last executing test programs: 2.54960052s ago: executing program 2 (id=2134): setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.377810952s ago: executing program 0 (id=2139): setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.697716007s ago: executing program 2 (id=2142): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x11ec, 0xd, 0xc, 0x101, 0x70bd2b, 0x25dfdbfd, {0x1}, [@generic="94c1fac32dd01283c0ffd9375f4808e061c5565dec392fe1f2bbdd5d99c676b0b6016556272a482e0882900f8ef75210c584efbae70ca4b2efe0b08ded3931a6f216c4e2969a5013f5e8c4672c54a6c64b040f61a0a38096a3b7fc61766cd3dbea264b73cc219bd5d47df04b3dcf85a4d4572dfc63aa0b795383fd3490064676df807d44acad8658b3a22d508835fa05702c443ec661ca10c729aa79be38ac4f9c8e7dbd9964ada419985e36764077080b5bd1475223b4b2d54ba28b0094d8cb7d", @generic="b6e056feacd82369ddc64bf128e8dfade072fbc0a7e1ccc70d28435679462c14420d242f04ae47194f74f9283875a3ad119710e679f4f341aba924d4367a041bbda37ec530c0c714f4338841cdf4f7e82520e61f4690", @nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0x6}]}, @typed={0xb, 0x139, 0x0, 0x0, @str='autofs\x00'}, @typed={0xaa, 0x35, 0x0, 0x0, @binary="12b50b2c8b9aacc8fa02d4166312a581db6c7f8cb1f56d847ab3e6434e8a3e5793580a7b13dc1e9112c0d2ea8c900e93ce58c863bbd62a9c8eee30208c1087785cb21877d1be7dbbd540dc8c0d98c19a32e49efba2d610e2a41ff7643c116114229615768bd843c13f4f40e71b00b7eb58ea69fd837b00e2d0009cfbcdbb126c3749cf1c3d7d6e2fac526f714fa09a751c0a9fee719581b3312cd35bfb295dcb06e789e59757"}, @generic="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"]}, 0x11ec}, 0x1, 0x0, 0x0, 0x8030}, 0x4000000) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) 1.488378818s ago: executing program 1 (id=2146): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000003850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x10) memfd_create(0x0, 0x7) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.487647679s ago: executing program 0 (id=2147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'timer_start\x00', 0x3a, 'GPL\x00', 0x3a, './file0', 0x3a, [0x0]}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x80, 0xffffffff, 0x6, 0x6, 0x7f, 0x1, 0x7f, 0x0, 0x0, 0x0, 0xe00000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = getpid() process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f0000000580)=""/237, 0xed}], 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000740)=""/252, 0xfc}], 0x2, 0x0) 1.408553989s ago: executing program 0 (id=2149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.359843549s ago: executing program 0 (id=2150): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES8], 0x1, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r5, 0x200}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) execve(0x0, 0x0, 0x0) 1.2862198s ago: executing program 2 (id=2153): setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.28405148s ago: executing program 1 (id=2154): madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000160000000000000000000000000000000000000000e174b05d8c8ac51cc457ad36e6cf757ba904f4ece1a793bb97f49d2966884ca4a21961952b522a346542233b1d044ef357709688efbec9bf6ba17f9853fc01c50e95e521d87568711c56bf1ddd4f474420a31604507601"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46040700030d0000000000000003000300060000000903000038000000000000000e00000000002000030005000000ff0f0000000002000000000000800900000000000100010000002d09000004000000fa00000000000068144f5b0003000000000400000700000002000000000000000d00000003"], 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000100010081120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001007f00000192000000000000000c001980080002"], 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) process_vm_writev(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 1.160768621s ago: executing program 1 (id=2155): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000003850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4040) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 720.926814ms ago: executing program 4 (id=2156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'timer_start\x00', 0x3a, 'GPL\x00', 0x3a, './file0', 0x3a, [0x0]}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x80, 0xffffffff, 0x6, 0x6, 0x7f, 0x1, 0x7f, 0x0, 0x0, 0x0, 0xe00000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = getpid() process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f0000000580)=""/237, 0xed}], 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000740)=""/252, 0xfc}], 0x2, 0x0) 616.246165ms ago: executing program 4 (id=2158): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) 565.841976ms ago: executing program 3 (id=2159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 477.312266ms ago: executing program 3 (id=2160): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32=r4], 0x48}}, 0x0) 445.585036ms ago: executing program 3 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'timer_start\x00', 0x3a, 'GPL\x00', 0x3a, './file0', 0x3a, [0x0]}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x80, 0xffffffff, 0x6, 0x6, 0x7f, 0x1, 0x7f, 0x0, 0x0, 0x0, 0xe00000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = getpid() process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f0000000580)=""/237, 0xed}], 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000740)=""/252, 0xfc}], 0x2, 0x0) 424.710046ms ago: executing program 4 (id=2162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0xeae, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000002a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kvm_userspace_exit\x00', r1, 0x0, 0x10000000000000b8}, 0x18) syz_emit_ethernet(0xfffffffffffffcfc, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCSABS20(r2, 0x40044591, 0x0) writev(r2, &(0x7f0000000d80)=[{&(0x7f0000000940)="0342e03bd33239c53a61a9ec6273565b20a3d794d31b4eb6f1", 0x19}], 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x6, [@struct={0x8, 0x5, 0x0, 0x4, 0x1, 0x328, [{0x10, 0x5, 0x4}, {0x2, 0x5, 0x80000000}, {0x0, 0x3, 0x7fff}, {0x9, 0x5, 0xc0000000}, {0x7, 0x1, 0x4}]}, @ptr={0x10}, @fwd={0x4}, @datasec={0xf, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x0, 0x200}, {0x3, 0x4, 0x5}, {0x4, 0x7, 0x81}, {0x2, 0x1, 0xb}, {0x1, 0x7ff, 0xfffffffb}], 'l'}]}, {0x0, [0x0, 0x30, 0x30, 0x5f]}}, &(0x7f0000000800)=""/188, 0xca, 0xbc, 0x1, 0x2, 0x10000, @value}, 0x28) sendmsg$inet(r2, &(0x7f0000001280)={&(0x7f0000000a40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000cc0)="28bfedaee8a2c966ba99a2db36fc37699f3dd5362e3f61f5515c2fb115f955d55ccec6ad40ed1f8c00b14c37f469b25f34ee0fcc2799f2254aca95334d40b160e15378ea04a4d254b2109f1a452f7727774ac0a5f92b278c4d33cd2b7a23c9fdaf9a265cc2cc09a53f6eb517aaebe3572326f01dfe1bbe3433eab12b202a9efc30459b23b53425caa2feb44e06a413485d56c09a96c8c3a5f6a6bc88018a6175e8a8293e09a23b993eed", 0xaa}, {&(0x7f0000000dc0)="82ad3a2574941f4357f0cebde79788f3a0c12925cdbeac52d3d5aba6bf541e255a654813f3e61df2cc961a1a914b2060f2b4729769119aa5ca6f3fb8e65301ab38e2854d6336e46ec1bb25070ba123e8fd6fdae7405606de1590e54f13160de4a29f61ccb0e93d6bcef95af2c2b96c6ac2008b34b2fb00cc319ef97edb300503325b0e329337bfcb7bd45ed82f0d430172189709f7bb1ddec13a56cd38cc958430cc69950d9c497b8b70cae2f5ff63fdbde27ac3ced6", 0xb6}, {&(0x7f0000000e80)="448db7be4ca86a690f36ef0417d66c29cc4466cec09f6dbbfa57dadcfef5df2085cceca0a1480cd1d74616b65b277ea3dd2874b6d95e1e5aa29530adcc0c1cffc17c432997b862335bdb54a660542b7043ffa06ea20ce43c058de5ccef54cd472c461cdebee8171af9d983fccc9bf202d33d4b110e6b076fa5109280cddf1f4cbb2901348356642d363859ff5bd5d0d1ce9989493931d52be7c0adba2f320893e8b9ec9d5b", 0xa5}, {&(0x7f0000000a80)="e149f66422657b40d218c78d314983bf5a33891c32cf09985a72bdf29df4120a286fe043e40d6b4987df78e89dc3109029c096fdc23d8f1d063e6fe0375305a1c45481a1ee60a9cd403294de5b10f4a0daf4", 0x52}, {&(0x7f0000000f40)="84ec45f22b6484d03560352781b8980505605f9a95eae66f62a1bf3e6b05b5b257c48cb5cdf6b205b5081f1b2f46eaa8268ed245d09782d3ee88be32b89a8fa15fcc50f88f3913d01f8d96821ae0f153c538438b0fb0115512db2b310a757a0322213416826e55864df7c79328b4d6eaee708c7b5f31ce0ade13b6162a1f1f2082d017cd753c0060140f1ab80267531a63a7e3f1b2cfbdbc84e1c6a31ee1833e65780b6b0c87c011f0b482650c3442d97389f961a5a083254f3cdd7b", 0xbc}, {&(0x7f0000001000)="10743951eb79d71cac57a3e8076d267039259b9fb374030813fde7c77dc0d9f1dd8ad7db8940c5cbe949fcf3157724cce231ff4a430e4910042050757cab94d7a7cd753ab39046aaec3fb29302a6a512c12852e5a0e4ed1df13af760c05b33b499d137fe5819711aeb7394fcce71ff3c747dd299ea8efc03f6072821b72426010787e8c82813096317571e5427c8c636d81ceb3d1bdb853877cedc6f1145e8b711516a7cd043cdfdb9bf7bea61200f8d51704bed", 0xb4}, {&(0x7f00000010c0)="2ef4f408f21f6e05b2cbc90ef6586800d31616b0eafd2ce17a469e26ad40422b155e7f6fb2b0e9af33603762695f35dc67751fb83da1f7c541d869d6bb0b0b7b29cdf52cb9104bd82496a7bab6407e84", 0x50}], 0x7, &(0x7f00000011c0)=[@ip_retopts={{0xac, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xc9, 0x0, 0xf, [0x6, 0x6, 0x0, 0xf, 0x1]}, @end, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0x1, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0xbf, [@broadcast, @empty, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @multicast1, @private=0xa010100]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x2, [{@empty, 0x8000}, {@rand_addr=0x64010101, 0xf5}, {@multicast2, 0x6}, {@empty, 0x9}, {@local, 0xe}, {@local, 0x5}, {@local, 0x2}]}, @timestamp={0x44, 0xc, 0xbd, 0x0, 0x3, [0xb443, 0x1]}]}}}], 0xb0}, 0x4c014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0xc317, 0x13, &(0x7f00000006c0)=""/19, 0x41100, 0x42, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000900)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x1, 0x6, 0x8001}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000980)=[r0, r0], &(0x7f00000009c0)=[{0x0, 0x4, 0xe, 0x1}, {0x1, 0x4, 0x8, 0x7}, {0x5, 0x5, 0x2, 0xc}, {0x0, 0x3, 0xa, 0xb}, {0x0, 0x2, 0xb, 0xd}, {0x3, 0x1, 0x10, 0x6}, {0x0, 0x3, 0xb, 0x6}, {0x4, 0x2, 0xe, 0x5}], 0x10, 0x15f, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000012c0), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xffffffff, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 401.456817ms ago: executing program 2 (id=2163): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESOCT, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000900)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad194301887b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c41f021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4ebe299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b95491ed", @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$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") r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) read$eventfd(r3, &(0x7f00000003c0), 0x8) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_clone3(&(0x7f0000000e40)={0xe310000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000240)={@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @multicast2}, 0x1, 0x1, 0x4}}, {&(0x7f00000006c0)=""/4096, 0x1000}, &(0x7f0000000000), 0x42}, 0xa0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00'}) 357.442877ms ago: executing program 3 (id=2164): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000003850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x10) memfd_create(0x0, 0x7) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 343.754777ms ago: executing program 4 (id=2165): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$getflags(r0, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="020a0600060000002abd7000ffdbdf2504001743"], 0x30}}, 0x44880) io_setup(0x7ff, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000000000ee9f68fdc7084c3b740ea807869796c706f60f6d05316344ca55b70f38b502972f4adcaf6d735074983b72802eebde27019c1553b01066633f63f46d38a2e5f1f8271e4b71c262a807003e1eef5a64bdb678953f06d8a5cea906f37fd16680454a0b8a556018249536a1e7a777c00dde86bb3dbbf9f8ae62"], 0x8, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 331.413647ms ago: executing program 0 (id=2166): madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000160000000000000000000000000000000000000000e174b05d8c8ac51cc457ad36e6cf757ba904f4ece1a793bb97f49d2966884ca4a21961952b522a346542233b1d044ef357709688efbec9bf6ba17f9853fc01c50e95e521d87568711c56bf1ddd4f474420a31604507601"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46040700030d0000000000000003000300060000000903000038000000000000000e00000000002000030005000000ff0f0000000002000000000000800900000000000100010000002d09000004000000fa00000000000068144f5b0003000000000400000700000002000000000000000d00000003"], 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000100010081120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001007f00000192000000000000000c001980080002"], 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) process_vm_writev(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 275.082838ms ago: executing program 1 (id=2167): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 217.300058ms ago: executing program 4 (id=2168): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x20000000}) close_range(r0, r1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000300)={0x7, 0x1000, 0x0, 0xac8}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000007400)=0x8000, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xc40a, &(0x7f0000000340)={[{@noload}, {@init_itable}, {@nobh}, {@nobh}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@init_itable_val={'init_itable', 0x3d, 0x4}, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@inlinecrypt}], [], 0x2c}, 0x84, 0x467, &(0x7f0000000d80)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 216.694198ms ago: executing program 1 (id=2169): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x46, 0x26, 0x0, 0x0, 0x2}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x3, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x10001, 0x3, 0xd, 0x0, 0x1fffffff, 0x2, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="050700"], 0x14}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000005304"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2ab}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00'}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_int(r5, &(0x7f0000000440)='memory.swap.max\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 136.707979ms ago: executing program 2 (id=2170): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=%']) 125.786969ms ago: executing program 3 (id=2171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 54.480759ms ago: executing program 2 (id=2172): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) 49.42753ms ago: executing program 3 (id=2173): setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 43.962079ms ago: executing program 0 (id=2174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'timer_start\x00', 0x3a, 'GPL\x00', 0x3a, './file0', 0x3a, [0x0]}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x80, 0xffffffff, 0x6, 0x6, 0x7f, 0x1, 0x7f, 0x0, 0x0, 0x0, 0xe00000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = getpid() process_vm_readv(r2, &(0x7f0000000240)=[{&(0x7f0000000580)=""/237, 0xed}], 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000740)=""/252, 0xfc}], 0x2, 0x0) 660.84µs ago: executing program 1 (id=2175): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000180), 0x6000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) iopl(0x1) r3 = syz_io_uring_setup(0x5d12, &(0x7f00000014c0)={0x0, 0x8, 0x80, 0x0, 0x13c}, &(0x7f0000001680)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x766a, &(0x7f0000000880)={0x0, 0xd074, 0x0, 0x1, 0x2000128}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 0s ago: executing program 4 (id=2176): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000000}) close_range(r0, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) kernel console output (not intermixed with test programs): sadm_t pid=7495 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 108.473589][ T30] audit: type=1326 audit(1742020364.096:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 108.480896][ T7491] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 108.485524][ T7496] netlink: 'syz.3.1556': attribute type 10 has an invalid length. [ 108.485546][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1556'. [ 108.532323][ T7500] loop4: detected capacity change from 0 to 512 [ 108.599991][ T7500] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1558: bg 0: block 248: padding at end of block bitmap is not set [ 108.600133][ T7500] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1558: Failed to acquire dquot type 1 [ 108.601072][ T7500] EXT4-fs (loop4): 1 truncate cleaned up [ 108.601491][ T7500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.601641][ T7500] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.615025][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.686829][ T7509] loop0: detected capacity change from 0 to 512 [ 108.909948][ T7509] EXT4-fs: Ignoring removed nobh option [ 108.916597][ T7509] EXT4-fs: Ignoring removed nobh option [ 108.950982][ T7509] journal_path: Non-blockdev passed as './file1' [ 108.957977][ T7509] EXT4-fs: error: could not find journal device path [ 109.123022][ T7517] random: crng reseeded on system resumption [ 109.175226][ T7523] loop1: detected capacity change from 0 to 764 [ 109.185852][ T7523] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 109.243563][ T7523] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 109.280539][ T7527] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 109.297811][ T7523] bond1: entered promiscuous mode [ 109.312956][ T7523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.335864][ T7533] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1565'. [ 109.348442][ T7533] batadv4: entered allmulticast mode [ 109.356020][ T7533] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 109.365411][ T7533] bond1: (slave batadv4): making interface the new active one [ 109.373357][ T7533] batadv4: entered promiscuous mode [ 109.399215][ T7533] bond1: (slave batadv4): Enslaving as an active interface with an up link [ 109.411740][ T7535] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.471177][ T7539] loop3: detected capacity change from 0 to 764 [ 109.487025][ T7535] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.507676][ T7541] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 109.542000][ T7539] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 109.553120][ T7545] loop1: detected capacity change from 0 to 128 [ 109.553369][ T7539] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 109.600347][ T7545] syz.1.1573: attempt to access beyond end of device [ 109.600347][ T7545] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 109.609287][ T7539] bond3: entered promiscuous mode [ 109.640635][ T7539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.661675][ T7549] loop0: detected capacity change from 0 to 512 [ 109.668595][ T7549] EXT4-fs: Ignoring removed nobh option [ 109.675411][ T7549] EXT4-fs: Ignoring removed nobh option [ 109.714774][ T7550] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1570'. [ 109.726566][ T7549] journal_path: Non-blockdev passed as './file1' [ 109.733215][ T7549] EXT4-fs: error: could not find journal device path [ 109.741528][ T7535] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.791303][ T7550] batadv5: entered allmulticast mode [ 109.888949][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 109.898157][ T7550] bond3: (slave batadv5): making interface the new active one [ 109.905828][ T7550] batadv5: entered promiscuous mode [ 109.912360][ T7550] bond3: (slave batadv5): Enslaving as an active interface with an up link [ 109.923712][ T7535] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.942668][ T7558] loop0: detected capacity change from 0 to 512 [ 109.966071][ T7558] EXT4-fs: Ignoring removed nobh option [ 109.972974][ T7558] EXT4-fs: Ignoring removed nobh option [ 109.997057][ T7535] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.015884][ T7535] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.028365][ T7558] journal_path: Non-blockdev passed as './file1' [ 110.035172][ T7558] EXT4-fs: error: could not find journal device path [ 110.055152][ T7535] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.072430][ T7563] loop3: detected capacity change from 0 to 512 [ 110.115369][ T7535] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.134135][ T7563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1578: bg 0: block 248: padding at end of block bitmap is not set [ 110.166988][ T7567] loop2: detected capacity change from 0 to 764 [ 110.189312][ T7563] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1578: Failed to acquire dquot type 1 [ 110.202581][ T7563] EXT4-fs (loop3): 1 truncate cleaned up [ 110.208683][ T7563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.223947][ T7567] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 110.236996][ T7563] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.268413][ T7567] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 110.280528][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.297896][ T7567] bond4: entered promiscuous mode [ 110.304157][ T7567] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.317908][ T7576] loop4: detected capacity change from 0 to 764 [ 110.328274][ T7576] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 110.336804][ T7567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1579'. [ 110.359551][ T7567] batadv5: entered allmulticast mode [ 110.370485][ T7576] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 110.380315][ T7567] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 110.389543][ T7567] bond4: (slave batadv5): making interface the new active one [ 110.397717][ T7567] batadv5: entered promiscuous mode [ 110.404769][ T7567] bond4: (slave batadv5): Enslaving as an active interface with an up link [ 110.427257][ T7581] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1583'. [ 110.436693][ T7576] bond1: entered promiscuous mode [ 110.444050][ T7583] netlink: 'syz.3.1584': attribute type 10 has an invalid length. [ 110.452297][ T7583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1584'. [ 110.457945][ T7576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.498593][ T7581] batadv8: entered allmulticast mode [ 110.505534][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 110.514626][ T7581] bond1: (slave batadv8): making interface the new active one [ 110.523187][ T7581] batadv8: entered promiscuous mode [ 110.529917][ T7581] bond1: (slave batadv8): Enslaving as an active interface with an up link [ 110.637413][ T7588] loop1: detected capacity change from 0 to 512 [ 110.656628][ T7588] EXT4-fs: Ignoring removed nobh option [ 110.663003][ T7588] EXT4-fs: Ignoring removed nobh option [ 110.671285][ T7588] journal_path: Non-blockdev passed as './file1' [ 110.677713][ T7588] EXT4-fs: error: could not find journal device path [ 110.727943][ T7597] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.771656][ T7597] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.783990][ T7600] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 110.836842][ T7597] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.862811][ T7602] loop4: detected capacity change from 0 to 512 [ 110.876880][ T7602] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 110.906102][ T7602] loop4: detected capacity change from 0 to 512 [ 110.920186][ T7597] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.930624][ T7602] EXT4-fs: Ignoring removed i_version option [ 110.937048][ T7602] EXT4-fs: Ignoring removed bh option [ 110.944728][ T7602] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.962828][ T7602] EXT4-fs (loop4): 1 truncate cleaned up [ 110.969179][ T7602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.987759][ T7597] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.009247][ T7597] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.021189][ T7597] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.026755][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.033054][ T7597] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.134997][ T7614] loop0: detected capacity change from 0 to 128 [ 111.179060][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'. [ 111.203134][ T7620] netlink: 'syz.4.1597': attribute type 10 has an invalid length. [ 111.211495][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1597'. [ 111.217587][ T7614] syz.0.1595: attempt to access beyond end of device [ 111.217587][ T7614] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 111.249877][ T7620] team0: Port device geneve1 added [ 111.504632][ T7618] loop1: detected capacity change from 0 to 512 [ 111.523006][ T7618] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1596: casefold flag without casefold feature [ 111.536403][ T7618] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1596: couldn't read orphan inode 15 (err -117) [ 111.549721][ T7618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.681857][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.712711][ T7637] loop1: detected capacity change from 0 to 512 [ 111.740110][ T7637] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1603: bg 0: block 248: padding at end of block bitmap is not set [ 111.766296][ T7637] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1603: Failed to acquire dquot type 1 [ 111.784607][ T7637] EXT4-fs (loop1): 1 truncate cleaned up [ 111.791401][ T7637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.807033][ T7637] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.866556][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.020640][ T7657] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 112.224201][ T7660] loop0: detected capacity change from 0 to 512 [ 112.239308][ T7660] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 112.265015][ T7660] loop0: detected capacity change from 0 to 512 [ 112.265296][ T7660] EXT4-fs: Ignoring removed i_version option [ 112.265354][ T7660] EXT4-fs: Ignoring removed bh option [ 112.265612][ T7660] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.272494][ T7660] EXT4-fs (loop0): 1 truncate cleaned up [ 112.273684][ T7660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.362592][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.631725][ T7672] loop1: detected capacity change from 0 to 764 [ 112.637097][ T7672] rock: directory entry would overflow storage [ 112.637106][ T7672] rock: sig=0x4654, size=5, remaining=4 [ 112.758424][ T7675] loop1: detected capacity change from 0 to 512 [ 112.758459][ T7668] loop0: detected capacity change from 0 to 512 [ 112.807306][ T7668] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1615: casefold flag without casefold feature [ 112.822021][ T7675] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1619: bg 0: block 248: padding at end of block bitmap is not set [ 112.844026][ T7668] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1615: couldn't read orphan inode 15 (err -117) [ 112.860972][ T7668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.874163][ T7686] loop2: detected capacity change from 0 to 128 [ 112.887248][ T7675] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1619: Failed to acquire dquot type 1 [ 112.926160][ T7675] EXT4-fs (loop1): 1 truncate cleaned up [ 112.943275][ T7675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.986483][ T7686] syz.2.1623: attempt to access beyond end of device [ 112.986483][ T7686] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 113.005694][ T7675] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.069072][ T7685] loop3: detected capacity change from 0 to 512 [ 113.082885][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.082944][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.140677][ T7685] EXT4-fs: Ignoring removed nobh option [ 113.149375][ T7685] EXT4-fs: Ignoring removed nobh option [ 113.167989][ T7685] journal_path: Non-blockdev passed as './file1' [ 113.175866][ T7685] EXT4-fs: error: could not find journal device path [ 113.196628][ T7689] loop0: detected capacity change from 0 to 512 [ 113.219370][ T7689] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.352807][ T7700] netlink: 'syz.0.1629': attribute type 10 has an invalid length. [ 113.360748][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1629'. [ 113.374129][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 113.389288][ T7700] team0: Port device geneve1 added [ 113.483055][ T30] kauditd_printk_skb: 447 callbacks suppressed [ 113.483119][ T30] audit: type=1326 audit(1742020369.104:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.483160][ T30] audit: type=1326 audit(1742020369.104:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.485364][ T30] audit: type=1326 audit(1742020369.104:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.561468][ T30] audit: type=1326 audit(1742020369.104:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.561569][ T30] audit: type=1326 audit(1742020369.104:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.561606][ T30] audit: type=1326 audit(1742020369.104:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.561683][ T30] audit: type=1326 audit(1742020369.104:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.561720][ T30] audit: type=1326 audit(1742020369.104:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.561754][ T30] audit: type=1326 audit(1742020369.104:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.561844][ T30] audit: type=1326 audit(1742020369.104:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 113.600378][ T7708] loop3: detected capacity change from 0 to 512 [ 113.740327][ T7708] EXT4-fs: Ignoring removed oldalloc option [ 113.747192][ T7708] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1632: Parent and EA inode have the same ino 15 [ 113.747414][ T7708] EXT4-fs (loop3): Remounting filesystem read-only [ 113.747437][ T7708] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 113.747470][ T7708] EXT4-fs (loop3): 1 orphan inode deleted [ 113.747872][ T7708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.747906][ T7708] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 113.754832][ T7708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.942874][ T7717] loop2: detected capacity change from 0 to 512 [ 113.943094][ T7717] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.959959][ T7717] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 113.960087][ T7717] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.960248][ T7717] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 113.961699][ T7717] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 113.962015][ T7717] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1636: bg 0: block 40: padding at end of block bitmap is not set [ 113.962399][ T7717] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 114.058683][ T7717] EXT4-fs (loop2): 1 truncate cleaned up [ 114.059238][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.098925][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.112320][ T7718] loop3: detected capacity change from 0 to 512 [ 114.125825][ T7718] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1635: casefold flag without casefold feature [ 114.147044][ T7718] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1635: couldn't read orphan inode 15 (err -117) [ 114.147685][ T7718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.296813][ T7726] loop2: detected capacity change from 0 to 512 [ 114.320585][ T7726] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 114.378230][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.394164][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1642'. [ 114.465933][ T7740] loop1: detected capacity change from 0 to 512 [ 114.466232][ T7740] EXT4-fs: Ignoring removed oldalloc option [ 114.480745][ T7740] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1644: Parent and EA inode have the same ino 15 [ 114.480885][ T7740] EXT4-fs (loop1): Remounting filesystem read-only [ 114.480927][ T7740] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 114.481037][ T7740] EXT4-fs (loop1): 1 orphan inode deleted [ 114.481469][ T7740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.568783][ T7740] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 114.574151][ T7740] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.721160][ T7751] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 114.743478][ T7755] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 114.743658][ T7755] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 115.135351][ T7757] loop4: detected capacity change from 0 to 512 [ 115.159163][ T7757] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1652: casefold flag without casefold feature [ 115.159300][ T7757] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1652: couldn't read orphan inode 15 (err -117) [ 115.159826][ T7757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.443074][ T7772] loop0: detected capacity change from 0 to 512 [ 115.496380][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.501485][ T7772] EXT4-fs: Ignoring removed nobh option [ 115.513944][ T7772] EXT4-fs: Ignoring removed nobh option [ 115.522728][ T7772] journal_path: Non-blockdev passed as './file1' [ 115.529692][ T7772] EXT4-fs: error: could not find journal device path [ 115.540945][ T7780] loop3: detected capacity change from 0 to 164 [ 115.556693][ T7780] syz.3.1659: attempt to access beyond end of device [ 115.556693][ T7780] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 115.579040][ T7780] syz.3.1659: attempt to access beyond end of device [ 115.579040][ T7780] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 115.645216][ T7785] loop1: detected capacity change from 0 to 512 [ 115.658502][ T7785] EXT4-fs: Ignoring removed oldalloc option [ 115.666852][ T7785] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1661: Parent and EA inode have the same ino 15 [ 115.671339][ T7787] loop0: detected capacity change from 0 to 512 [ 115.689116][ T7785] EXT4-fs (loop1): Remounting filesystem read-only [ 115.695896][ T7785] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 115.712003][ T7785] EXT4-fs (loop1): 1 orphan inode deleted [ 115.718477][ T7787] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.720676][ T7785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.779291][ T7787] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 115.798658][ T7785] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 115.800161][ T7787] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.822057][ T7794] netlink: 'syz.2.1663': attribute type 10 has an invalid length. [ 115.822205][ T7785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.829967][ T7794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1663'. [ 115.849863][ T7787] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.853762][ T7794] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.872768][ T7787] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 115.873025][ T7794] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.880335][ T7787] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1662: bg 0: block 40: padding at end of block bitmap is not set [ 115.888797][ T7794] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.888838][ T7794] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.938194][ T7787] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 115.951248][ T7794] team0: Port device geneve1 added [ 115.998514][ T7787] EXT4-fs (loop0): 1 truncate cleaned up [ 116.021107][ T7787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.046195][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 116.085868][ T7804] bridge0: port 6(batadv6) entered blocking state [ 116.092425][ T7804] bridge0: port 6(batadv6) entered disabled state [ 116.125206][ T7804] batadv6: entered allmulticast mode [ 116.131738][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.140783][ T7804] batadv6: entered promiscuous mode [ 116.199605][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 116.322582][ T7825] loop1: detected capacity change from 0 to 164 [ 116.359579][ T7825] syz.1.1675: attempt to access beyond end of device [ 116.359579][ T7825] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 116.394205][ T7829] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 116.402445][ T7825] syz.1.1675: attempt to access beyond end of device [ 116.402445][ T7825] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 116.441072][ T7811] loop2: detected capacity change from 0 to 512 [ 116.452472][ T7833] loop3: detected capacity change from 0 to 764 [ 116.467893][ T7833] rock: directory entry would overflow storage [ 116.474170][ T7833] rock: sig=0x4654, size=5, remaining=4 [ 116.488774][ T7811] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1670: casefold flag without casefold feature [ 116.510036][ T7811] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1670: couldn't read orphan inode 15 (err -117) [ 116.525416][ T7811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.581604][ T7836] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.610052][ T4980] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 116.619432][ T4980] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 116.623120][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'. [ 116.645072][ T7840] bridge0: port 12(batadv9) entered blocking state [ 116.651763][ T7840] bridge0: port 12(batadv9) entered disabled state [ 116.658813][ T7840] batadv9: entered allmulticast mode [ 116.666083][ T7840] batadv9: entered promiscuous mode [ 116.724690][ T7836] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.771880][ T7842] random: crng reseeded on system resumption [ 116.802989][ T7836] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.866090][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.877882][ T7836] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.941500][ T7836] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.956444][ T7836] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.967821][ T7836] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.979767][ T7836] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.055066][ T7856] netlink: 'syz.0.1688': attribute type 10 has an invalid length. [ 117.062988][ T7856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1688'. [ 117.085934][ T7854] loop2: detected capacity change from 0 to 764 [ 117.123634][ T7854] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 117.129554][ T7861] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 117.149138][ T7866] loop1: detected capacity change from 0 to 164 [ 117.152344][ T4980] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 117.164803][ T4980] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 117.166687][ T7866] syz.1.1690: attempt to access beyond end of device [ 117.166687][ T7866] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 117.166735][ T7866] syz.1.1690: attempt to access beyond end of device [ 117.166735][ T7866] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 117.235631][ T7869] netlink: 'syz.2.1687': attribute type 1 has an invalid length. [ 117.252337][ T7869] bond5: entered promiscuous mode [ 117.308794][ T7869] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.310617][ T7854] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1687'. [ 117.344930][ T7879] netlink: 'syz.1.1692': attribute type 10 has an invalid length. [ 117.352965][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1692'. [ 117.381365][ T7871] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.498112][ T7854] batadv6: entered allmulticast mode [ 117.505250][ T7876] random: crng reseeded on system resumption [ 117.520987][ T7854] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 117.537313][ T7854] bond5: (slave batadv6): making interface the new active one [ 117.545040][ T7854] batadv6: entered promiscuous mode [ 117.566587][ T7854] bond5: (slave batadv6): Enslaving as an active interface with an up link [ 117.581661][ T7879] team0: Port device geneve1 added [ 117.646779][ T7871] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.731411][ T7871] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.814534][ T7871] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.862347][ T7901] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 117.870328][ T7901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1702'. [ 117.904390][ T7901] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.913027][ T7901] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.921493][ T7901] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.929884][ T7901] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.403796][ T7910] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 118.416288][ T7910] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 118.495667][ T30] kauditd_printk_skb: 524 callbacks suppressed [ 118.495757][ T30] audit: type=1326 audit(1742020374.130:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.495793][ T30] audit: type=1326 audit(1742020374.130:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.495826][ T30] audit: type=1326 audit(1742020374.130:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.495857][ T30] audit: type=1326 audit(1742020374.130:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.497212][ T30] audit: type=1326 audit(1742020374.130:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.497876][ T30] audit: type=1326 audit(1742020374.130:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.498115][ T30] audit: type=1326 audit(1742020374.130:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.498153][ T30] audit: type=1326 audit(1742020374.130:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.499777][ T30] audit: type=1326 audit(1742020374.130:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.499819][ T30] audit: type=1326 audit(1742020374.130:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 118.748025][ T7923] IPv6: Can't replace route, no match found [ 118.904293][ T7927] loop4: detected capacity change from 0 to 764 [ 118.908936][ T7927] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 118.944928][ T7927] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 119.069657][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1715'. [ 119.119972][ T7936] loop2: detected capacity change from 0 to 512 [ 119.133320][ T7936] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 119.951066][ T7962] loop0: detected capacity change from 0 to 764 [ 119.953070][ T7962] rock: directory entry would overflow storage [ 119.953079][ T7962] rock: sig=0x4654, size=5, remaining=4 [ 120.050975][ T7966] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 120.058650][ T7966] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 120.069783][ T7964] loop0: detected capacity change from 0 to 512 [ 120.076853][ T7964] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 120.089536][ T7964] loop0: detected capacity change from 0 to 512 [ 120.097560][ T7964] EXT4-fs: Ignoring removed i_version option [ 120.121452][ T7964] EXT4-fs: Ignoring removed bh option [ 120.127423][ T7964] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.161087][ T7964] EXT4-fs (loop0): 1 truncate cleaned up [ 120.170098][ T7964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.196663][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.215344][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1730'. [ 120.229730][ T7974] bridge0: port 6(batadv3) entered blocking state [ 120.236315][ T7974] bridge0: port 6(batadv3) entered disabled state [ 120.243547][ T7974] batadv3: entered allmulticast mode [ 120.249966][ T7974] batadv3: entered promiscuous mode [ 120.371598][ T7981] loop0: detected capacity change from 0 to 764 [ 120.388191][ T7981] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 120.404812][ T7981] netlink: 'syz.0.1733': attribute type 1 has an invalid length. [ 120.422096][ T7981] bond1: entered promiscuous mode [ 120.427477][ T7981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.441239][ T7981] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1733'. [ 120.456537][ T7981] batadv4: entered allmulticast mode [ 120.463064][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 120.471397][ T7981] bond1: (slave batadv4): making interface the new active one [ 120.479136][ T7981] batadv4: entered promiscuous mode [ 120.485806][ T7981] bond1: (slave batadv4): Enslaving as an active interface with an up link [ 120.737518][ T4983] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 120.746942][ T4983] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 120.829523][ T7871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.852079][ T7871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.865310][ T7871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.892075][ T7997] loop0: detected capacity change from 0 to 512 [ 120.910497][ T8001] loop3: detected capacity change from 0 to 512 [ 120.917687][ T8001] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 120.920001][ T7997] EXT4-fs: Ignoring removed nobh option [ 120.936386][ T7997] EXT4-fs: Ignoring removed nobh option [ 121.009983][ T7997] journal_path: Non-blockdev passed as './file1' [ 121.010054][ T7997] EXT4-fs: error: could not find journal device path [ 121.011829][ T7871] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.057537][ T7871] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.141532][ T7871] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.200580][ T8015] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 121.288808][ T8021] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 121.288900][ T8021] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 121.327710][ T8023] loop0: detected capacity change from 0 to 128 [ 121.358021][ T8023] syz.0.1749: attempt to access beyond end of device [ 121.358021][ T8023] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 122.009618][ T8027] loop2: detected capacity change from 0 to 512 [ 122.012096][ T8027] EXT4-fs: Ignoring removed nobh option [ 122.012217][ T8027] EXT4-fs: Ignoring removed nobh option [ 122.012555][ T8027] journal_path: Non-blockdev passed as './file1' [ 122.012656][ T8027] EXT4-fs: error: could not find journal device path [ 122.047763][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'. [ 122.053940][ T8032] bridge0: port 13(batadv10) entered blocking state [ 122.089413][ T8032] bridge0: port 13(batadv10) entered disabled state [ 122.089810][ T8032] batadv10: entered allmulticast mode [ 122.102242][ T8032] batadv10: entered promiscuous mode [ 122.151887][ T8034] loop4: detected capacity change from 0 to 512 [ 122.161677][ T8034] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.179862][ T8034] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 122.179996][ T8034] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.181242][ T8034] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.222243][ T8034] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 122.222637][ T8034] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1753: bg 0: block 40: padding at end of block bitmap is not set [ 122.222857][ T8034] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 122.223237][ T8034] EXT4-fs (loop4): 1 truncate cleaned up [ 122.223559][ T8034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.264195][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.453669][ T8042] random: crng reseeded on system resumption [ 122.523854][ T8045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.541974][ T8047] loop4: detected capacity change from 0 to 764 [ 122.543041][ T8047] rock: directory entry would overflow storage [ 122.543048][ T8047] rock: sig=0x4654, size=5, remaining=4 [ 122.559760][ T4983] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 122.573429][ T4983] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 122.609875][ T8045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.652984][ T8049] loop4: detected capacity change from 0 to 512 [ 122.653394][ T8049] EXT4-fs: Ignoring removed oldalloc option [ 122.669150][ T8045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.669587][ T8049] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1759: Parent and EA inode have the same ino 15 [ 122.672689][ T8049] EXT4-fs (loop4): Remounting filesystem read-only [ 122.672710][ T8049] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 122.672766][ T8049] EXT4-fs (loop4): 1 orphan inode deleted [ 122.678744][ T8049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.731766][ T8049] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 122.739091][ T8049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.787078][ T8045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.842461][ T8045] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.854107][ T8045] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.874431][ T8045] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.890558][ T8045] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.944244][ T8061] loop2: detected capacity change from 0 to 512 [ 122.966815][ T8061] EXT4-fs: Ignoring removed nobh option [ 122.980174][ T8061] EXT4-fs: Ignoring removed nobh option [ 122.998249][ T8067] loop3: detected capacity change from 0 to 128 [ 123.001830][ T8061] journal_path: Non-blockdev passed as './file1' [ 123.011940][ T8061] EXT4-fs: error: could not find journal device path [ 123.035113][ T8067] syz.3.1766: attempt to access beyond end of device [ 123.035113][ T8067] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 123.281362][ T8074] loop2: detected capacity change from 0 to 764 [ 123.292719][ T8074] rock: directory entry would overflow storage [ 123.299264][ T8074] rock: sig=0x4654, size=5, remaining=4 [ 123.417132][ T8076] random: crng reseeded on system resumption [ 123.502259][ T8079] loop0: detected capacity change from 0 to 764 [ 123.512846][ T8079] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 123.575295][ T8081] loop2: detected capacity change from 0 to 512 [ 123.591766][ T8081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1772: bg 0: block 248: padding at end of block bitmap is not set [ 123.607013][ T8081] __quota_error: 463 callbacks suppressed [ 123.607031][ T8081] Quota error (device loop2): write_blk: dquota write failed [ 123.620512][ T8081] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 123.630746][ T8081] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1772: Failed to acquire dquot type 1 [ 123.650556][ T8081] EXT4-fs (loop2): 1 truncate cleaned up [ 123.657069][ T8081] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.679051][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 123.727655][ T30] audit: type=1326 audit(1742020379.365:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 123.769116][ T30] audit: type=1326 audit(1742020379.395:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 123.777641][ T8093] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 123.793604][ T30] audit: type=1326 audit(1742020379.395:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 123.818432][ T8097] loop0: detected capacity change from 0 to 764 [ 123.826840][ T30] audit: type=1326 audit(1742020379.395:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 123.856717][ T30] audit: type=1326 audit(1742020379.395:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 123.856774][ T30] audit: type=1326 audit(1742020379.395:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 123.903708][ T30] audit: type=1326 audit(1742020379.395:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 123.927486][ T30] audit: type=1326 audit(1742020379.395:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 123.968875][ T8097] rock: directory entry would overflow storage [ 123.975210][ T8097] rock: sig=0x4654, size=5, remaining=4 [ 124.012111][ T8101] loop4: detected capacity change from 0 to 512 [ 124.023921][ T8101] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 124.041549][ T8105] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.106328][ T8105] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.146489][ T8105] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.219036][ T8115] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.230139][ T8105] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.269089][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 124.345960][ T8124] loop4: detected capacity change from 0 to 764 [ 124.356402][ T8124] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 124.366085][ T8110] loop0: detected capacity change from 0 to 512 [ 124.366254][ T8124] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 124.386986][ T8124] bond2: entered promiscuous mode [ 124.392369][ T8124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.393897][ T8110] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1783: casefold flag without casefold feature [ 124.412352][ T8110] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1783: couldn't read orphan inode 15 (err -117) [ 124.548282][ T8129] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 124.571657][ T8131] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.627559][ T8131] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.644216][ T8135] loop0: detected capacity change from 0 to 128 [ 124.656921][ T8137] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 124.664486][ T8137] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 124.704046][ T8131] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.719436][ T8135] syz.0.1792: attempt to access beyond end of device [ 124.719436][ T8135] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 124.766671][ T8131] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.796891][ T8142] loop2: detected capacity change from 0 to 764 [ 124.807068][ T8142] rock: directory entry would overflow storage [ 124.813570][ T8142] rock: sig=0x4654, size=5, remaining=4 [ 124.838541][ T8131] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.855562][ T8131] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.954965][ T8131] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.977045][ T8131] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.072577][ T8146] loop2: detected capacity change from 0 to 512 [ 125.072892][ T8146] EXT4-fs: Ignoring removed nobh option [ 125.072915][ T8146] EXT4-fs: Ignoring removed nobh option [ 125.072944][ T8146] journal_path: Non-blockdev passed as './file1' [ 125.072963][ T8146] EXT4-fs: error: could not find journal device path [ 125.387175][ T8154] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.437713][ T8154] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.439040][ T8155] netlink: 'syz.4.1801': attribute type 10 has an invalid length. [ 125.439133][ T8155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1801'. [ 125.490590][ T8154] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.561421][ T8154] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.586697][ T8161] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 125.730269][ T8163] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 125.758268][ T8163] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 125.920783][ T8172] netlink: 'syz.2.1809': attribute type 10 has an invalid length. [ 125.929229][ T8172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1809'. [ 125.949376][ T8174] loop1: detected capacity change from 0 to 512 [ 125.956510][ T8174] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.965260][ T8159] loop0: detected capacity change from 0 to 512 [ 125.990545][ T8174] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.991866][ T8159] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1803: casefold flag without casefold feature [ 126.015192][ T8174] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.022829][ T8174] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.031197][ T8159] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1803: couldn't read orphan inode 15 (err -117) [ 126.059145][ T8174] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 126.069191][ T8174] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1810: bg 0: block 40: padding at end of block bitmap is not set [ 126.088368][ T8174] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 126.098620][ T8174] EXT4-fs (loop1): 1 truncate cleaned up [ 126.194660][ T8184] loop1: detected capacity change from 0 to 128 [ 126.243327][ T8184] syz.1.1813: attempt to access beyond end of device [ 126.243327][ T8184] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 126.491224][ T8191] IPv6: Can't replace route, no match found [ 126.670542][ T8105] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.696208][ T8105] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.721789][ T8105] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.746541][ T8105] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.995855][ T8193] loop3: detected capacity change from 0 to 512 [ 127.010498][ T8193] EXT4-fs: Ignoring removed nobh option [ 127.010724][ T8193] EXT4-fs: Ignoring removed nobh option [ 127.019657][ T8193] journal_path: Non-blockdev passed as './file1' [ 127.049698][ T8193] EXT4-fs: error: could not find journal device path [ 127.496441][ T8206] random: crng reseeded on system resumption [ 127.528491][ T8212] IPv6: Can't replace route, no match found [ 127.800371][ T8218] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1826'. [ 127.889330][ T8224] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 128.390401][ T8235] loop0: detected capacity change from 0 to 512 [ 128.415189][ T8235] EXT4-fs: Ignoring removed nobh option [ 128.420862][ T8235] EXT4-fs: Ignoring removed nobh option [ 128.436292][ T8235] journal_path: Non-blockdev passed as './file1' [ 128.443387][ T8235] EXT4-fs: error: could not find journal device path [ 128.506131][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1835'. [ 128.568530][ T8237] random: crng reseeded on system resumption [ 128.783863][ T8247] loop1: detected capacity change from 0 to 764 [ 128.809896][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1839'. [ 128.831470][ T8247] rock: directory entry would overflow storage [ 128.831477][ T8247] rock: sig=0x4654, size=5, remaining=4 [ 128.865282][ T8256] loop0: detected capacity change from 0 to 512 [ 128.877486][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1842'. [ 128.902362][ T8256] EXT4-fs: Ignoring removed nobh option [ 128.908041][ T8256] EXT4-fs: Ignoring removed nobh option [ 128.914018][ T8256] journal_path: Non-blockdev passed as './file1' [ 128.920456][ T8256] EXT4-fs: error: could not find journal device path [ 129.016430][ T8265] loop3: detected capacity change from 0 to 764 [ 129.025198][ T30] kauditd_printk_skb: 390 callbacks suppressed [ 129.025216][ T30] audit: type=1326 audit(1742020384.668:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.026497][ T30] audit: type=1326 audit(1742020384.668:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.026748][ T30] audit: type=1326 audit(1742020384.668:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.026953][ T30] audit: type=1326 audit(1742020384.668:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.027407][ T30] audit: type=1326 audit(1742020384.668:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.027625][ T8265] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 129.028122][ T30] audit: type=1326 audit(1742020384.668:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.028208][ T30] audit: type=1326 audit(1742020384.668:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.034790][ T30] audit: type=1326 audit(1742020384.678:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.034900][ T30] audit: type=1326 audit(1742020384.678:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.035302][ T30] audit: type=1326 audit(1742020384.678:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8266 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 129.042394][ T8268] loop1: detected capacity change from 0 to 164 [ 129.085714][ T8268] syz.1.1844: attempt to access beyond end of device [ 129.085714][ T8268] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 129.085758][ T8268] syz.1.1844: attempt to access beyond end of device [ 129.085758][ T8268] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 129.089401][ T8154] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.358835][ T8154] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.390283][ T8154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.403971][ T8154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.407206][ T8276] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 129.407372][ T8276] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 129.510935][ T8284] loop3: detected capacity change from 0 to 764 [ 129.523539][ T8284] rock: directory entry would overflow storage [ 129.527660][ T8278] loop4: detected capacity change from 0 to 512 [ 129.530152][ T8284] rock: sig=0x4654, size=5, remaining=4 [ 129.539857][ T8278] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 129.613193][ T8289] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.666003][ T8295] loop3: detected capacity change from 0 to 128 [ 129.679030][ T8289] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.698682][ T8297] loop2: detected capacity change from 0 to 764 [ 129.710801][ T8297] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 129.729541][ T8295] syz.3.1858: attempt to access beyond end of device [ 129.729541][ T8295] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 129.759919][ T8289] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.819646][ T8289] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.854029][ T8299] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.874213][ T8299] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.883601][ T8302] netlink: 'syz.1.1861': attribute type 10 has an invalid length. [ 129.891599][ T8302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1861'. [ 129.906471][ T8299] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.926654][ T8301] loop4: detected capacity change from 0 to 512 [ 129.937255][ T8301] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 129.958762][ T8289] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.978522][ T8304] loop2: detected capacity change from 0 to 764 [ 129.984319][ T8289] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.002843][ T8304] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 130.014732][ T8299] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.024201][ T8301] loop4: detected capacity change from 0 to 512 [ 130.035216][ T8301] EXT4-fs: Ignoring removed i_version option [ 130.044491][ T8301] EXT4-fs: Ignoring removed bh option [ 130.047096][ T8289] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.068889][ T8301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.074431][ T8289] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.094583][ T8301] EXT4-fs (loop4): 1 truncate cleaned up [ 130.128654][ T8301] EXT4-fs mount: 8 callbacks suppressed [ 130.128673][ T8301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.210271][ T8311] loop1: detected capacity change from 0 to 512 [ 130.215096][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.219884][ T8311] EXT4-fs: Ignoring removed nobh option [ 130.231830][ T8311] EXT4-fs: Ignoring removed nobh option [ 130.254679][ T8311] journal_path: Non-blockdev passed as './file1' [ 130.261641][ T8311] EXT4-fs: error: could not find journal device path [ 130.328523][ T8317] netlink: 'syz.4.1864': attribute type 10 has an invalid length. [ 130.336538][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1864'. [ 130.397333][ T8321] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.491854][ T8321] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.552693][ T8321] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.592605][ T8321] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.649409][ T8329] loop4: detected capacity change from 0 to 764 [ 130.667310][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 130.694060][ T8329] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 130.849261][ T8335] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.905686][ T8335] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.962573][ T8335] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.006482][ T8335] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.234930][ T8337] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 131.235073][ T8337] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 131.315583][ T8341] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 131.486231][ T8345] loop2: detected capacity change from 0 to 512 [ 131.501056][ T8345] EXT4-fs: Ignoring removed nobh option [ 131.501329][ T8345] EXT4-fs: Ignoring removed nobh option [ 131.502434][ T8345] journal_path: Non-blockdev passed as './file1' [ 131.502843][ T8345] EXT4-fs: error: could not find journal device path [ 131.617015][ T8348] loop2: detected capacity change from 0 to 512 [ 131.620014][ T8348] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.666132][ T8348] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.666247][ T8348] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.669603][ T8348] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.669713][ T8348] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 131.670155][ T8348] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1879: bg 0: block 40: padding at end of block bitmap is not set [ 131.670336][ T8348] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 131.670590][ T8348] EXT4-fs (loop2): 1 truncate cleaned up [ 131.670947][ T8348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.695197][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.726558][ T8354] loop2: detected capacity change from 0 to 764 [ 131.790042][ T8356] loop3: detected capacity change from 0 to 128 [ 131.801156][ T8354] rock: directory entry would overflow storage [ 131.807621][ T8354] rock: sig=0x4654, size=5, remaining=4 [ 131.864448][ T8356] syz.3.1882: attempt to access beyond end of device [ 131.864448][ T8356] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 131.934567][ T8358] loop2: detected capacity change from 0 to 164 [ 131.946559][ T8358] syz.2.1883: attempt to access beyond end of device [ 131.946559][ T8358] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 131.946718][ T8358] syz.2.1883: attempt to access beyond end of device [ 131.946718][ T8358] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.012138][ T8360] loop2: detected capacity change from 0 to 764 [ 132.018959][ T8360] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.056360][ T8360] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 132.081240][ T8360] bond6: entered promiscuous mode [ 132.081420][ T8360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 132.154956][ T8364] loop0: detected capacity change from 0 to 764 [ 132.170522][ T8364] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.215003][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 132.380803][ T8374] loop2: detected capacity change from 0 to 512 [ 132.387921][ T8374] EXT4-fs: Ignoring removed nobh option [ 132.394049][ T8374] EXT4-fs: Ignoring removed nobh option [ 132.417537][ T8374] journal_path: Non-blockdev passed as './file1' [ 132.423983][ T8374] EXT4-fs: error: could not find journal device path [ 132.544398][ T8378] loop2: detected capacity change from 0 to 764 [ 132.561949][ T8378] rock: directory entry would overflow storage [ 132.568192][ T8378] rock: sig=0x4654, size=5, remaining=4 [ 132.642766][ T8376] loop0: detected capacity change from 0 to 512 [ 132.664981][ T8376] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1890: casefold flag without casefold feature [ 132.679418][ T8376] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1890: couldn't read orphan inode 15 (err -117) [ 132.693136][ T8376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.828772][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 132.846235][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.881551][ T8390] loop0: detected capacity change from 0 to 764 [ 132.906005][ T8390] rock: directory entry would overflow storage [ 132.912506][ T8390] rock: sig=0x4654, size=5, remaining=4 [ 132.927186][ T8388] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 132.974755][ T8394] loop2: detected capacity change from 0 to 764 [ 133.001173][ T8397] loop0: detected capacity change from 0 to 764 [ 133.017362][ T8397] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.029902][ T8394] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.042985][ T8394] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 133.068005][ T8394] bond7: entered promiscuous mode [ 133.074007][ T8394] 8021q: adding VLAN 0 to HW filter on device bond7 [ 133.086542][ T8400] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.141588][ T8400] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.182379][ T8400] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.242818][ T8400] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.271674][ T8405] loop2: detected capacity change from 0 to 512 [ 133.273780][ T8405] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 133.314954][ T8405] loop2: detected capacity change from 0 to 512 [ 133.315252][ T8405] EXT4-fs: Ignoring removed i_version option [ 133.315390][ T8405] EXT4-fs: Ignoring removed bh option [ 133.315589][ T8405] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.317907][ T8400] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.329055][ T8405] EXT4-fs (loop2): 1 truncate cleaned up [ 133.361130][ T8400] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.368342][ T8400] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.370710][ T8405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.406399][ T8400] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.407053][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.544399][ T8409] random: crng reseeded on system resumption [ 133.562154][ T8412] loop3: detected capacity change from 0 to 256 [ 133.597231][ T8412] FAT-fs (loop3): Directory bread(block 64) failed [ 133.597255][ T8412] FAT-fs (loop3): Directory bread(block 65) failed [ 133.597284][ T8412] FAT-fs (loop3): Directory bread(block 66) failed [ 133.597306][ T8412] FAT-fs (loop3): Directory bread(block 67) failed [ 133.597341][ T8412] FAT-fs (loop3): Directory bread(block 68) failed [ 133.597422][ T8412] FAT-fs (loop3): Directory bread(block 69) failed [ 133.597444][ T8412] FAT-fs (loop3): Directory bread(block 70) failed [ 133.597464][ T8412] FAT-fs (loop3): Directory bread(block 71) failed [ 133.597488][ T8412] FAT-fs (loop3): Directory bread(block 72) failed [ 133.597505][ T8412] FAT-fs (loop3): Directory bread(block 73) failed [ 133.657019][ T8335] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.663084][ T8412] tmpfs: Bad value for 'size' [ 133.680852][ T8335] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.702308][ T8335] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.705577][ T8335] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.754868][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1906'. [ 133.897217][ T8421] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.943854][ T8421] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.985574][ T8421] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.044482][ T30] kauditd_printk_skb: 442 callbacks suppressed [ 134.044501][ T30] audit: type=1326 audit(1742020389.691:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.088167][ T30] audit: type=1326 audit(1742020389.691:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.114352][ T30] audit: type=1326 audit(1742020389.691:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.141534][ T30] audit: type=1326 audit(1742020389.691:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.166733][ T30] audit: type=1326 audit(1742020389.691:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.190569][ T30] audit: type=1326 audit(1742020389.691:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.216254][ T30] audit: type=1326 audit(1742020389.691:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.243799][ T30] audit: type=1326 audit(1742020389.691:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.277708][ T30] audit: type=1326 audit(1742020389.691:7029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.302395][ T30] audit: type=1326 audit(1742020389.691:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8429 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9846acd169 code=0x7ffc0000 [ 134.329381][ T8421] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.347950][ T8321] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.362691][ T8321] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.422506][ T8321] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.442619][ T8321] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.524870][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1917'. [ 134.637396][ T8450] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 134.640554][ T8448] loop0: detected capacity change from 0 to 512 [ 134.640908][ T8448] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 134.911186][ T8461] loop0: detected capacity change from 0 to 512 [ 134.931961][ T8461] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1923: casefold flag without casefold feature [ 134.932223][ T8461] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1923: couldn't read orphan inode 15 (err -117) [ 134.932839][ T8461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.081785][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.270030][ T8472] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 135.270123][ T8472] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 135.301867][ T8474] loop2: detected capacity change from 0 to 164 [ 135.303704][ T8474] syz.2.1928: attempt to access beyond end of device [ 135.303704][ T8474] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 135.303750][ T8474] syz.2.1928: attempt to access beyond end of device [ 135.303750][ T8474] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 135.394197][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'. [ 135.604598][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 135.719837][ T8489] loop2: detected capacity change from 0 to 512 [ 135.729035][ T8489] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 135.802782][ T8485] loop0: detected capacity change from 0 to 512 [ 135.806349][ T8485] EXT4-fs: Ignoring removed nobh option [ 135.806472][ T8485] EXT4-fs: Ignoring removed nobh option [ 135.820315][ T8497] loop2: detected capacity change from 0 to 512 [ 135.820551][ T8497] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 135.824936][ T8485] journal_path: Non-blockdev passed as './file1' [ 135.825130][ T8485] EXT4-fs: error: could not find journal device path [ 135.828929][ T8497] loop2: detected capacity change from 0 to 512 [ 135.830193][ T8497] EXT4-fs: Ignoring removed i_version option [ 135.830348][ T8497] EXT4-fs: Ignoring removed bh option [ 135.832483][ T8497] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.854125][ T8497] EXT4-fs (loop2): 1 truncate cleaned up [ 135.855057][ T8497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.880037][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.983640][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 136.129665][ T8516] loop0: detected capacity change from 0 to 512 [ 136.155755][ T8516] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1946: bg 0: block 248: padding at end of block bitmap is not set [ 136.156102][ T8516] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1946: Failed to acquire dquot type 1 [ 136.156668][ T8516] EXT4-fs (loop0): 1 truncate cleaned up [ 136.157220][ T8516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.157343][ T8516] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.202061][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.397368][ T8528] loop2: detected capacity change from 0 to 128 [ 136.407073][ T8526] loop4: detected capacity change from 0 to 512 [ 136.407256][ T8526] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 136.411371][ T8526] loop4: detected capacity change from 0 to 512 [ 136.411596][ T8526] EXT4-fs: Ignoring removed i_version option [ 136.411662][ T8526] EXT4-fs: Ignoring removed bh option [ 136.412404][ T8526] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.423382][ T8528] syz.2.1951: attempt to access beyond end of device [ 136.423382][ T8528] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 136.426385][ T8526] EXT4-fs (loop4): 1 truncate cleaned up [ 136.426788][ T8526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.485405][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.559439][ T8534] loop4: detected capacity change from 0 to 128 [ 136.568787][ T8536] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 136.569139][ T8536] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 136.599489][ T8534] EXT4-fs: test_dummy_encryption option not supported [ 137.315316][ T8421] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.339766][ T8421] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.343418][ T8421] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.347089][ T8421] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.349482][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'. [ 137.373967][ T8549] loop2: detected capacity change from 0 to 764 [ 137.406545][ T8553] loop3: detected capacity change from 0 to 764 [ 137.416404][ T8553] rock: directory entry would overflow storage [ 137.416413][ T8553] rock: sig=0x4654, size=5, remaining=4 [ 137.417603][ T8549] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 137.576501][ T8559] loop3: detected capacity change from 0 to 512 [ 137.576706][ T8559] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 137.592945][ T8559] loop3: detected capacity change from 0 to 512 [ 137.606611][ T8563] loop2: detected capacity change from 0 to 512 [ 137.610082][ T8559] EXT4-fs: Ignoring removed i_version option [ 137.617362][ T8563] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 137.625970][ T8559] EXT4-fs: Ignoring removed bh option [ 137.661022][ T8559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.662769][ T8559] EXT4-fs (loop3): 1 truncate cleaned up [ 137.663167][ T8559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.716150][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.750909][ T8576] loop1: detected capacity change from 0 to 512 [ 137.758268][ T8576] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.778573][ T8576] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 137.787033][ T8576] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.803369][ T8576] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.826697][ T8576] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 137.835139][ T8576] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1968: bg 0: block 40: padding at end of block bitmap is not set [ 137.860907][ T8576] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 137.875653][ T8576] EXT4-fs (loop1): 1 truncate cleaned up [ 137.883225][ T8576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.922314][ T8581] loop3: detected capacity change from 0 to 128 [ 137.930079][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.967617][ T8581] syz.3.1969: attempt to access beyond end of device [ 137.967617][ T8581] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 138.175459][ T8590] loop1: detected capacity change from 0 to 512 [ 138.197617][ T8590] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 138.316083][ T8595] loop4: detected capacity change from 0 to 764 [ 138.323319][ T8595] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 138.357382][ T8597] loop1: detected capacity change from 0 to 512 [ 138.397745][ T8597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1976: bg 0: block 248: padding at end of block bitmap is not set [ 138.426528][ T8597] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1976: Failed to acquire dquot type 1 [ 138.444451][ T8597] EXT4-fs (loop1): 1 truncate cleaned up [ 138.456310][ T8597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.463563][ T8606] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.471658][ T8597] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.511629][ T8604] loop4: detected capacity change from 0 to 512 [ 138.531770][ T8604] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 138.540869][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.540876][ T8609] loop0: detected capacity change from 0 to 764 [ 138.579177][ T8609] rock: directory entry would overflow storage [ 138.585501][ T8609] rock: sig=0x4654, size=5, remaining=4 [ 138.593375][ T8604] loop4: detected capacity change from 0 to 512 [ 138.622259][ T8604] EXT4-fs: Ignoring removed i_version option [ 138.634684][ T8604] EXT4-fs: Ignoring removed bh option [ 138.641314][ T8604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.691369][ T8604] EXT4-fs (loop4): 1 truncate cleaned up [ 138.713611][ T8604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.852392][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.873516][ T8627] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.894935][ T8630] loop3: detected capacity change from 0 to 764 [ 138.919571][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1989'. [ 138.954302][ T8630] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 138.985692][ T8637] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 138.993815][ T8637] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 139.025672][ T8635] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.091718][ T8640] loop4: detected capacity change from 0 to 164 [ 139.100066][ T8635] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.121211][ T8642] loop3: detected capacity change from 0 to 764 [ 139.137491][ T8640] syz.4.1993: attempt to access beyond end of device [ 139.137491][ T8640] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 139.163720][ T8642] rock: directory entry would overflow storage [ 139.170202][ T8642] rock: sig=0x4654, size=5, remaining=4 [ 139.174957][ T8640] syz.4.1993: attempt to access beyond end of device [ 139.174957][ T8640] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 139.208254][ T8635] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.237865][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 139.237958][ T30] audit: type=1326 audit(1742020394.892:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.285867][ T30] audit: type=1326 audit(1742020394.892:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.320403][ T30] audit: type=1326 audit(1742020394.892:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.347938][ T30] audit: type=1326 audit(1742020394.892:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.374140][ T30] audit: type=1326 audit(1742020394.892:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.399960][ T30] audit: type=1326 audit(1742020394.892:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.427067][ T30] audit: type=1326 audit(1742020394.892:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.452610][ T30] audit: type=1326 audit(1742020394.892:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.476778][ T30] audit: type=1326 audit(1742020394.892:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.501185][ T30] audit: type=1326 audit(1742020394.892:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d67f0d169 code=0x7ffc0000 [ 139.542058][ T8618] dccp_close: ABORT with 132 bytes unread [ 139.575486][ T8635] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.675823][ T8651] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 139.707744][ T8651] bond2: entered promiscuous mode [ 139.722748][ T8654] loop4: detected capacity change from 0 to 128 [ 139.736063][ T8651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.770961][ T8635] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.778889][ T8654] syz.4.1999: attempt to access beyond end of device [ 139.778889][ T8654] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 139.825733][ T8635] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.840201][ T8635] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.852452][ T8635] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.040124][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 140.074169][ T8662] loop1: detected capacity change from 0 to 512 [ 140.074511][ T8662] EXT4-fs: Ignoring removed nobh option [ 140.074536][ T8662] EXT4-fs: Ignoring removed nobh option [ 140.074591][ T8662] journal_path: Non-blockdev passed as './file1' [ 140.074611][ T8662] EXT4-fs: error: could not find journal device path [ 140.139919][ T8669] loop2: detected capacity change from 0 to 764 [ 140.189093][ T8669] rock: directory entry would overflow storage [ 140.189100][ T8669] rock: sig=0x4654, size=5, remaining=4 [ 140.272784][ T8674] loop2: detected capacity change from 0 to 164 [ 140.287849][ T8674] syz.2.2007: attempt to access beyond end of device [ 140.287849][ T8674] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 140.303048][ T8674] syz.2.2007: attempt to access beyond end of device [ 140.303048][ T8674] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 140.639111][ T8681] loop4: detected capacity change from 0 to 764 [ 140.664013][ T8681] rock: directory entry would overflow storage [ 140.664036][ T8681] rock: sig=0x4654, size=5, remaining=4 [ 140.829979][ T8685] loop4: detected capacity change from 0 to 764 [ 140.850350][ T8685] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 140.866307][ T8685] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 140.879895][ T8689] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 140.901540][ T8685] bond3: entered promiscuous mode [ 140.901645][ T8685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.027683][ T8696] netlink: 'syz.4.2016': attribute type 10 has an invalid length. [ 141.027705][ T8696] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2016'. [ 141.080518][ T8698] loop4: detected capacity change from 0 to 764 [ 141.098523][ T8698] rock: directory entry would overflow storage [ 141.104716][ T8698] rock: sig=0x4654, size=5, remaining=4 [ 141.147123][ T8702] netlink: 'syz.4.2019': attribute type 10 has an invalid length. [ 141.155049][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2019'. [ 141.447473][ T8714] loop2: detected capacity change from 0 to 512 [ 141.467444][ T8712] loop4: detected capacity change from 0 to 8192 [ 141.485925][ T8714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2024: bg 0: block 248: padding at end of block bitmap is not set [ 141.504234][ T8714] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.2024: Failed to acquire dquot type 1 [ 141.520692][ T8712] syz.4.2023: attempt to access beyond end of device [ 141.520692][ T8712] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 141.535065][ T8712] Buffer I/O error on dev loop4, logical block 57847, async page read [ 141.551942][ T8714] EXT4-fs (loop2): 1 truncate cleaned up [ 141.560621][ T8714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.573781][ T8714] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.664800][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.815911][ T8721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2026'. [ 141.861180][ T8725] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 141.868733][ T8725] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 141.899702][ T8723] loop2: detected capacity change from 0 to 512 [ 141.906365][ T8723] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 142.030049][ T8739] loop2: detected capacity change from 0 to 164 [ 142.060910][ T8739] syz.2.2030: attempt to access beyond end of device [ 142.060910][ T8739] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 142.075132][ T8739] syz.2.2030: attempt to access beyond end of device [ 142.075132][ T8739] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 142.277046][ T8744] loop2: detected capacity change from 0 to 512 [ 142.284022][ T8744] EXT4-fs: Ignoring removed nobh option [ 142.291492][ T8744] EXT4-fs: Ignoring removed nobh option [ 142.321924][ T8748] loop3: detected capacity change from 0 to 764 [ 142.330000][ T8744] journal_path: Non-blockdev passed as './file1' [ 142.336485][ T8744] EXT4-fs: error: could not find journal device path [ 142.345562][ T8748] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 142.429297][ T8750] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 142.477223][ T8754] loop4: detected capacity change from 0 to 256 [ 142.493188][ T8754] FAT-fs (loop4): Directory bread(block 64) failed [ 142.506245][ T8754] FAT-fs (loop4): Directory bread(block 65) failed [ 142.513518][ T8754] FAT-fs (loop4): Directory bread(block 66) failed [ 142.520439][ T8754] FAT-fs (loop4): Directory bread(block 67) failed [ 142.527385][ T8754] FAT-fs (loop4): Directory bread(block 68) failed [ 142.536325][ T8754] FAT-fs (loop4): Directory bread(block 69) failed [ 142.543494][ T8754] FAT-fs (loop4): Directory bread(block 70) failed [ 142.550778][ T8754] FAT-fs (loop4): Directory bread(block 71) failed [ 142.559133][ T8754] FAT-fs (loop4): Directory bread(block 72) failed [ 142.566421][ T8754] FAT-fs (loop4): Directory bread(block 73) failed [ 142.691253][ T8759] loop4: detected capacity change from 0 to 512 [ 142.704593][ T8759] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 142.803315][ T8766] loop1: detected capacity change from 0 to 512 [ 142.819119][ T8766] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2044: bg 0: block 248: padding at end of block bitmap is not set [ 142.834853][ T8766] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.2044: Failed to acquire dquot type 1 [ 142.835517][ T8766] EXT4-fs (loop1): 1 truncate cleaned up [ 142.836292][ T8766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.836386][ T8766] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.868599][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.076305][ T8771] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 143.106246][ T8781] loop0: detected capacity change from 0 to 764 [ 143.106980][ T8781] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.164040][ T8774] loop4: detected capacity change from 0 to 512 [ 143.171882][ T8774] EXT4-fs: Ignoring removed nobh option [ 143.172080][ T8774] EXT4-fs: Ignoring removed nobh option [ 143.172826][ T8774] journal_path: Non-blockdev passed as './file1' [ 143.173313][ T8774] EXT4-fs: error: could not find journal device path [ 143.189422][ T8783] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.267687][ T8783] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.301294][ T8786] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.310529][ T8788] loop2: detected capacity change from 0 to 256 [ 143.370672][ T8786] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.373796][ T8783] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.405412][ T8790] loop0: detected capacity change from 0 to 512 [ 143.409883][ T8786] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.415935][ T8790] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.417484][ T8788] FAT-fs (loop2): Directory bread(block 64) failed [ 143.417513][ T8788] FAT-fs (loop2): Directory bread(block 65) failed [ 143.417541][ T8788] FAT-fs (loop2): Directory bread(block 66) failed [ 143.417563][ T8788] FAT-fs (loop2): Directory bread(block 67) failed [ 143.417588][ T8788] FAT-fs (loop2): Directory bread(block 68) failed [ 143.417611][ T8788] FAT-fs (loop2): Directory bread(block 69) failed [ 143.417752][ T8788] FAT-fs (loop2): Directory bread(block 70) failed [ 143.417772][ T8788] FAT-fs (loop2): Directory bread(block 71) failed [ 143.417805][ T8788] FAT-fs (loop2): Directory bread(block 72) failed [ 143.417901][ T8788] FAT-fs (loop2): Directory bread(block 73) failed [ 143.437076][ T8790] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 143.437153][ T8790] EXT4-fs (loop0): orphan cleanup on readonly fs [ 143.437756][ T8790] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.445565][ T8790] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 143.582671][ T8783] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.605529][ T8790] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2052: bg 0: block 40: padding at end of block bitmap is not set [ 143.630646][ T8786] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.641677][ T8790] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 143.641996][ T8790] EXT4-fs (loop0): 1 truncate cleaned up [ 143.666740][ T8790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.667053][ T8796] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 143.687510][ T8796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2054'. [ 143.708153][ T8783] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.717516][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.722199][ T8783] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.753069][ T8799] loop0: detected capacity change from 0 to 764 [ 143.762545][ T8799] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.786522][ T8783] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.797904][ T8799] netlink: 'syz.0.2055': attribute type 1 has an invalid length. [ 143.812574][ T8786] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.836517][ T8802] loop3: detected capacity change from 0 to 764 [ 143.844736][ T8802] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.849294][ T8799] bond2: entered promiscuous mode [ 143.859696][ T8799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.871235][ T8802] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 143.874991][ T8783] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.890904][ T8786] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.911869][ T8786] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.932798][ T8802] bond4: entered promiscuous mode [ 143.941975][ T8802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.954337][ T8786] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.160588][ T8816] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 144.248096][ T8819] loop3: detected capacity change from 0 to 512 [ 144.258772][ T8819] EXT4-fs: Ignoring removed nobh option [ 144.267255][ T8819] EXT4-fs: Ignoring removed nobh option [ 144.298824][ T8819] journal_path: Non-blockdev passed as './file1' [ 144.298852][ T8819] EXT4-fs: error: could not find journal device path [ 144.841530][ T8826] loop2: detected capacity change from 0 to 512 [ 144.852370][ T8826] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.2065: casefold flag without casefold feature [ 144.877963][ T8827] loop3: detected capacity change from 0 to 2048 [ 144.920306][ T8826] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2065: couldn't read orphan inode 15 (err -117) [ 144.926826][ T8826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.993983][ T8831] loop4: detected capacity change from 0 to 764 [ 145.005829][ T8831] rock: directory entry would overflow storage [ 145.012032][ T8831] rock: sig=0x4654, size=5, remaining=4 [ 145.021897][ T8827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.026508][ T30] kauditd_printk_skb: 273 callbacks suppressed [ 145.026543][ T30] audit: type=1400 audit(1742020400.674:7586): avc: denied { append } for pid=8822 comm="syz.3.2064" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.026578][ T30] audit: type=1400 audit(1742020400.674:7587): avc: denied { open } for pid=8822 comm="syz.3.2064" path="/390/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.027804][ T8827] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.028122][ T8827] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 145.028148][ T8827] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.028148][ T8827] [ 145.028163][ T8827] EXT4-fs (loop3): Total free blocks count 0 [ 145.028177][ T8827] EXT4-fs (loop3): Free/Dirty block details [ 145.028190][ T8827] EXT4-fs (loop3): free_blocks=2415919104 [ 145.028202][ T8827] EXT4-fs (loop3): dirty_blocks=32 [ 145.028281][ T8827] EXT4-fs (loop3): Block reservation details [ 145.028291][ T8827] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 145.066004][ T30] audit: type=1326 audit(1742020400.704:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 145.066136][ T30] audit: type=1326 audit(1742020400.704:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 145.066174][ T30] audit: type=1326 audit(1742020400.704:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 145.066211][ T30] audit: type=1326 audit(1742020400.704:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 145.066373][ T30] audit: type=1326 audit(1742020400.704:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 145.066404][ T30] audit: type=1326 audit(1742020400.704:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 145.066585][ T30] audit: type=1326 audit(1742020400.704:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 145.066636][ T30] audit: type=1326 audit(1742020400.704:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.2.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba60d169 code=0x7ffc0000 [ 145.230314][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.270839][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.584129][ T8836] random: crng reseeded on system resumption [ 145.612491][ T8845] loop4: detected capacity change from 0 to 764 [ 145.623091][ T8846] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.663303][ T8845] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.698804][ T8848] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.737282][ T8852] loop2: detected capacity change from 0 to 164 [ 145.746309][ T8845] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 145.794367][ T8850] syz.2.2068: attempt to access beyond end of device [ 145.794367][ T8850] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 145.821193][ T8857] loop0: detected capacity change from 0 to 512 [ 145.839950][ T8845] bond4: entered promiscuous mode [ 145.840602][ T8850] syz.2.2068: attempt to access beyond end of device [ 145.840602][ T8850] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.855197][ T8845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.876828][ T8857] EXT4-fs: Ignoring removed nobh option [ 145.882457][ T8857] EXT4-fs: Ignoring removed nobh option [ 145.889030][ T8857] journal_path: Non-blockdev passed as './file1' [ 145.895595][ T8857] EXT4-fs: error: could not find journal device path [ 145.947645][ T8862] loop3: detected capacity change from 0 to 512 [ 145.990860][ T8862] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2077: bg 0: block 248: padding at end of block bitmap is not set [ 146.013764][ T8862] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2077: Failed to acquire dquot type 1 [ 146.034016][ T8862] EXT4-fs (loop3): 1 truncate cleaned up [ 146.040237][ T8862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.061166][ T8862] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.094872][ T8872] loop0: detected capacity change from 0 to 764 [ 146.103554][ T8872] rock: directory entry would overflow storage [ 146.106459][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.109849][ T8872] rock: sig=0x4654, size=5, remaining=4 [ 146.194788][ T8877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8877 comm=syz.0.2081 [ 146.211304][ T8876] loop3: detected capacity change from 0 to 512 [ 146.218178][ T8876] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.236608][ T8873] loop4: detected capacity change from 0 to 2048 [ 146.256144][ T8876] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.264176][ T8876] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.280085][ T8876] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.295023][ T8873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.321279][ T8876] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 146.334435][ T8876] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2080: bg 0: block 40: padding at end of block bitmap is not set [ 146.339672][ T8869] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.357942][ T8876] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 146.364084][ T8869] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 146.384360][ T8876] EXT4-fs (loop3): 1 truncate cleaned up [ 146.385688][ T8869] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.385688][ T8869] [ 146.395010][ T8876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.400721][ T8869] EXT4-fs (loop4): Total free blocks count 0 [ 146.400742][ T8869] EXT4-fs (loop4): Free/Dirty block details [ 146.400756][ T8869] EXT4-fs (loop4): free_blocks=2415919104 [ 146.431073][ T8869] EXT4-fs (loop4): dirty_blocks=32 [ 146.436266][ T8869] EXT4-fs (loop4): Block reservation details [ 146.442386][ T8869] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 146.479037][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.492962][ T8884] loop0: detected capacity change from 0 to 128 [ 146.585560][ T8889] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 146.607675][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.680351][ T52] kworker/u8:4: attempt to access beyond end of device [ 146.680351][ T52] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 146.743116][ T8893] random: crng reseeded on system resumption [ 146.776554][ T8898] loop0: detected capacity change from 0 to 164 [ 146.805468][ T8898] syz.0.2086: attempt to access beyond end of device [ 146.805468][ T8898] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.841234][ T8898] syz.0.2086: attempt to access beyond end of device [ 146.841234][ T8898] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.891467][ T8900] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 146.901577][ T8900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2087'. [ 147.045457][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2093'. [ 147.082043][ T8916] loop0: detected capacity change from 0 to 764 [ 147.092545][ T8919] loop2: detected capacity change from 0 to 164 [ 147.107824][ T8919] syz.2.2096: attempt to access beyond end of device [ 147.107824][ T8919] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 147.125341][ T8919] syz.2.2096: attempt to access beyond end of device [ 147.125341][ T8919] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.148726][ T8916] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 147.170375][ T8916] netlink: 'syz.0.2095': attribute type 1 has an invalid length. [ 147.194493][ T8916] bond3: entered promiscuous mode [ 147.205337][ T8916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.234867][ T8926] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 147.328875][ T8931] netlink: 'syz.0.2100': attribute type 10 has an invalid length. [ 147.338415][ T8931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2100'. [ 147.339070][ T8928] loop3: detected capacity change from 0 to 512 [ 147.368008][ T8928] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 147.410866][ T8928] loop3: detected capacity change from 0 to 512 [ 147.428943][ T8928] EXT4-fs: Ignoring removed i_version option [ 147.436064][ T8928] EXT4-fs: Ignoring removed bh option [ 147.449182][ T8928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.471935][ T8928] EXT4-fs (loop3): 1 truncate cleaned up [ 147.479634][ T8928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.507741][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.637678][ T8944] tun0: tun_chr_ioctl cmd 1074025675 [ 147.647876][ T8944] tun0: persist enabled [ 147.660067][ T8944] tun0: tun_chr_ioctl cmd 1074025675 [ 147.666364][ T8944] tun0: persist disabled [ 147.791509][ T8952] loop3: detected capacity change from 0 to 2048 [ 147.826686][ T8955] loop0: detected capacity change from 0 to 164 [ 147.832373][ T8952] EXT4-fs: Ignoring removed bh option [ 147.869464][ T8955] syz.0.2109: attempt to access beyond end of device [ 147.869464][ T8955] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 147.905042][ T8955] syz.0.2109: attempt to access beyond end of device [ 147.905042][ T8955] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.913160][ T8952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.061398][ T8951] loop1: detected capacity change from 0 to 512 [ 148.131024][ T8951] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.2108: casefold flag without casefold feature [ 148.155000][ T8951] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2108: couldn't read orphan inode 15 (err -117) [ 148.194164][ T8966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2112'. [ 148.194187][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 148.233571][ T8951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.366097][ T8974] loop4: detected capacity change from 0 to 512 [ 148.381762][ T8974] EXT4-fs: Ignoring removed nobh option [ 148.381791][ T8974] EXT4-fs: Ignoring removed nobh option [ 148.382089][ T8974] journal_path: Non-blockdev passed as './file1' [ 148.382110][ T8974] EXT4-fs: error: could not find journal device path [ 148.564559][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.724472][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.864551][ T8984] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.909041][ T8988] loop2: detected capacity change from 0 to 512 [ 148.909335][ T8988] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.918033][ T8984] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.944440][ T8988] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 148.965680][ T8988] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.976752][ T8988] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.003145][ T8988] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 149.015430][ T8984] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.033356][ T8988] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2122: bg 0: block 40: padding at end of block bitmap is not set [ 149.059600][ T8988] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 149.070122][ T8988] EXT4-fs (loop2): 1 truncate cleaned up [ 149.071556][ T8993] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 149.078131][ T8988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.108081][ T8984] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.137174][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.185142][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 149.250283][ T8984] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.264053][ T9001] loop2: detected capacity change from 0 to 512 [ 149.278138][ T9001] EXT4-fs: Ignoring removed nobh option [ 149.285204][ T9001] EXT4-fs: Ignoring removed nobh option [ 149.308632][ T9001] journal_path: Non-blockdev passed as './file1' [ 149.316381][ T9001] EXT4-fs: error: could not find journal device path [ 149.327419][ T8984] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.350637][ T9004] loop4: detected capacity change from 0 to 512 [ 149.368204][ T8984] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.384412][ T8984] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.447325][ T9004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.474935][ T9004] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.490312][ T9008] loop2: detected capacity change from 0 to 764 [ 149.533595][ T9008] rock: directory entry would overflow storage [ 149.544065][ T9008] rock: sig=0x4654, size=5, remaining=4 [ 149.635083][ T9012] netlink: 'syz.3.2131': attribute type 10 has an invalid length. [ 149.648974][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2131'. [ 149.661077][ T9010] random: crng reseeded on system resumption [ 149.671315][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.761592][ T9020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2133'. [ 149.793323][ T9023] loop1: detected capacity change from 0 to 512 [ 149.854967][ T9023] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.895600][ T9023] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 149.895776][ T9023] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.895929][ T9023] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.896108][ T9023] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 149.896539][ T9023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2135: bg 0: block 40: padding at end of block bitmap is not set [ 149.962420][ T9023] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 149.962698][ T9023] EXT4-fs (loop1): 1 truncate cleaned up [ 149.963231][ T9023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.012658][ T9036] loop4: detected capacity change from 0 to 512 [ 150.025363][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.028951][ T9036] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 150.050927][ T9036] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop14 [ 150.168608][ T9038] loop1: detected capacity change from 0 to 512 [ 150.168865][ T9038] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 150.429811][ T9041] loop1: detected capacity change from 0 to 512 [ 150.456901][ T9041] EXT4-fs: Ignoring removed nobh option [ 150.457180][ T9041] EXT4-fs: Ignoring removed nobh option [ 150.459689][ T9041] journal_path: Non-blockdev passed as './file1' [ 150.484206][ T9041] EXT4-fs: error: could not find journal device path [ 150.592618][ T9046] loop1: detected capacity change from 0 to 764 [ 150.607625][ T9046] rock: directory entry would overflow storage [ 150.614402][ T9046] rock: sig=0x4654, size=5, remaining=4 [ 150.658497][ T9047] loop2: detected capacity change from 0 to 164 [ 150.672355][ T9047] syz.2.2142: attempt to access beyond end of device [ 150.672355][ T9047] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 150.698999][ T9047] syz.2.2142: attempt to access beyond end of device [ 150.698999][ T9047] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.819655][ T9055] netlink: 'syz.1.2146': attribute type 10 has an invalid length. [ 150.828820][ T9055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2146'. [ 150.857217][ T9058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2148'. [ 150.892510][ T9062] loop0: detected capacity change from 0 to 128 [ 150.909864][ T9064] loop4: detected capacity change from 0 to 512 [ 150.948564][ T9064] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.975425][ T9066] loop3: detected capacity change from 0 to 2048 [ 150.984298][ T9062] syz.0.2150: attempt to access beyond end of device [ 150.984298][ T9062] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 151.006979][ T9064] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 151.016823][ T9064] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.023680][ T9064] __quota_error: 537 callbacks suppressed [ 151.023761][ T9064] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 151.041174][ T9064] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.058834][ T9075] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 151.076904][ T9064] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 151.093929][ T30] audit: type=1326 audit(1742020406.735:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9061 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 151.094175][ T9066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.117724][ T30] audit: type=1326 audit(1742020406.735:8129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9061 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 151.149893][ T30] audit: type=1326 audit(1742020406.775:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9061 comm="syz.0.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f446313d169 code=0x7ffc0000 [ 151.186143][ T9064] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2151: bg 0: block 40: padding at end of block bitmap is not set [ 151.213038][ T30] audit: type=1326 audit(1742020406.855:8131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.1.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8080d169 code=0x7ffc0000 [ 151.236736][ T30] audit: type=1326 audit(1742020406.855:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.1.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8080d169 code=0x7ffc0000 [ 151.238682][ T9080] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.260278][ T30] audit: type=1326 audit(1742020406.855:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.1.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8080d169 code=0x7ffc0000 [ 151.289783][ T9064] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 151.293758][ T30] audit: type=1326 audit(1742020406.855:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.1.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8080d169 code=0x7ffc0000 [ 151.325958][ T9082] netlink: 'syz.1.2155': attribute type 10 has an invalid length. [ 151.326583][ T30] audit: type=1326 audit(1742020406.865:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.1.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8080d169 code=0x7ffc0000 [ 151.340305][ T9066] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 151.358008][ T30] audit: type=1326 audit(1742020406.865:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9079 comm="syz.1.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8080d169 code=0x7ffc0000 [ 151.366294][ T9066] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 151.378913][ T9064] EXT4-fs (loop4): 1 truncate cleaned up [ 151.404472][ T9066] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 151.404499][ T9066] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.404499][ T9066] [ 151.426635][ T9066] EXT4-fs (loop3): Total free blocks count 0 [ 151.432635][ T9066] EXT4-fs (loop3): Free/Dirty block details [ 151.438599][ T9066] EXT4-fs (loop3): free_blocks=2415919104 [ 151.444375][ T9066] EXT4-fs (loop3): dirty_blocks=32 [ 151.449625][ T9066] EXT4-fs (loop3): Block reservation details [ 151.455657][ T9066] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 151.465027][ T9064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.498721][ T9080] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.522194][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.547041][ T9080] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.568334][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.601550][ T9087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 151.611758][ T9080] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.662169][ T9080] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.695814][ T9080] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.698440][ T9092] loop4: detected capacity change from 0 to 164 [ 151.715694][ T9092] syz.4.2158: attempt to access beyond end of device [ 151.715694][ T9092] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 151.738865][ T9080] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.748997][ T9092] syz.4.2158: attempt to access beyond end of device [ 151.748997][ T9092] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.760921][ T9080] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.870411][ T9099] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 151.901378][ T9101] loop2: detected capacity change from 0 to 764 [ 151.926141][ T9101] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 151.955682][ T9104] netlink: 'syz.3.2164': attribute type 10 has an invalid length. [ 151.964029][ T9104] __nla_validate_parse: 2 callbacks suppressed [ 151.964044][ T9104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2164'. [ 152.097784][ T9116] loop4: detected capacity change from 0 to 512 [ 152.117599][ T9113] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.135403][ T9116] EXT4-fs: Ignoring removed nobh option [ 152.141223][ T9116] EXT4-fs: Ignoring removed nobh option [ 152.169821][ T9116] journal_path: Non-blockdev passed as './file1' [ 152.176357][ T9116] EXT4-fs: error: could not find journal device path [ 152.259339][ T3789] ================================================================== [ 152.267483][ T3789] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 152.274635][ T3789] [ 152.276959][ T3789] write to 0xffff8881049d3dfc of 4 bytes by task 3291 on cpu 0: [ 152.284596][ T3789] shmem_symlink+0x344/0x390 [ 152.289205][ T3789] vfs_symlink+0xca/0x1d0 [ 152.293553][ T3789] do_symlinkat+0xe1/0x350 [ 152.297996][ T3789] __x64_sys_symlink+0x50/0x60 [ 152.302779][ T3789] x64_sys_call+0x28b0/0x2dc0 [ 152.307493][ T3789] do_syscall_64+0xc9/0x1c0 [ 152.312032][ T3789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.318027][ T3789] [ 152.320352][ T3789] read to 0xffff8881049d3dfc of 4 bytes by task 3789 on cpu 1: [ 152.327899][ T3789] fill_mg_cmtime+0x58/0x280 [ 152.332511][ T3789] generic_fillattr+0x241/0x330 [ 152.337381][ T3789] shmem_getattr+0x17b/0x200 [ 152.341990][ T3789] vfs_getattr+0x172/0x1b0 [ 152.346460][ T3789] vfs_statx+0x12d/0x320 [ 152.350722][ T3789] vfs_fstatat+0xe4/0x130 [ 152.355082][ T3789] __se_sys_newfstatat+0x58/0x260 [ 152.360473][ T3789] __x64_sys_newfstatat+0x55/0x70 [ 152.365621][ T3789] x64_sys_call+0x236d/0x2dc0 [ 152.370407][ T3789] do_syscall_64+0xc9/0x1c0 [ 152.374934][ T3789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.380850][ T3789] [ 152.383182][ T3789] value changed: 0x3696ab26 -> 0x36b80587 [ 152.388918][ T3789] [ 152.391245][ T3789] Reported by Kernel Concurrency Sanitizer on: [ 152.397405][ T3789] CPU: 1 UID: 0 PID: 3789 Comm: udevd Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 152.407651][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.418158][ T3789] ================================================================== [ 152.439367][ T9133] loop2: detected capacity change from 0 to 164 [ 152.448587][ T9133] syz.2.2172: attempt to access beyond end of device [ 152.448587][ T9133] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 152.492438][ T9133] syz.2.2172: attempt to access beyond end of device [ 152.492438][ T9133] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 152.703974][ T9135] loop1: detected capacity change from 0 to 2048 [ 152.722112][ T9135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.847992][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.