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.887205][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.126107][ T5411] syz.4.495[5411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.126259][ T5411] syz.4.495[5411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.691528][ T5421] loop1: detected capacity change from 0 to 164 [ 75.714252][ T5421] isofs: isofs_export_get_parent(): child directory not normalized! [ 75.723215][ T5421] SELinux: policydb string SE Linu does not match my string SE Linux [ 75.731824][ T5421] SELinux: failed to load policy [ 75.737543][ T5421] sctp: [Deprecated]: syz.1.500 (pid 5421) Use of int in max_burst socket option deprecated. [ 75.737543][ T5421] Use struct sctp_assoc_value instead [ 75.858042][ T5425] loop0: detected capacity change from 0 to 2048 [ 76.010666][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.106993][ T5432] loop0: detected capacity change from 0 to 8192 [ 76.246343][ T5447] __nla_validate_parse: 3 callbacks suppressed [ 76.246361][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 76.388101][ T5461] loop0: detected capacity change from 0 to 164 [ 76.389378][ T5459] loop3: detected capacity change from 0 to 4096 [ 76.400380][ T5463] loop1: detected capacity change from 0 to 164 [ 76.429818][ T5461] isofs: isofs_export_get_parent(): child directory not normalized! [ 76.440462][ T5459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.458456][ T5463] isofs: isofs_export_get_parent(): child directory not normalized! [ 76.468105][ T5461] SELinux: policydb string SE Linu does not match my string SE Linux [ 76.477593][ T5461] SELinux: failed to load policy [ 76.483748][ T5463] SELinux: policydb string SE Linu does not match my string SE Linux [ 76.495886][ T5463] SELinux: failed to load policy [ 76.501541][ T5461] sctp: [Deprecated]: syz.0.510 (pid 5461) Use of int in max_burst socket option deprecated. [ 76.501541][ T5461] Use struct sctp_assoc_value instead [ 76.530656][ T5463] sctp: [Deprecated]: syz.1.512 (pid 5463) Use of int in max_burst socket option deprecated. [ 76.530656][ T5463] Use struct sctp_assoc_value instead [ 77.201847][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.448877][ T5492] loop2: detected capacity change from 0 to 8192 [ 77.491931][ T5496] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.511188][ T5492] loop2: p1 p2 p4 < > [ 77.515320][ T5492] loop2: partition table partially beyond EOD, truncated [ 77.540187][ T5492] loop2: p1 size 108986237 extends beyond EOD, truncated [ 77.548257][ T5499] atomic_op ffff888102e32528 conn xmit_atomic 0000000000000000 [ 77.556553][ T5492] loop2: p2 start 65535 is beyond EOD, truncated [ 77.563150][ T5492] loop2: p4 start 50331648 is beyond EOD, truncated [ 77.575314][ T2965] loop2: p1 p2 p4 < > [ 77.579464][ T2965] loop2: partition table partially beyond EOD, truncated [ 77.590326][ T2965] loop2: p1 size 108986237 extends beyond EOD, truncated [ 77.599032][ T5503] Illegal XDP return value 4294967294 on prog (id 444) dev N/A, expect packet loss! [ 77.608605][ T5497] loop4: detected capacity change from 0 to 8192 [ 77.615194][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 77.615208][ T29] audit: type=1326 audit(1726940975.991:1521): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.645204][ T29] audit: type=1326 audit(1726940975.991:1522): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.668934][ T29] audit: type=1326 audit(1726940975.991:1523): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.670708][ T2965] loop2: p2 start 65535 is beyond EOD, truncated [ 77.692659][ T29] audit: type=1326 audit(1726940975.991:1524): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.698988][ T2965] loop2: p4 start 50331648 is beyond EOD, [ 77.722642][ T29] audit: type=1326 audit(1726940975.991:1525): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.722673][ T29] audit: type=1326 audit(1726940975.991:1526): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.722758][ T29] audit: type=1326 audit(1726940975.991:1527): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.728576][ T2965] truncated [ 77.752206][ T29] audit: type=1326 audit(1726940976.001:1528): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.753284][ T29] audit: type=1326 audit(1726940976.011:1529): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.850320][ T29] audit: type=1326 audit(1726940976.011:1530): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f325983def9 code=0x7ffc0000 [ 77.893081][ T5510] loop3: detected capacity change from 0 to 512 [ 77.893256][ T5497] loop4: p1 p2 p4 [ 77.900653][ T5510] EXT4-fs: Ignoring removed nobh option [ 77.908066][ T5497] loop4: p1 start 83821824 is beyond EOD, truncated [ 77.915665][ T5497] loop4: p2 start 4293394690 is beyond EOD, truncated [ 77.922666][ T5497] loop4: p4 size 50331904 extends beyond EOD, truncated [ 77.934991][ T5510] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 77.945532][ T5510] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #13: comm syz.3.525: casefold flag without casefold feature [ 77.958853][ T5510] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.525: couldn't read orphan inode 13 (err -117) [ 77.961822][ T3247] udevd[3247]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 77.972196][ T5510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.019624][ T5515] lo speed is unknown, defaulting to 1000 [ 78.026287][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.066253][ T5515] lo speed is unknown, defaulting to 1000 [ 78.185874][ T5526] 9pnet_fd: Insufficient options for proto=fd [ 78.223540][ T5524] can0: slcan on ttyS3. [ 78.394238][ T5524] lo speed is unknown, defaulting to 1000 [ 78.513833][ T5524] lo speed is unknown, defaulting to 1000 [ 78.691956][ T5523] can0 (unregistered): slcan off ttyS3. [ 78.781335][ T5573] loop0: detected capacity change from 0 to 164 [ 78.807843][ T5573] isofs: isofs_export_get_parent(): child directory not normalized! [ 78.829834][ T5575] loop1: detected capacity change from 0 to 512 [ 78.832073][ T5573] SELinux: policydb string SE Linu does not match my string SE Linux [ 78.847442][ T5573] SELinux: failed to load policy [ 78.858063][ T5573] sctp: [Deprecated]: syz.0.543 (pid 5573) Use of int in max_burst socket option deprecated. [ 78.858063][ T5573] Use struct sctp_assoc_value instead [ 78.864768][ T5580] bond_slave_0: entered promiscuous mode [ 78.879287][ T5580] bond_slave_1: entered promiscuous mode [ 78.885994][ T5580] vlan2: entered promiscuous mode [ 78.891092][ T5580] bond0: entered promiscuous mode [ 78.896405][ T5580] batadv0: entered promiscuous mode [ 78.945765][ T5580] bond0: left promiscuous mode [ 78.950885][ T5580] batadv0: left promiscuous mode [ 78.956182][ T5580] bond_slave_0: left promiscuous mode [ 78.961607][ T5580] bond_slave_1: left promiscuous mode [ 79.015243][ T5575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.191229][ T5575] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.371527][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 79.379058][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.386514][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.393963][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.401385][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.408833][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.416274][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.423755][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.431174][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.438594][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.446074][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.453535][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.460963][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.468408][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.475841][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.483347][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.490834][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.498273][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.505786][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.513215][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.520714][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.528167][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.535614][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.543063][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.550621][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.558042][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.565475][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.572908][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.580430][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.587949][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.595380][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.602802][ T1002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.673215][ T1002] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 79.827607][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.985893][ T5623] loop0: detected capacity change from 0 to 164 [ 80.039857][ T5623] isofs: isofs_export_get_parent(): child directory not normalized! [ 80.048956][ T5623] SELinux: policydb string SE Linu does not match my string SE Linux [ 80.057936][ T5623] SELinux: failed to load policy [ 80.064252][ T5623] sctp: [Deprecated]: syz.0.549 (pid 5623) Use of int in max_burst socket option deprecated. [ 80.064252][ T5623] Use struct sctp_assoc_value instead [ 80.099425][ T5629] loop0: detected capacity change from 0 to 164 [ 80.113742][ T5625] loop2: detected capacity change from 0 to 512 [ 80.135141][ T5625] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 80.143341][ T5625] System zones: 0-2, 18-18, 34-34 [ 80.149921][ T5625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.544: bg 0: block 248: padding at end of block bitmap is not set [ 80.165475][ T5625] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.544: Failed to acquire dquot type 1 [ 80.178525][ T5629] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 80.187913][ T5625] EXT4-fs (loop2): 1 truncate cleaned up [ 80.194466][ T5625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.202708][ T5629] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 80.216549][ T5629] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 80.218148][ T5625] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.227521][ T5629] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 80.247468][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.382324][ T5644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.564'. [ 80.397811][ T5644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.564'. [ 80.675614][ T2965] ================================================================== [ 80.683906][ T2965] BUG: KCSAN: data-race in d_delete / lookup_fast [ 80.690334][ T2965] [ 80.692680][ T2965] read-write to 0xffff888106593900 of 4 bytes by task 3247 on cpu 0: [ 80.700749][ T2965] d_delete+0x73/0x100 [ 80.704823][ T2965] d_delete_notify+0x34/0x100 [ 80.709514][ T2965] vfs_unlink+0x320/0x430 [ 80.713853][ T2965] do_unlinkat+0x236/0x4c0 [ 80.718283][ T2965] __x64_sys_unlink+0x2e/0x40 [ 80.722978][ T2965] x64_sys_call+0x280f/0x2d60 [ 80.727700][ T2965] do_syscall_64+0xc9/0x1c0 [ 80.732210][ T2965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.738130][ T2965] [ 80.740452][ T2965] read to 0xffff888106593900 of 4 bytes by task 2965 on cpu 1: [ 80.747994][ T2965] lookup_fast+0xd9/0x2a0 [ 80.752333][ T2965] walk_component+0x3f/0x230 [ 80.756935][ T2965] path_lookupat+0x10a/0x2b0 [ 80.761525][ T2965] filename_lookup+0x127/0x300 [ 80.766318][ T2965] do_readlinkat+0x89/0x210 [ 80.770833][ T2965] __x64_sys_readlink+0x47/0x60 [ 80.775783][ T2965] x64_sys_call+0x13c3/0x2d60 [ 80.780489][ T2965] do_syscall_64+0xc9/0x1c0 [ 80.785009][ T2965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.790926][ T2965] [ 80.793254][ T2965] value changed: 0x00600108 -> 0x00008008 [ 80.798972][ T2965] [ 80.801296][ T2965] Reported by Kernel Concurrency Sanitizer on: [ 80.807451][ T2965] CPU: 1 UID: 0 PID: 2965 Comm: udevd Tainted: G W 6.11.0-syzkaller-07983-g7856a565416e #0 [ 80.818833][ T2965] Tainted: [W]=WARN [ 80.822635][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.832699][ T2965] ==================================================================