last executing test programs: 14.735218121s ago: executing program 1 (id=41): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x731bc1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00008864ba6f319a47fc1990f0c6b00b001800090400000001fedbdf250a000b00000000000000008008001e0001"], 0x2c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r4, r4, 0x0, 0x40000f63c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fs,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 12.590665357s ago: executing program 1 (id=52): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x2c, 0x11, 0x43d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x3, 0x6}, {0xb, 0x1}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lgetxattr(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000b00)='cachefiles_mkdir\x00', r1}, 0x18) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000040)={[{@prjquota}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@nobh}, {@nomblk_io_submit}, {@nombcache}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x503, &(0x7f0000000f40)="$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") sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000b40)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000280)="d9a70362a410952f0eb5828586f2fbd413b679eff972137aecd1a655082b13f2c2e255de02a53df8885084d28836ea7a5bab9372aa3577b6e8aa01ce354be545b1d7a0fbc4c6d103741809430243be7084c25ae19e9dd8b249d9f0c6f40d64a899318bf49ed4df1e2488433d55e88ccafd9987c39297cb9628a598", 0x7b}, {&(0x7f0000000400)="d98d0fd48ef6c27433ca93ed62aa78c253fa307aef3310a1c7a5d827f3d33c4e32311f6e76f4824fdfe7a7c560327d629dc2a36d81cee5fe6e5ab44f48d8eabb63eeccd5d67d34a0eb21f8103d218af79ce5097e19f9d4983e871219cbf330bb1304c3c718edb84d33ad3f7a3c3567fcb70e30897bef65d7e1b18afb6708aaf5b1c807eadac5b88b87cea7b0f05e6da580268ca875080d50de71c257f5ecbb00c8994be9b48c0e0d0367bc06f652cb6449eb57641b4bff02178b24ec4d518cdfa746c4271ff9dc8cee450064be4532f0a9c756abce412d3bc43e2c0880a3b5cff0f4541ff5309e", 0xe7}, {&(0x7f0000000500)="a6ea79497c78e9a584f158f0a5806ffe7b29875f5b6c09c9df7cace179683b298c3f9126064d957baa99f318754ec4c706419b14204f8a5abec4dc458496fc5181103b5bbd6a7cff898bc600c876815025e6694b55b3d7bb18b2c3cc1e1474662000835150737a398432e56b10cbe6ac1d0145d49b80902cc3208a2c67eff70e4addfb45b7191a1ea552de84ffd3aa96094329c0f6816ab1489d", 0x9a}, {&(0x7f0000000340)="5638d43c0628d2fa236f1842dea16e672f04399b9997b9c55d5978478f015e25fe00d6b93ff3d665790617876951a654e0d02119fa1490e9f4a7926ca02ec44604d6", 0x42}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000000600)="92787aec6667c513e2cec7354517e2fa8cd4c91bf3c5530e9bf31cbb57d100086c2bf1a6de48f6e5b95ff417b9f2b3c26ccbef2831b9e765b9d037949cc05180b71d6d1090f19b655935f5ffd1a65ca95c2f8cd824622c5807593c1dfdfa8eba6aa88528820518e164190355b50afb9df3b6de5b54eba10afd8e1729dbe52bd9925d373681c8a7eeb2d70e21a10ba5595746f8bd0713f48161ab36c730bc23928fa3f7c53cc89fe29773a87601cc8362", 0xb0}], 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="1400000000000000290000003e0000000d00000000000000180000000000000029000000370000007300000000000000480000000000000029000000370000008705000000000000c9102001000000000000000000000000000001020000c910fe880000000000000000000000000001c204000000080000480000000000000029000000390000006c0601ff000000000000000000000000000000000000000000000000000000000000000000000001fc020000000000000000000000000001480000000000000029000000390000000006011000000000fc00000000000000000000000000000100000000000000000000ffffac1e000000800000000000000000000000000022"], 0x108}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x401}, 0x11) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 11.522434783s ago: executing program 1 (id=57): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x2c, 0x11, 0x43d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x3, 0x6}, {0xb, 0x1}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lgetxattr(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000b00)='cachefiles_mkdir\x00', r1}, 0x18) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000040)={[{@prjquota}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@nobh}, {@nomblk_io_submit}, {@nombcache}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x503, &(0x7f0000000f40)="$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") sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000b40)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000280)="d9a70362a410952f0eb5828586f2fbd413b679eff972137aecd1a655082b13f2c2e255de02a53df8885084d28836ea7a5bab9372aa3577b6e8aa01ce354be545b1d7a0fbc4c6d103741809430243be7084c25ae19e9dd8b249d9f0c6f40d64a899318bf49ed4df1e2488433d55e88ccafd9987c39297cb9628a598", 0x7b}, {&(0x7f0000000400)="d98d0fd48ef6c27433ca93ed62aa78c253fa307aef3310a1c7a5d827f3d33c4e32311f6e76f4824fdfe7a7c560327d629dc2a36d81cee5fe6e5ab44f48d8eabb63eeccd5d67d34a0eb21f8103d218af79ce5097e19f9d4983e871219cbf330bb1304c3c718edb84d33ad3f7a3c3567fcb70e30897bef65d7e1b18afb6708aaf5b1c807eadac5b88b87cea7b0f05e6da580268ca875080d50de71c257f5ecbb00c8994be9b48c0e0d0367bc06f652cb6449eb57641b4bff02178b24ec4d518cdfa746c4271ff9dc8cee450064be4532f0a9c756abce412d3bc43e2c0880a3b5cff0f4541ff5309e", 0xe7}, {&(0x7f0000000500)="a6ea79497c78e9a584f158f0a5806ffe7b29875f5b6c09c9df7cace179683b298c3f9126064d957baa99f318754ec4c706419b14204f8a5abec4dc458496fc5181103b5bbd6a7cff898bc600c876815025e6694b55b3d7bb18b2c3cc1e1474662000835150737a398432e56b10cbe6ac1d0145d49b80902cc3208a2c67eff70e4addfb45b7191a1ea552de84ffd3aa96094329c0f6816ab1489d", 0x9a}, {&(0x7f0000000340)="5638d43c0628d2fa236f1842dea16e672f04399b9997b9c55d5978478f015e25fe00d6b93ff3d665790617876951a654e0d02119fa1490e9f4a7926ca02ec44604d6", 0x42}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000000600)="92787aec6667c513e2cec7354517e2fa8cd4c91bf3c5530e9bf31cbb57d100086c2bf1a6de48f6e5b95ff417b9f2b3c26ccbef2831b9e765b9d037949cc05180b71d6d1090f19b655935f5ffd1a65ca95c2f8cd824622c5807593c1dfdfa8eba6aa88528820518e164190355b50afb9df3b6de5b54eba10afd8e1729dbe52bd9925d373681c8a7eeb2d70e21a10ba5595746f8bd0713f48161ab36c730bc23928fa3f7c53cc89fe29773a87601cc8362", 0xb0}], 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x108}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x401}, 0x11) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 11.344869487s ago: executing program 1 (id=59): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$eJzs3E9rHGUcB/Bf1o1JU/NHrdX2oA948TQ0OXgSJEgKkgWlNkIrCFOz0SVjNmRCYEWsnrz2dXj2JvgOcvE1eMvFYw/iSGYam223VMHdFfv5HDI/nuf55pln2F2YZZ49eefel7s7ZbaTH0ZrZiZa+xHpfooUrTjz+mZzvHV7c73T2biR0vX1m6tvp5SW3vj5k6/nIuLixz8u/TQXxyufnvy29uvx5eMrJ3/c/KJXpl6ZVvqHKU93+v3D/E7RTdu9cjdL6cOim5fd1NsruwdD/TtFf39/kPK97cWF/YNuWaZ8b5B27+UR/XR4MEj553lvL2VZlhYXgieaffqQrR/uV1UVUVWz8XxUVVVdiIW4GC/EYizFtxHxYrwUL8eleCUux6vxWlypR03i9AEAAAAAAAAAAAAAAAAAAODZcX7/f0QM7f9fjhX7/wEAAAAAAAAAAAAAAAAAAGACPrp1e3O909m4kdJ8RPH90dbRVnNs+td3ohdFdONaLMfvUe/+bzT19fc7G9dSbSW+K+4+yN892nquyZ/+Oc2v1j8n8CDfrvvO8qtNPg3n52Lh/PxrsRyXRs+/NjI/H2+9eS6fxXL88ln0o4jteu6H+W9WU3rvg84j+av1OAAAAPg/yNJfRt6/Z9mT+pv83/5+oB2P3F+342p7umsnohx8tZu3iu5BXRRnxfxjLWMrZiNiUnONq5gbbmmNaa7WUy7UzLgW2P6PXGfF48Xpu/jf+D8XYrhl2p9MTMLDl8G0zwQAAAAAAAAAAIB/YszPJ7ZjxJNl705nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//I6LAUA==") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0x0, 0x0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x78) close(r3) connect$unix(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 10.379413357s ago: executing program 1 (id=64): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0x5, 0x604, 0x0, 0x0, 0x1000000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x1040}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB="80990e00000000000000002e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ee000/0x400000)=nil, &(0x7f000057c000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000676000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00005d9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) 9.864691183s ago: executing program 1 (id=67): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0x5, 0x604, 0x0, 0x0, 0x1000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x1040}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB="80990e00000000000000002e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ee000/0x400000)=nil, &(0x7f000057c000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000676000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00005d9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) 9.436197758s ago: executing program 32 (id=67): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0x5, 0x604, 0x0, 0x0, 0x1000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x1040}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB="80990e00000000000000002e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ee000/0x400000)=nil, &(0x7f000057c000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000676000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00005d9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) 2.948543134s ago: executing program 5 (id=71): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/50, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.858850806s ago: executing program 0 (id=131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000030000000000000007020000f8ffffffb703005d61a55100b704000000000000850000000300000095000000000000000000000000000012c391b6dee3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0011de", @ANYRES16=0x0, @ANYBLOB="000200000000000000000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b95908d387dbe9abc89b0000ec", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d0000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xe}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x880) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000003580)=""/4105, 0x4a, 0x1009, 0xa}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000000000000f9ffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01000000ffffffff00"/28], 0x50) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @loopback, 0x983a}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 2.441677797s ago: executing program 0 (id=135): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 2.332285616s ago: executing program 5 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0xfffffffe, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r3], 0x0}, 0x94) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x3ff}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1}}], 0x90}, 0x0) 2.309170085s ago: executing program 4 (id=137): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 1.513779782s ago: executing program 3 (id=139): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, &(0x7f0000000380)) 1.498753268s ago: executing program 0 (id=140): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) unshare(0x24060400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) 1.412366339s ago: executing program 3 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) fstat(r1, &(0x7f0000000240)) 1.374986062s ago: executing program 2 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 1.364075097s ago: executing program 2 (id=144): pread64(0xffffffffffffffff, &(0x7f0000000180)=""/15, 0xf, 0x40000000000000b6) 1.342124575s ago: executing program 4 (id=145): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 1.341154425s ago: executing program 3 (id=146): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0xffffffffffffffff, 0x2938c739, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x4}, 0x18) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a3af765db4ccd083e922cb89b1cf63f116f626a6563745f723a737368645f7661725f72756e5f743a733020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73302d73303a63302e63313032332030"], 0x67) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x4) r9 = socket(0x10, 0x80003, 0x0) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r9, 0xffffffffffffffff, 0x0) 1.262548273s ago: executing program 2 (id=147): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={0x0, r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x88bc56, 0x0, 0x1, 0x0, &(0x7f0000000200)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000e41c00010020000000b79323eecb83d920", @ANYRES32=r4, @ANYBLOB="000096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) chdir(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000080)=""/16) prctl$PR_SET_TSC(0x1a, 0x1) llistxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=""/200, 0xc8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0xe7c, 0x0, &(0x7f0000000140), 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@deltclass={0x3c, 0x29, 0x14, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf, 0x3}, {0xa, 0x5ff88f6d86c9e072}, {0x3, 0x7}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040028}, 0x10) 1.262026934s ago: executing program 3 (id=148): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 697.845947ms ago: executing program 3 (id=149): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r2}, 0x18) write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x10) 524.90494ms ago: executing program 0 (id=150): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000004c0)='.\x00', 0x1a8a438, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0xb, 0x0, &(0x7f0000000000)) 475.139618ms ago: executing program 3 (id=151): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x104800e, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) r3 = accept4$phonet_pipe(r0, &(0x7f0000000280), &(0x7f0000000300)=0x10, 0x80000) ioctl$sock_proto_private(r3, 0x89e2, &(0x7f0000000440)="46ec66c5f9e28ea1477742ec89eea75f2485418c7df8e13e4a6acf4d3fa1e433c307dee7f98ce4b5959d6a46") 446.973418ms ago: executing program 4 (id=152): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, &(0x7f0000000380)) 419.162248ms ago: executing program 2 (id=153): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 350.204193ms ago: executing program 4 (id=154): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000001d04000000000026da1c7d0000000000006af1faef541d823bf731445cb3312d8f40e05a02811363ff98a20b0630d9f37f2129d9bc7ca9fe9a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$can_bcm(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000580)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x30, r9, 0x201, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4884}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 244.952931ms ago: executing program 5 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 233.921395ms ago: executing program 5 (id=156): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = creat(&(0x7f0000000640)='./bus\x00', 0x1a8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000180)="2cd889f0253e14", 0x7) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = getpid() (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) (async) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}], 0x1, 0x4000044) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r0, 0x1) 188.825831ms ago: executing program 0 (id=157): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 108.94936ms ago: executing program 4 (id=158): pread64(0xffffffffffffffff, &(0x7f0000000180)=""/15, 0xf, 0x40000000000000b6) 108.62898ms ago: executing program 5 (id=159): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000f910000098aec1dea6fb308bcaf75695fea16ad40bdd1989089f6db641c832614e0facc8b3b703bb0fbdf4a9917bd341e4699c14e91a4bf34fd3be4c7e3db02568b3080b3b448e1b", @ANYRES32=r3, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=r9, @ANYBLOB="96008b1316cb3f046966c61462151d1c7693792e58f5045e262aadc5d12880bf790f7f3f23b9fd55da3b85a019fab5797a46f2cd1916b50c32aee1ca43193a6f041aafc00ecaed4fd78dbd8b747527d298b407d93a51c0f04ef18adb68f1e9015dfdede0dbb6a1aca2c3a796d5224ab4330ec0de4dda7bface6d216c34b658472545e1805893a5949f95bb90dd17d51056c70862e851164aba28"], 0x44}}, 0x24040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigpending(0x0, 0x0) keyctl$unlink(0x9, r2, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0xfffd, 0x5, 0x8, 0x80000001}, {0x9, 0xc, 0x3, 0x6}, {0x4, 0x80, 0x8, 0xc9}, {0xb894, 0x1, 0x1, 0xfffffffd}, {0x2, 0x1, 0x7, 0xb20}, {0x2, 0x4f, 0xb, 0x5}, {0x7, 0x6, 0x81, 0x5}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0xd) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) 97.035954ms ago: executing program 2 (id=160): process_vm_writev(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1200000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f000000000000000000000000000000000000000000000000060d00"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r8, r2, 0x0, 0xd, &(0x7f0000000340)='sched_switch\x00'}, 0x30) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) 87.603928ms ago: executing program 0 (id=161): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000095d80100"/20, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000000020000000100"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4815, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="05000000020c"], 0x80}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3ff, 0x20, &(0x7f0000000080)={0x80, 0x1, 0x0, 0x3, 0xe}, 0x8, 0x2, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) 74.960493ms ago: executing program 5 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x800, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) getgroups(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) stat(0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) 74.721292ms ago: executing program 4 (id=163): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fs,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 0s ago: executing program 2 (id=164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) chmod(&(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f00000009c0)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lremovexattr(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000400), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x110, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000480)={0x5, r0, 'id0\x00'}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0a00180000000000000028000000280000000c000000000000000a01000000000b04333a03c43ec0029b2e5c0000000000000000000000000000000000000000000000010000"], &(0x7f0000000880)=""/189, 0x4c, 0xbd, 0x1, 0x0, 0x10000, @value=r8}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000a00), &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r12 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x6408}, {r12, 0x80}], 0x2, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1c, 0x3b, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000ffffffff000000000d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184f000005000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000d4aa400001000000b7080000000000007b8af8ff00000000b7080000ef0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000956600000000000085100000050000009551ffff0000000018460000080000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xf, 0xee, &(0x7f0000000700)=""/238, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, r10, 0x8, &(0x7f0000000980)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r8, 0x2, &(0x7f0000000cc0)=[r8, r8, r3], &(0x7f0000000d00)=[{0x4, 0x2, 0x4, 0x7}, {0x0, 0x1, 0x4, 0x3}], 0x10, 0x5}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 36.156415][ T29] audit: type=1400 audit(1759774457.225:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 36.180640][ T29] audit: type=1400 audit(1759774457.255:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.181820][ T3292] cgroup: Unknown subsys name 'net' [ 36.208739][ T29] audit: type=1400 audit(1759774457.275:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.350831][ T3292] cgroup: Unknown subsys name 'cpuset' [ 36.357227][ T3292] cgroup: Unknown subsys name 'rlimit' [ 36.549223][ T29] audit: type=1400 audit(1759774457.615:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.573128][ T29] audit: type=1400 audit(1759774457.625:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.594384][ T29] audit: type=1400 audit(1759774457.625:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.616021][ T29] audit: type=1400 audit(1759774457.625:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.625888][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.636513][ T29] audit: type=1400 audit(1759774457.635:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.669937][ T29] audit: type=1400 audit(1759774457.635:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.693374][ T29] audit: type=1400 audit(1759774457.715:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.724971][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.083027][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 38.125062][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 38.198765][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 38.274284][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.281617][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.290633][ T3304] bridge_slave_0: entered allmulticast mode [ 38.298713][ T3304] bridge_slave_0: entered promiscuous mode [ 38.313903][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 38.326165][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 38.344101][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.358351][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.367838][ T3304] bridge_slave_1: entered allmulticast mode [ 38.375113][ T3304] bridge_slave_1: entered promiscuous mode [ 38.392443][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.400348][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.408665][ T3302] bridge_slave_0: entered allmulticast mode [ 38.415826][ T3302] bridge_slave_0: entered promiscuous mode [ 38.444316][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.452310][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.460181][ T3302] bridge_slave_1: entered allmulticast mode [ 38.467016][ T3302] bridge_slave_1: entered promiscuous mode [ 38.496969][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.524635][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.548137][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.558887][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.573688][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.580840][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.588065][ T3309] bridge_slave_0: entered allmulticast mode [ 38.595418][ T3309] bridge_slave_0: entered promiscuous mode [ 38.621154][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.628281][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.635557][ T3309] bridge_slave_1: entered allmulticast mode [ 38.642652][ T3309] bridge_slave_1: entered promiscuous mode [ 38.666773][ T3304] team0: Port device team_slave_0 added [ 38.685058][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.692965][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.701748][ T3314] bridge_slave_0: entered allmulticast mode [ 38.709023][ T3314] bridge_slave_0: entered promiscuous mode [ 38.716748][ T3302] team0: Port device team_slave_0 added [ 38.723435][ T3304] team0: Port device team_slave_1 added [ 38.730539][ T3302] team0: Port device team_slave_1 added [ 38.741943][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.749239][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.756841][ T3306] bridge_slave_0: entered allmulticast mode [ 38.763553][ T3306] bridge_slave_0: entered promiscuous mode [ 38.770468][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.778184][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.785411][ T3314] bridge_slave_1: entered allmulticast mode [ 38.792066][ T3314] bridge_slave_1: entered promiscuous mode [ 38.813023][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.828388][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.836275][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.844143][ T3306] bridge_slave_1: entered allmulticast mode [ 38.850834][ T3306] bridge_slave_1: entered promiscuous mode [ 38.880773][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.895780][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.903011][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.929239][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.947608][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.958474][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.968955][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.977008][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.004823][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.023262][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.030378][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.057138][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.069020][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.079117][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.094275][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.101696][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.127998][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.140012][ T3309] team0: Port device team_slave_0 added [ 39.162417][ T3306] team0: Port device team_slave_0 added [ 39.169150][ T3306] team0: Port device team_slave_1 added [ 39.179049][ T3309] team0: Port device team_slave_1 added [ 39.218785][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.226053][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.253014][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.264718][ T3314] team0: Port device team_slave_0 added [ 39.272123][ T3314] team0: Port device team_slave_1 added [ 39.283883][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.291137][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.318846][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.335417][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.342417][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.369294][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.391246][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.398482][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.424795][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.437827][ T3302] hsr_slave_0: entered promiscuous mode [ 39.444251][ T3302] hsr_slave_1: entered promiscuous mode [ 39.467331][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.474756][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.501529][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.516599][ T3304] hsr_slave_0: entered promiscuous mode [ 39.522947][ T3304] hsr_slave_1: entered promiscuous mode [ 39.529166][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 39.535085][ T3304] Cannot create hsr debugfs directory [ 39.563567][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.572259][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.598652][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.638196][ T3309] hsr_slave_0: entered promiscuous mode [ 39.644503][ T3309] hsr_slave_1: entered promiscuous mode [ 39.650622][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 39.656362][ T3309] Cannot create hsr debugfs directory [ 39.671196][ T3306] hsr_slave_0: entered promiscuous mode [ 39.677411][ T3306] hsr_slave_1: entered promiscuous mode [ 39.683348][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 39.689437][ T3306] Cannot create hsr debugfs directory [ 39.748183][ T3314] hsr_slave_0: entered promiscuous mode [ 39.754789][ T3314] hsr_slave_1: entered promiscuous mode [ 39.761123][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 39.766911][ T3314] Cannot create hsr debugfs directory [ 39.914433][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.931464][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.947610][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.956924][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.988619][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.998942][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.008739][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.021158][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.038453][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.052294][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.063994][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.081806][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.115653][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.126538][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.137048][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.146617][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.184300][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.199026][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.208843][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.224239][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.234054][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.244144][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.255002][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.262642][ T1733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.281729][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.288893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.341307][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.363130][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.379551][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.386788][ T1733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.406847][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.414143][ T1733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.431402][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.456171][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.468773][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.482779][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.497136][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.515077][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.522220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.532469][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.539859][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.552338][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.560479][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.571309][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.582760][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.590082][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.609639][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.620421][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.639750][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.647266][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.664784][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.674477][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.681900][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.708726][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.739078][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.750094][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.811797][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.823826][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.871425][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.946515][ T3302] veth0_vlan: entered promiscuous mode [ 40.973101][ T3302] veth1_vlan: entered promiscuous mode [ 40.982610][ T3304] veth0_vlan: entered promiscuous mode [ 40.995673][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.012275][ T3304] veth1_vlan: entered promiscuous mode [ 41.025930][ T3302] veth0_macvtap: entered promiscuous mode [ 41.042046][ T3309] veth0_vlan: entered promiscuous mode [ 41.051407][ T3302] veth1_macvtap: entered promiscuous mode [ 41.063299][ T3304] veth0_macvtap: entered promiscuous mode [ 41.071302][ T3304] veth1_macvtap: entered promiscuous mode [ 41.087076][ T3309] veth1_vlan: entered promiscuous mode [ 41.104800][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.119608][ T3309] veth0_macvtap: entered promiscuous mode [ 41.132010][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.143247][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.152200][ T3309] veth1_macvtap: entered promiscuous mode [ 41.164027][ T1733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.176970][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.185658][ T1733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.208356][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.222187][ T1733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.241991][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 41.242008][ T29] audit: type=1400 audit(1759774462.315:81): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.KHcPA0/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.273975][ T29] audit: type=1400 audit(1759774462.325:82): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.297361][ T29] audit: type=1400 audit(1759774462.325:83): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.KHcPA0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.324952][ T29] audit: type=1400 audit(1759774462.325:84): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.347446][ T29] audit: type=1400 audit(1759774462.325:85): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.KHcPA0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.374825][ T29] audit: type=1400 audit(1759774462.325:86): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.KHcPA0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.403397][ T29] audit: type=1400 audit(1759774462.325:87): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.425393][ T29] audit: type=1400 audit(1759774462.345:88): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.449902][ T29] audit: type=1400 audit(1759774462.345:89): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=3884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.453457][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.480764][ T1733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.491749][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.518135][ T1733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.534891][ T29] audit: type=1400 audit(1759774462.605:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.581452][ T1733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.608794][ T3306] veth0_vlan: entered promiscuous mode [ 41.624282][ T1733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.645067][ T3314] veth0_vlan: entered promiscuous mode [ 41.652492][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 41.653852][ T1733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.663353][ T3477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 41.681831][ T3306] veth1_vlan: entered promiscuous mode [ 41.688353][ T1733] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.690490][ T3477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 41.699703][ T3314] veth1_vlan: entered promiscuous mode [ 41.717843][ T1733] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.727261][ T1733] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.741759][ T1733] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.762698][ T3306] veth0_macvtap: entered promiscuous mode [ 41.790419][ T3306] veth1_macvtap: entered promiscuous mode [ 41.800627][ T3314] veth0_macvtap: entered promiscuous mode [ 41.822296][ T3481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 41.824549][ T3314] veth1_macvtap: entered promiscuous mode [ 41.879337][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.902982][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.905645][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.909887][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.910007][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.910051][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.910097][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.918899][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.972838][ T111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.973000][ T111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.973073][ T111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.973158][ T111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.016949][ T3491] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.017646][ T3491] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 42.162795][ T3498] syz.0.1 (3498) used greatest stack depth: 10640 bytes left [ 42.229362][ T3472] loop3: detected capacity change from 0 to 32768 [ 42.275780][ T3472] loop3: p1 p2 p3 < p5 p6 > [ 42.277346][ T3472] loop3: p2 size 16775168 extends beyond EOD, truncated [ 42.279665][ T3472] loop3: p5 start 4294970168 is beyond EOD, truncated [ 42.519085][ T3503] loop4: detected capacity change from 0 to 512 [ 42.519461][ T3503] EXT4-fs: test_dummy_encryption option not supported [ 42.584144][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.586977][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 42.588725][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 42.589538][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 42.596807][ T3511] loop2: detected capacity change from 0 to 512 [ 42.614111][ T3511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.633194][ T3511] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 42.633297][ T3511] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.634718][ T3511] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.14: corrupted inode contents [ 42.634847][ T3511] EXT4-fs (loop2): Remounting filesystem read-only [ 42.634994][ T3511] EXT4-fs (loop2): 1 truncate cleaned up [ 42.635155][ T1733] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.635181][ T1733] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.635204][ T1733] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 42.635742][ T3511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.657802][ T3507] vlan2: entered allmulticast mode [ 42.679409][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.731463][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 42.781276][ T3507] sch_fq: defrate 4294967295 ignored. [ 42.827951][ T3519] loop3: detected capacity change from 0 to 512 [ 42.898511][ T3519] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.898695][ T3519] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.921050][ T3519] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.16: corrupted inode contents [ 42.983532][ T3517] loop2: detected capacity change from 0 to 32768 [ 43.005538][ T3519] EXT4-fs (loop3): Remounting filesystem read-only [ 43.056865][ T3526] loop0: detected capacity change from 0 to 512 [ 43.059175][ T3519] EXT4-fs (loop3): 1 truncate cleaned up [ 43.072117][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.072140][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.072161][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.073262][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.074156][ T3488] loop2: p1 p2 p3 < p5 p6 > [ 43.075171][ T3488] loop2: p2 size 16775168 extends beyond EOD, truncated [ 43.078934][ T3488] loop2: p5 start 4294970168 is beyond EOD, truncated [ 43.133425][ T3526] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 43.175683][ T3530] SELinux: failed to load policy [ 43.176860][ T3526] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.189989][ T3526] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.18: corrupted inode contents [ 43.203396][ T3526] EXT4-fs (loop0): Remounting filesystem read-only [ 43.211995][ T3526] EXT4-fs (loop0): 1 truncate cleaned up [ 43.218091][ T1676] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.229367][ T1676] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.241053][ T1676] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.241616][ T3526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.264877][ T3517] loop2: p1 p2 p3 < p5 p6 > [ 43.310298][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.341839][ T3517] loop2: p2 size 16775168 extends beyond EOD, truncated [ 43.351468][ T3517] loop2: p5 start 4294970168 is beyond EOD, truncated [ 43.371988][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.434873][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.442655][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.462398][ T3537] loop4: detected capacity change from 0 to 1024 [ 43.469654][ T3537] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.481944][ T3537] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.508913][ T3537] JBD2: no valid journal superblock found [ 43.515094][ T3537] EXT4-fs (loop4): Could not load journal inode [ 43.551321][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.559116][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.596337][ T3543] loop0: detected capacity change from 0 to 128 [ 43.654907][ T3543] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.667837][ T3547] netlink: 'syz.2.24': attribute type 21 has an invalid length. [ 43.677588][ T3540] loop3: detected capacity change from 0 to 1024 [ 43.684948][ T3540] ======================================================= [ 43.684948][ T3540] WARNING: The mand mount option has been deprecated and [ 43.684948][ T3540] and is ignored by this kernel. Remove the mand [ 43.684948][ T3540] option from the mount to silence this warning. [ 43.684948][ T3540] ======================================================= [ 43.724277][ T3543] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.784735][ T3547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.24'. [ 43.817496][ T3550] team_slave_0: entered promiscuous mode [ 43.823271][ T3550] team_slave_1: entered promiscuous mode [ 43.829543][ T3540] EXT4-fs: Ignoring removed bh option [ 43.874482][ T3540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.902249][ T3550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 43.929248][ T3540] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.21: Allocating blocks 497-513 which overlap fs metadata [ 44.023907][ T3540] EXT4-fs (loop3): Remounting filesystem read-only [ 44.241012][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 44.281081][ T3538] EXT4-fs (loop3): pa ffff8881071d0070: logic 256, phys. 369, len 9 [ 44.292280][ T3563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 44.377462][ T3565] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 44.390788][ T3567] loop2: detected capacity change from 0 to 512 [ 44.398178][ T3567] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.406336][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 44.417733][ T3567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.422979][ T3565] 8021q: VLANs not supported on nlmon0 [ 44.454032][ T3567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.463223][ T3567] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.479220][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 44.492532][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 44.501999][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 44.521664][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 44.524939][ T3569] loop4: detected capacity change from 0 to 1024 [ 44.557916][ T3567] EXT4-fs (loop2): failed to initialize system zone (-117) [ 44.565945][ T3567] EXT4-fs (loop2): mount failed [ 44.598073][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 44.612699][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 44.757810][ T3567] loop2: detected capacity change from 0 to 2048 [ 44.791192][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.821101][ T3293] loop2: p1 < > p4 [ 44.826680][ T3293] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.851516][ T3574] loop1: detected capacity change from 0 to 32768 [ 44.870534][ T3567] loop2: p1 < > p4 [ 44.875944][ T3582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 44.886754][ T3578] usb usb8: usbfs: process 3578 (syz.4.31) did not claim interface 0 before use [ 44.896554][ T3567] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.910054][ T3578] netlink: 'syz.4.31': attribute type 4 has an invalid length. [ 44.920595][ T3582] netem: change failed [ 44.939288][ T3578] netlink: 'syz.4.31': attribute type 4 has an invalid length. [ 44.952600][ T3488] loop1: p1 p2 p3 < p5 p6 > [ 44.968623][ T3488] loop1: p2 size 16775168 extends beyond EOD, truncated [ 45.006227][ T3488] loop1: p5 start 4294970168 is beyond EOD, truncated [ 45.044918][ T3574] loop1: p1 p2 p3 < p5 p6 > [ 45.065393][ T3574] loop1: p2 size 16775168 extends beyond EOD, truncated [ 45.101439][ T3574] loop1: p5 start 4294970168 is beyond EOD, truncated [ 45.404988][ T3620] loop4: detected capacity change from 0 to 164 [ 45.428394][ T3620] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.501610][ T3604] hub 9-0:1.0: USB hub found [ 45.510053][ T3620] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.518819][ T3592] loop3: detected capacity change from 0 to 32768 [ 45.525569][ T3604] hub 9-0:1.0: 8 ports detected [ 45.530821][ T3620] Symlink component flag not implemented [ 45.536876][ T3620] Symlink component flag not implemented [ 45.570305][ T3620] Symlink component flag not implemented (7) [ 45.576576][ T3620] Symlink component flag not implemented (116) [ 45.593986][ T3293] loop3: p1 p2 p3 < p5 p6 > [ 45.602031][ T3293] loop3: p2 size 16775168 extends beyond EOD, truncated [ 45.614305][ T3293] loop3: p5 start 4294970168 is beyond EOD, truncated [ 45.629788][ T3620] syz.4.36 uses obsolete (PF_INET,SOCK_PACKET) [ 45.645337][ T3592] loop3: p1 p2 p3 < p5 p6 > [ 45.653491][ T3592] loop3: p2 size 16775168 extends beyond EOD, truncated [ 45.662807][ T3592] loop3: p5 start 4294970168 is beyond EOD, truncated [ 45.781025][ T3599] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 45.787698][ T3599] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 45.795968][ T3599] vhci_hcd vhci_hcd.0: Device attached [ 45.915547][ C1] hrtimer: interrupt took 38102 ns [ 46.109942][ T23] usb 6-1: SetAddress Request (2) to port 0 [ 46.116363][ T23] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 46.156174][ T3633] loop1: detected capacity change from 0 to 32768 [ 46.170357][ T3628] vhci_hcd: connection reset by peer [ 46.179750][ T1676] vhci_hcd: stop threads [ 46.184655][ T1676] vhci_hcd: release socket [ 46.189110][ T1676] vhci_hcd: disconnect device [ 46.210874][ T3293] loop1: p1 p2 p3 < p5 p6 > [ 46.216487][ T3293] loop1: p2 size 16775168 extends beyond EOD, truncated [ 46.230274][ T3293] loop1: p5 start 4294970168 is beyond EOD, truncated [ 46.248507][ T3633] loop1: p1 p2 p3 < p5 p6 > [ 46.254091][ T3633] loop1: p2 size 16775168 extends beyond EOD, truncated [ 46.275172][ T3633] loop1: p5 start 4294970168 is beyond EOD, truncated [ 46.410176][ T3641] hub 9-0:1.0: USB hub found [ 46.424261][ T3641] hub 9-0:1.0: 8 ports detected [ 46.556300][ T3641] 9pnet: Could not find request transport: fs [ 46.610827][ T3644] loop1: detected capacity change from 0 to 1024 [ 46.617632][ T3644] EXT4-fs: inline encryption not supported [ 46.623574][ T3644] EXT4-fs: Ignoring removed i_version option [ 46.671503][ T3644] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.695010][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 46.695031][ T29] audit: type=1400 audit(1759774467.765:319): avc: denied { bind } for pid=3645 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.803717][ T3644] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.41: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.920081][ T3644] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 46.928528][ T3644] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.41: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.015442][ T3653] loop2: detected capacity change from 0 to 512 [ 47.034093][ T3644] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 47.037382][ T29] audit: type=1326 audit(1759774468.075:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa50303d97f code=0x7ffc0000 [ 47.043180][ T3644] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.41: Failed to acquire dquot type 0 [ 47.107430][ T3653] loop2: detected capacity change from 0 to 1024 [ 47.156424][ T29] audit: type=1326 audit(1759774468.155:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a9ceec9 code=0x7ffc0000 [ 47.180779][ T29] audit: type=1326 audit(1759774468.155:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f299a9ceec9 code=0x7ffc0000 [ 47.204207][ T29] audit: type=1326 audit(1759774468.155:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a9ceec9 code=0x7ffc0000 [ 47.228950][ T29] audit: type=1326 audit(1759774468.155:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a9ceec9 code=0x7ffc0000 [ 47.252343][ T29] audit: type=1326 audit(1759774468.185:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.4.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a9ceec9 code=0x7ffc0000 [ 47.276918][ T29] audit: type=1326 audit(1759774468.185:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3656 comm="syz.4.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a9ceec9 code=0x7ffc0000 [ 47.305933][ T3644] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 47.321461][ T3637] loop3: detected capacity change from 0 to 512 [ 47.323376][ T3659] netlink: 'syz.4.48': attribute type 13 has an invalid length. [ 47.356752][ T3637] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 47.366951][ T3644] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.41: mark_inode_dirty error [ 47.374697][ T3653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.457886][ T3644] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 47.472224][ T3637] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 47.513248][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.520659][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.539246][ T3637] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #11: comm syz.3.40: corrupted inode contents [ 47.549531][ T3644] EXT4-fs (loop1): 1 orphan inode deleted [ 47.566114][ T3637] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #11: comm syz.3.40: mark_inode_dirty error [ 47.582506][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.606266][ T3637] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.40: invalid indirect mapped block 1 (level 1) [ 47.612804][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.636103][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 47.670260][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.681884][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.751227][ T3644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.770628][ T3637] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #11: comm syz.3.40: corrupted inode contents [ 47.799989][ T111] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.809017][ T111] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.810280][ T3665] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.830004][ T111] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.839301][ T111] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.849927][ T3637] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 47.862195][ T3644] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.41: Invalid inode table block 1 in block_group 0 [ 47.879940][ T3665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.887481][ T3665] IPv6: NLM_F_CREATE should be set when creating new route [ 47.901490][ T3637] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #11: comm syz.3.40: corrupted inode contents [ 47.922146][ T3644] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 47.942456][ T3637] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.40: mark_inode_dirty error [ 47.965049][ T3637] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 47.980313][ T3644] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz.1.41: mark_inode_dirty error [ 48.012259][ T3637] EXT4-fs (loop3): 1 truncate cleaned up [ 48.036990][ T3637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.430220][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.479508][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.510772][ T3675] loop2: detected capacity change from 0 to 512 [ 48.552479][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.560240][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.573530][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.581657][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.593887][ T3675] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.612922][ T3675] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.734333][ T3682] loop1: detected capacity change from 0 to 512 [ 48.758528][ T3675] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.50: corrupted inode contents [ 48.776215][ T3675] EXT4-fs (loop2): Remounting filesystem read-only [ 48.787238][ T3675] EXT4-fs (loop2): 1 truncate cleaned up [ 48.794165][ T1676] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.794384][ T3682] loop1: detected capacity change from 0 to 1024 [ 48.805230][ T1676] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 48.817891][ T3682] EXT4-fs: Ignoring removed bh option [ 48.915035][ T3686] loop4: detected capacity change from 0 to 1024 [ 48.923001][ T3686] ext4: Unknown parameter 'noacl' [ 48.963819][ T3686] loop4: detected capacity change from 0 to 1768 [ 48.971736][ T3686] iso9660: Unknown parameter 'sessionÐòž¼' [ 49.012477][ T3682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.044914][ T1676] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.071274][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.246271][ T3677] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 49.374226][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.431814][ T3677] EXT4-fs (loop1): Remounting filesystem read-only [ 49.575861][ T3699] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 49.578762][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.684663][ T3706] loop1: detected capacity change from 0 to 512 [ 49.790166][ T3715] loop2: detected capacity change from 0 to 512 [ 49.822636][ T3715] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.916443][ T3713] loop1: detected capacity change from 0 to 8192 [ 49.936877][ T3715] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.953788][ T3711] loop4: detected capacity change from 0 to 32768 [ 49.975377][ T3713] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.016093][ T3715] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 50.032672][ T3488] loop4: p1 p2 p3 < p5 p6 > [ 50.042637][ T3488] loop4: p2 size 16775168 extends beyond EOD, truncated [ 50.062695][ T3488] loop4: p5 start 4294970168 is beyond EOD, truncated [ 50.072977][ T3715] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.102762][ T3711] loop4: p1 p2 p3 < p5 p6 > [ 50.130509][ T3711] loop4: p2 size 16775168 extends beyond EOD, truncated [ 50.142069][ T3711] loop4: p5 start 4294970168 is beyond EOD, truncated [ 50.152345][ T3715] Zero length message leads to an empty skb [ 50.189932][ T3725] loop1: detected capacity change from 8192 to 0 [ 50.196479][ C0] I/O error, dev loop1, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 50.205967][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 50.214539][ T3713] FAT-fs (loop1): FAT read failed (blocknr 1) [ 50.230434][ T3713] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044) [ 50.243174][ T3713] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 50.260255][ T3720] netlink: 1 bytes leftover after parsing attributes in process `gtp'. [ 50.276690][ T3713] Buffer I/O error on dev loop1, logical block 85, lost async page write [ 50.290319][ T3720] xt_policy: neither incoming nor outgoing policy selected [ 50.297754][ T3713] Buffer I/O error on dev loop1, logical block 97, lost async page write [ 50.320977][ T3720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.331410][ T3713] Buffer I/O error on dev loop1, logical block 98, lost async page write [ 50.331444][ T3713] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 50.378574][ T3713] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 50.397664][ T3713] Buffer I/O error on dev loop1, logical block 101, lost async page write [ 50.440173][ T3726] process 'syz.3.62' launched './file1' with NULL argv: empty string added [ 50.473691][ T3720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.530923][ T3713] Buffer I/O error on dev loop1, logical block 102, lost async page write [ 50.542159][ T3720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.563390][ T3713] Buffer I/O error on dev loop1, logical block 119, lost async page write [ 50.644316][ T3720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.666048][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 50.673732][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 50.677837][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 50.690941][ T3302] FAT-fs (loop1): Directory bread(block 65) failed [ 50.697940][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 50.740098][ T3302] FAT-fs (loop1): Directory bread(block 66) failed [ 50.757810][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 50.761380][ T3488] udevd[3488]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 50.769356][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 50.787848][ T3302] FAT-fs (loop1): Directory bread(block 67) failed [ 50.790637][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 50.819885][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.828328][ T3302] FAT-fs (loop1): Directory bread(block 68) failed [ 50.828364][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.849926][ T3302] FAT-fs (loop1): Directory bread(block 69) failed [ 50.856732][ T3302] FAT-fs (loop1): Directory bread(block 70) failed [ 50.862221][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.889934][ T3302] FAT-fs (loop1): Directory bread(block 71) failed [ 50.894343][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.939455][ T1676] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044) [ 50.948850][ T3302] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044) [ 50.949659][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.975930][ T3729] loop4: detected capacity change from 0 to 32768 [ 50.984336][ T3302] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044) [ 50.992685][ T3302] FAT-fs (loop1): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 51.120198][ T3488] loop4: p1 p2 p3 < p5 p6 > [ 51.125613][ T3488] loop4: p2 size 16775168 extends beyond EOD, truncated [ 51.139194][ T3488] loop4: p5 start 4294970168 is beyond EOD, truncated [ 51.163628][ T3729] loop4: p1 p2 p3 < p5 p6 > [ 51.170815][ T3729] loop4: p2 size 16775168 extends beyond EOD, truncated [ 51.178802][ T3729] loop4: p2 could not be added: -ENOMEM [ 51.187742][ T3729] loop4: p5 start 4294970168 is beyond EOD, truncated [ 51.527911][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.539055][ T3309] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 51.594633][ T3738] bridge_slave_0: left allmulticast mode [ 51.599756][ T23] usb 6-1: device descriptor read/8, error -110 [ 51.600438][ T3738] bridge_slave_0: left promiscuous mode [ 51.600570][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.640501][ T3743] loop0: detected capacity change from 0 to 512 [ 51.667861][ T3745] loop2: detected capacity change from 0 to 1024 [ 51.677002][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 51.677124][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 51.705009][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 51.705028][ T29] audit: type=1326 audit(1759774472.775:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0b141db2a code=0x7ffc0000 [ 51.720547][ T23] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 51.734614][ T29] audit: type=1326 audit(1759774472.775:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0b141db2a code=0x7ffc0000 [ 51.773144][ T3738] bridge_slave_1: left allmulticast mode [ 51.774205][ T23] usb 6-1: enqueue for inactive port 0 [ 51.779114][ T3738] bridge_slave_1: left promiscuous mode [ 51.790715][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.792056][ T23] usb 6-1: enqueue for inactive port 0 [ 51.812500][ T23] usb 6-1: enqueue for inactive port 0 [ 51.818895][ T3738] bond0: (slave bond_slave_0): Releasing backup interface [ 51.820406][ T29] audit: type=1326 audit(1759774472.835:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff0b141d617 code=0x7ffc0000 [ 51.831442][ T3743] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.849460][ T29] audit: type=1326 audit(1759774472.835:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff0b142066a code=0x7ffc0000 [ 51.881663][ T29] audit: type=1400 audit(1759774472.835:424): avc: denied { mounton } for pid=3748 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.904720][ T29] audit: type=1400 audit(1759774472.845:425): avc: denied { nlmsg_write } for pid=3737 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 51.919476][ T3743] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.938287][ T3743] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.70: corrupted inode contents [ 51.950644][ T3743] EXT4-fs (loop0): Remounting filesystem read-only [ 51.957450][ T3743] EXT4-fs (loop0): 1 truncate cleaned up [ 51.963335][ T1733] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.974102][ T1733] Quota error (device loop0): write_blk: dquota write failed [ 51.981558][ T1733] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 51.992166][ T1733] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.003208][ T1733] Quota error (device loop0): write_blk: dquota write failed [ 52.010747][ T1733] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 52.014181][ T3745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.034910][ T3738] bond0: (slave bond_slave_1): Releasing backup interface [ 52.043060][ T1733] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 52.062068][ T3738] team0: Port device team_slave_0 removed [ 52.069086][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.082883][ T3738] team0: Port device team_slave_1 removed [ 52.089318][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.100835][ T3738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.113392][ T3738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.140380][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.151783][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.197114][ T3767] loop2: detected capacity change from 0 to 128 [ 52.210222][ T3767] FAT-fs (loop2): Directory bread(block 162) failed [ 52.217545][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.219905][ T3767] FAT-fs (loop2): Directory bread(block 163) failed [ 52.243951][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.275102][ T3767] FAT-fs (loop2): Directory bread(block 164) failed [ 52.282168][ T3754] pim6reg1: entered promiscuous mode [ 52.287743][ T3754] pim6reg1: entered allmulticast mode [ 52.290243][ T3767] FAT-fs (loop2): Directory bread(block 165) failed [ 52.321204][ T3767] FAT-fs (loop2): Directory bread(block 166) failed [ 52.331975][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.338077][ T3767] FAT-fs (loop2): Directory bread(block 167) failed [ 52.351181][ T3767] FAT-fs (loop2): Directory bread(block 168) failed [ 52.357832][ T3767] FAT-fs (loop2): Directory bread(block 169) failed [ 52.389097][ T3767] netlink: 'syz.2.75': attribute type 13 has an invalid length. [ 52.431208][ T3764] loop3: detected capacity change from 0 to 32768 [ 52.476082][ T3767] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.483552][ T3767] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.496287][ T3767] team_slave_0: left promiscuous mode [ 52.502021][ T3767] team_slave_1: left promiscuous mode [ 52.510197][ T3764] loop3: p1 p2 p3 < p5 p6 > [ 52.516023][ T3764] loop3: p2 size 16775168 extends beyond EOD, truncated [ 52.545836][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.561638][ T3770] loop0: detected capacity change from 0 to 32768 [ 52.566360][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.579272][ T3764] loop3: p5 start 4294970168 is beyond EOD, truncated [ 52.600417][ T3561] loop0: p1 p2 p3 < p5 p6 > [ 52.606531][ T3561] loop0: p2 size 16775168 extends beyond EOD, truncated [ 52.622627][ T3785] loop4: detected capacity change from 0 to 512 [ 52.661353][ T3561] loop0: p5 start 4294970168 is beyond EOD, truncated [ 52.696544][ T3785] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.705380][ T3770] loop0: p1 p2 p3 < p5 p6 > [ 52.721200][ T3770] loop0: p2 size 16775168 extends beyond EOD, truncated [ 52.732644][ T3770] loop0: p5 start 4294970168 is beyond EOD, truncated [ 52.780941][ T1733] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.810703][ T3785] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.859882][ T1733] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.915943][ T31] bridge_slave_1: left allmulticast mode [ 52.921957][ T31] bridge_slave_1: left promiscuous mode [ 52.928183][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.936447][ T23] usb usb6-port1: attempt power cycle [ 52.974306][ T3801] FAULT_INJECTION: forcing a failure. [ 52.974306][ T3801] name failslab, interval 1, probability 0, space 0, times 1 [ 52.987435][ T3801] CPU: 0 UID: 0 PID: 3801 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.987518][ T3801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.987535][ T3801] Call Trace: [ 52.987541][ T3801] [ 52.987548][ T3801] __dump_stack+0x1d/0x30 [ 52.987609][ T3801] dump_stack_lvl+0xe8/0x140 [ 52.987649][ T3801] dump_stack+0x15/0x1b [ 52.987746][ T3801] should_fail_ex+0x265/0x280 [ 52.987787][ T3801] ? copy_ipcs+0xf5/0x3a0 [ 52.987809][ T3801] should_failslab+0x8c/0xb0 [ 52.987839][ T3801] __kmalloc_cache_noprof+0x4c/0x4a0 [ 52.987891][ T3801] copy_ipcs+0xf5/0x3a0 [ 52.987914][ T3801] create_new_namespaces+0x12a/0x3d0 [ 52.987958][ T3801] unshare_nsproxy_namespaces+0xe8/0x120 [ 52.988039][ T3801] ksys_unshare+0x3d0/0x6d0 [ 52.988076][ T3801] ? ksys_write+0x192/0x1a0 [ 52.988108][ T3801] __x64_sys_unshare+0x1f/0x30 [ 52.988144][ T3801] x64_sys_call+0x2915/0x3000 [ 52.988199][ T3801] do_syscall_64+0xd2/0x200 [ 52.988231][ T3801] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.988264][ T3801] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.988357][ T3801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.988418][ T3801] RIP: 0033:0x7fa50303eec9 [ 52.988435][ T3801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.988458][ T3801] RSP: 002b:00007fa501aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 52.988483][ T3801] RAX: ffffffffffffffda RBX: 00007fa503295fa0 RCX: 00007fa50303eec9 [ 52.988498][ T3801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 52.988522][ T3801] RBP: 00007fa501aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.988535][ T3801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.988546][ T3801] R13: 00007fa503296038 R14: 00007fa503295fa0 R15: 00007fff64b05d88 [ 52.988588][ T3801] [ 52.989212][ T3785] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 53.110344][ T3803] loop3: detected capacity change from 0 to 2048 [ 53.210034][ T31] bridge_slave_0: left allmulticast mode [ 53.216307][ T31] bridge_slave_0: left promiscuous mode [ 53.222356][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.230257][ T3785] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.286437][ T3803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.306675][ T3314] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 53.455987][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.471202][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.476160][ T31] bond0 (unregistering): Released all slaves [ 53.533083][ T1733] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.533213][ T3820] syz_tun: entered allmulticast mode [ 53.534414][ T1733] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.557198][ T3815] syz_tun: left allmulticast mode [ 53.573802][ T3819] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.613899][ T31] hsr_slave_0: left promiscuous mode [ 53.614863][ T31] hsr_slave_1: left promiscuous mode [ 53.618158][ T31] veth1_macvtap: left promiscuous mode [ 53.618186][ T31] veth0_macvtap: left promiscuous mode [ 53.618332][ T31] veth1_vlan: left promiscuous mode [ 53.618447][ T31] veth0_vlan: left promiscuous mode [ 53.766488][ T31] team0 (unregistering): Port device team_slave_1 removed [ 53.777148][ T31] team0 (unregistering): Port device team_slave_0 removed [ 53.800536][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.996488][ T3748] chnl_net:caif_netlink_parms(): no params data found [ 54.121389][ T3839] loop3: detected capacity change from 0 to 1024 [ 54.121988][ T3839] ext4: Unknown parameter 'noacl' [ 54.154315][ T3839] loop3: detected capacity change from 0 to 1768 [ 54.154818][ T3839] iso9660: Unknown parameter 'sessionÐòž¼' [ 54.555676][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.563098][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.572285][ T3748] bridge_slave_0: entered allmulticast mode [ 54.579214][ T3748] bridge_slave_0: entered promiscuous mode [ 54.587475][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.594908][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.602375][ T3748] bridge_slave_1: entered allmulticast mode [ 54.609228][ T3748] bridge_slave_1: entered promiscuous mode [ 54.665604][ T3859] SELinux: failed to load policy [ 54.675176][ T3748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.691212][ T3748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.789635][ T3865] SELinux: failed to load policy [ 54.839147][ T3748] team0: Port device team_slave_0 added [ 54.879605][ T3748] team0: Port device team_slave_1 added [ 55.010967][ T3882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.024685][ T3748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.031745][ T3748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.057826][ T3748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.091325][ T3748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.098663][ T3748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.125040][ T3748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.157264][ T3882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.211785][ T3893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 55.248231][ T3748] hsr_slave_0: entered promiscuous mode [ 55.255101][ T3748] hsr_slave_1: entered promiscuous mode [ 55.294106][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 55.344710][ T3882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.650914][ T23] usb usb6-port1: unable to enumerate USB device [ 55.664314][ T3882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.819563][ T3748] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.845271][ T3748] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.874930][ T3748] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.899582][ T3748] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.942488][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.961215][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.010601][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.024330][ T3936] SELinux: failed to load policy [ 56.032032][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.067662][ T3748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.087060][ T3941] tipc: Started in network mode [ 56.092654][ T3941] tipc: Node identity 6a4ab5116566, cluster identity 4711 [ 56.100554][ T3941] tipc: Enabled bearer , priority 0 [ 56.112798][ T3748] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.125690][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.131903][ T3945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 56.132863][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.187801][ T3941] tipc: Disabling bearer [ 56.200924][ T3949] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 56.235714][ T3949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.244429][ T3949] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.252305][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 56.262781][ T3949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.280864][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.288061][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.324410][ T3958] FAULT_INJECTION: forcing a failure. [ 56.324410][ T3958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.337828][ T3958] CPU: 1 UID: 0 PID: 3958 Comm: syz.4.108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.337874][ T3958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.337885][ T3958] Call Trace: [ 56.337890][ T3958] [ 56.337899][ T3958] __dump_stack+0x1d/0x30 [ 56.337937][ T3958] dump_stack_lvl+0xe8/0x140 [ 56.337966][ T3958] dump_stack+0x15/0x1b [ 56.338027][ T3958] should_fail_ex+0x265/0x280 [ 56.338057][ T3958] should_fail+0xb/0x20 [ 56.338112][ T3958] should_fail_usercopy+0x1a/0x20 [ 56.338145][ T3958] _copy_from_iter+0xd2/0xe80 [ 56.338167][ T3958] ? __build_skb_around+0x1ab/0x200 [ 56.338197][ T3958] ? __alloc_skb+0x223/0x320 [ 56.338264][ T3958] netlink_sendmsg+0x471/0x6b0 [ 56.338287][ T3958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.338381][ T3958] __sock_sendmsg+0x142/0x180 [ 56.338472][ T3958] ____sys_sendmsg+0x31e/0x4e0 [ 56.338494][ T3958] ___sys_sendmsg+0x17b/0x1d0 [ 56.338525][ T3958] __x64_sys_sendmsg+0xd4/0x160 [ 56.338547][ T3958] x64_sys_call+0x191e/0x3000 [ 56.338565][ T3958] do_syscall_64+0xd2/0x200 [ 56.338613][ T3958] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.338636][ T3958] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.338659][ T3958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.338713][ T3958] RIP: 0033:0x7f299a9ceec9 [ 56.338727][ T3958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.338742][ T3958] RSP: 002b:00007f299942f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.338778][ T3958] RAX: ffffffffffffffda RBX: 00007f299ac25fa0 RCX: 00007f299a9ceec9 [ 56.338788][ T3958] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000005 [ 56.338799][ T3958] RBP: 00007f299942f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.338809][ T3958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.338820][ T3958] R13: 00007f299ac26038 R14: 00007f299ac25fa0 R15: 00007fff16ea52a8 [ 56.338836][ T3958] [ 56.593414][ T3963] random: crng reseeded on system resumption [ 56.606541][ T3963] Restarting kernel threads ... [ 56.614483][ T3963] Done restarting kernel threads. [ 56.660563][ T3969] loop3: detected capacity change from 0 to 512 [ 56.676660][ T3969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.695659][ T3972] SELinux: failed to load policy [ 56.710611][ T3969] EXT4-fs (loop3): 1 truncate cleaned up [ 56.718059][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.731797][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 56.731811][ T29] audit: type=1326 audit(1759774477.805:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa50303d710 code=0x7ffc0000 [ 56.762623][ T29] audit: type=1326 audit(1759774477.825:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa50303dc17 code=0x7ffc0000 [ 56.774489][ T3748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.786122][ T29] audit: type=1326 audit(1759774477.825:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa50303d710 code=0x7ffc0000 [ 56.816449][ T29] audit: type=1326 audit(1759774477.825:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50303eec9 code=0x7ffc0000 [ 56.840195][ T29] audit: type=1326 audit(1759774477.825:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50303eec9 code=0x7ffc0000 [ 56.870345][ T29] audit: type=1326 audit(1759774477.835:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fa50303eec9 code=0x7ffc0000 [ 56.895799][ T29] audit: type=1400 audit(1759774477.835:553): avc: denied { setattr } for pid=3968 comm="syz.3.111" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.918832][ T29] audit: type=1326 audit(1759774477.835:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50303eec9 code=0x7ffc0000 [ 56.942588][ T29] audit: type=1326 audit(1759774477.835:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50303eec9 code=0x7ffc0000 [ 56.966667][ T29] audit: type=1326 audit(1759774477.865:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50303eec9 code=0x7ffc0000 [ 56.990899][ T3945] syz.2.105 (3945) used greatest stack depth: 10480 bytes left [ 56.999515][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.010883][ T3984] syz.4.114 (3984) used greatest stack depth: 10336 bytes left [ 57.102823][ T3997] FAULT_INJECTION: forcing a failure. [ 57.102823][ T3997] name failslab, interval 1, probability 0, space 0, times 0 [ 57.116388][ T3997] CPU: 0 UID: 0 PID: 3997 Comm: syz.4.117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.116418][ T3997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.116432][ T3997] Call Trace: [ 57.116438][ T3997] [ 57.116446][ T3997] __dump_stack+0x1d/0x30 [ 57.116559][ T3997] dump_stack_lvl+0xe8/0x140 [ 57.116595][ T3997] dump_stack+0x15/0x1b [ 57.116629][ T3997] should_fail_ex+0x265/0x280 [ 57.116667][ T3997] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 57.116728][ T3997] should_failslab+0x8c/0xb0 [ 57.116756][ T3997] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 57.116782][ T3997] ? debugfs_alloc_inode+0x34/0x40 [ 57.116803][ T3997] ? lookup_noperm+0xc9/0x180 [ 57.116880][ T3997] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 57.116899][ T3997] debugfs_alloc_inode+0x34/0x40 [ 57.116921][ T3997] alloc_inode+0x3d/0x170 [ 57.116945][ T3997] new_inode+0x1d/0xe0 [ 57.116968][ T3997] __debugfs_create_file+0x109/0x330 [ 57.117016][ T3997] debugfs_create_file_full+0x3f/0x60 [ 57.117053][ T3997] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 57.117075][ T3997] ref_tracker_dir_debugfs+0x100/0x1e0 [ 57.117187][ T3997] alloc_netdev_mqs+0x1a7/0xa50 [ 57.117214][ T3997] rtnl_create_link+0x239/0x710 [ 57.117239][ T3997] rtnl_newlink_create+0x14c/0x620 [ 57.117307][ T3997] ? security_capable+0x83/0x90 [ 57.117401][ T3997] ? netlink_ns_capable+0x86/0xa0 [ 57.117437][ T3997] rtnl_newlink+0xf29/0x12d0 [ 57.117475][ T3997] ? xas_load+0x413/0x430 [ 57.117535][ T3997] ? __memcg_slab_free_hook+0x135/0x230 [ 57.117627][ T3997] ? __rcu_read_unlock+0x4f/0x70 [ 57.117668][ T3997] ? avc_has_perm_noaudit+0x1b1/0x200 [ 57.117707][ T3997] ? cred_has_capability+0x210/0x280 [ 57.117825][ T3997] ? selinux_capable+0x31/0x40 [ 57.117849][ T3997] ? security_capable+0x83/0x90 [ 57.117883][ T3997] ? ns_capable+0x7d/0xb0 [ 57.117908][ T3997] ? __pfx_rtnl_newlink+0x10/0x10 [ 57.118057][ T3997] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 57.118090][ T3997] netlink_rcv_skb+0x123/0x220 [ 57.118109][ T3997] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 57.118176][ T3997] rtnetlink_rcv+0x1c/0x30 [ 57.118202][ T3997] netlink_unicast+0x5c0/0x690 [ 57.118378][ T3997] netlink_sendmsg+0x58b/0x6b0 [ 57.118400][ T3997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.118432][ T3997] __sock_sendmsg+0x142/0x180 [ 57.118463][ T3997] ____sys_sendmsg+0x31e/0x4e0 [ 57.118542][ T3997] ___sys_sendmsg+0x17b/0x1d0 [ 57.118653][ T3997] __x64_sys_sendmsg+0xd4/0x160 [ 57.118681][ T3997] x64_sys_call+0x191e/0x3000 [ 57.118700][ T3997] do_syscall_64+0xd2/0x200 [ 57.118725][ T3997] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.118826][ T3997] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.118855][ T3997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.118878][ T3997] RIP: 0033:0x7f299a9ceec9 [ 57.118912][ T3997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.118932][ T3997] RSP: 002b:00007f299942f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.118952][ T3997] RAX: ffffffffffffffda RBX: 00007f299ac25fa0 RCX: 00007f299a9ceec9 [ 57.119037][ T3997] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000005 [ 57.119051][ T3997] RBP: 00007f299942f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.119063][ T3997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.119106][ T3997] R13: 00007f299ac26038 R14: 00007f299ac25fa0 R15: 00007fff16ea52a8 [ 57.119126][ T3997] [ 57.119134][ T3997] debugfs: out of free dentries, can not create file 'netdev@ffff8881295de550' [ 57.295089][ T4003] loop3: detected capacity change from 0 to 512 [ 57.304508][ T4000] FAULT_INJECTION: forcing a failure. [ 57.304508][ T4000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.346749][ T4003] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.348192][ T4000] CPU: 0 UID: 0 PID: 4000 Comm: syz.0.118 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.348226][ T4000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.348262][ T4000] Call Trace: [ 57.348274][ T4000] [ 57.348286][ T4000] __dump_stack+0x1d/0x30 [ 57.348340][ T4000] dump_stack_lvl+0xe8/0x140 [ 57.348428][ T4000] dump_stack+0x15/0x1b [ 57.348564][ T4000] should_fail_ex+0x265/0x280 [ 57.348608][ T4000] should_fail+0xb/0x20 [ 57.348629][ T4000] should_fail_usercopy+0x1a/0x20 [ 57.348656][ T4000] _copy_to_user+0x20/0xa0 [ 57.348875][ T4000] simple_read_from_buffer+0xb5/0x130 [ 57.348917][ T4000] proc_fail_nth_read+0x10e/0x150 [ 57.348960][ T4000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.349027][ T4000] vfs_read+0x1a5/0x770 [ 57.349059][ T4000] ? __rcu_read_unlock+0x4f/0x70 [ 57.349090][ T4000] ? __fget_files+0x184/0x1c0 [ 57.349131][ T4000] ksys_read+0xda/0x1a0 [ 57.349196][ T4000] __x64_sys_read+0x40/0x50 [ 57.349227][ T4000] x64_sys_call+0x27c0/0x3000 [ 57.349308][ T4000] do_syscall_64+0xd2/0x200 [ 57.349345][ T4000] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.349430][ T4000] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.349465][ T4000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.349496][ T4000] RIP: 0033:0x7f275535d8dc [ 57.349517][ T4000] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.349540][ T4000] RSP: 002b:00007f2753dbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.349624][ T4000] RAX: ffffffffffffffda RBX: 00007f27555b5fa0 RCX: 00007f275535d8dc [ 57.349641][ T4000] RDX: 000000000000000f RSI: 00007f2753dbf0a0 RDI: 0000000000000004 [ 57.349656][ T4000] RBP: 00007f2753dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 57.349670][ T4000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.349685][ T4000] R13: 00007f27555b6038 R14: 00007f27555b5fa0 R15: 00007ffe2f6cdf58 [ 57.349711][ T4000] [ 57.421092][ T4012] loop0: detected capacity change from 0 to 512 [ 57.423366][ T4003] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.502478][ T4012] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.510315][ T4003] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.119: corrupted inode contents [ 57.523856][ T4012] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.537682][ T4003] EXT4-fs (loop3): Remounting filesystem read-only [ 57.551143][ T4012] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.122: corrupted inode contents [ 57.557588][ T4003] EXT4-fs (loop3): 1 truncate cleaned up [ 57.574609][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.633614][ T4012] EXT4-fs (loop0): Remounting filesystem read-only [ 57.637429][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.678916][ T3997] syz.4.117 (3997) used greatest stack depth: 10072 bytes left [ 57.685807][ T4012] EXT4-fs (loop0): 1 truncate cleaned up [ 57.702513][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.736393][ T3748] veth0_vlan: entered promiscuous mode [ 57.755478][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.771452][ T3748] veth1_vlan: entered promiscuous mode [ 57.780238][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.793543][ T3748] veth0_macvtap: entered promiscuous mode [ 57.810742][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.816178][ T4024] netlink: 'syz.2.124': attribute type 13 has an invalid length. [ 57.822964][ T4012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.828731][ T4003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.872011][ T4026] loop4: detected capacity change from 0 to 512 [ 57.940277][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.942724][ T3748] veth1_macvtap: entered promiscuous mode [ 57.982590][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.987855][ T3748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.003648][ T3748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.022480][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.038179][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.055155][ T4026] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.070001][ T4026] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.078720][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.090172][ T1676] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.105374][ T4026] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.125: corrupted inode contents [ 58.137990][ T4045] 9pnet: Could not find request transport: fs [ 58.154081][ T4026] EXT4-fs (loop4): Remounting filesystem read-only [ 58.162792][ T4026] EXT4-fs (loop4): 1 truncate cleaned up [ 58.169438][ T111] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.181277][ T111] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.195033][ T111] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.207451][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.244730][ T4056] loop2: detected capacity change from 0 to 1024 [ 58.256518][ T4062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 58.269226][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.279449][ T4056] EXT4-fs: inline encryption not supported [ 58.285533][ T4056] EXT4-fs: Ignoring removed i_version option [ 58.310358][ T4056] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.324049][ T4066] loop0: detected capacity change from 0 to 128 [ 58.344186][ T4066] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.370905][ T4070] FAULT_INJECTION: forcing a failure. [ 58.370905][ T4070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.384537][ T4070] CPU: 1 UID: 0 PID: 4070 Comm: syz.4.133 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.384611][ T4070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.384623][ T4070] Call Trace: [ 58.384629][ T4070] [ 58.384636][ T4070] __dump_stack+0x1d/0x30 [ 58.384676][ T4070] dump_stack_lvl+0xe8/0x140 [ 58.384722][ T4070] dump_stack+0x15/0x1b [ 58.384778][ T4070] should_fail_ex+0x265/0x280 [ 58.384823][ T4070] should_fail+0xb/0x20 [ 58.384844][ T4070] should_fail_usercopy+0x1a/0x20 [ 58.384876][ T4070] _copy_from_user+0x1c/0xb0 [ 58.384985][ T4070] ___sys_sendmsg+0xc1/0x1d0 [ 58.385029][ T4070] __x64_sys_sendmsg+0xd4/0x160 [ 58.385053][ T4070] x64_sys_call+0x191e/0x3000 [ 58.385126][ T4070] do_syscall_64+0xd2/0x200 [ 58.385160][ T4070] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.385190][ T4070] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.385219][ T4070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.385267][ T4070] RIP: 0033:0x7f299a9ceec9 [ 58.385282][ T4070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.385299][ T4070] RSP: 002b:00007f299942f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.385319][ T4070] RAX: ffffffffffffffda RBX: 00007f299ac25fa0 RCX: 00007f299a9ceec9 [ 58.385333][ T4070] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 58.385349][ T4070] RBP: 00007f299942f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.385364][ T4070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.385442][ T4070] R13: 00007f299ac26038 R14: 00007f299ac25fa0 R15: 00007fff16ea52a8 [ 58.385472][ T4070] [ 58.388546][ T4066] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.495622][ T4074] loop4: detected capacity change from 0 to 1024 [ 58.529156][ T4056] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.130: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.565611][ T4062] ext4: Unknown parameter '€' [ 58.575689][ T4056] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.130: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.631255][ T4056] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.130: Failed to acquire dquot type 0 [ 58.651521][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.674339][ T4056] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 58.823925][ T4056] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.130: mark_inode_dirty error [ 58.838021][ T4056] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 58.849137][ T4056] EXT4-fs (loop2): 1 orphan inode deleted [ 58.855677][ T4056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.891002][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.906749][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 58.920165][ T4083] syz.4.137: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 58.934929][ T4083] CPU: 0 UID: 0 PID: 4083 Comm: syz.4.137 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.934994][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.935012][ T4083] Call Trace: [ 58.935020][ T4083] [ 58.935028][ T4083] __dump_stack+0x1d/0x30 [ 58.935072][ T4083] dump_stack_lvl+0xe8/0x140 [ 58.935150][ T4083] dump_stack+0x15/0x1b [ 58.935190][ T4083] warn_alloc+0x12b/0x1a0 [ 58.935223][ T4083] __vmalloc_node_range_noprof+0x9d/0xed0 [ 58.935297][ T4083] ? __rcu_read_unlock+0x4f/0x70 [ 58.935321][ T4083] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 58.935358][ T4083] ? plist_check_list+0x1e4/0x210 [ 58.935443][ T4083] ? perf_cgroup_switch+0x10c/0x480 [ 58.935603][ T4083] ? should_fail_ex+0x30/0x280 [ 58.935648][ T4083] ? xskq_create+0x36/0xe0 [ 58.935731][ T4083] vmalloc_user_noprof+0x7d/0xb0 [ 58.935791][ T4083] ? xskq_create+0x80/0xe0 [ 58.935827][ T4083] xskq_create+0x80/0xe0 [ 58.935939][ T4083] xsk_init_queue+0x95/0xf0 [ 58.936018][ T4083] xsk_setsockopt+0x3f5/0x640 [ 58.936073][ T4083] ? __pfx_xsk_setsockopt+0x10/0x10 [ 58.936106][ T4083] __sys_setsockopt+0x181/0x200 [ 58.936126][ T4083] __x64_sys_setsockopt+0x64/0x80 [ 58.936160][ T4083] x64_sys_call+0x20ec/0x3000 [ 58.936181][ T4083] do_syscall_64+0xd2/0x200 [ 58.936268][ T4083] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.936294][ T4083] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.936386][ T4083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.936407][ T4083] RIP: 0033:0x7f299a9ceec9 [ 58.936426][ T4083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.936450][ T4083] RSP: 002b:00007f299940e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 58.936476][ T4083] RAX: ffffffffffffffda RBX: 00007f299ac26090 RCX: 00007f299a9ceec9 [ 58.936493][ T4083] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 58.936509][ T4083] RBP: 00007f299aa51f91 R08: 0000000000000004 R09: 0000000000000000 [ 58.936525][ T4083] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.936537][ T4083] R13: 00007f299ac26128 R14: 00007f299ac26090 R15: 00007fff16ea52a8 [ 58.936554][ T4083] [ 58.936574][ T4083] Mem-Info: [ 59.166813][ T4083] active_anon:13001 inactive_anon:0 isolated_anon:0 [ 59.166813][ T4083] active_file:8069 inactive_file:13002 isolated_file:0 [ 59.166813][ T4083] unevictable:0 dirty:326 writeback:0 [ 59.166813][ T4083] slab_reclaimable:3248 slab_unreclaimable:64939 [ 59.166813][ T4083] mapped:32284 shmem:4201 pagetables:1219 [ 59.166813][ T4083] sec_pagetables:0 bounce:0 [ 59.166813][ T4083] kernel_misc_reclaimable:0 [ 59.166813][ T4083] free:1815144 free_pcp:21803 free_cma:0 [ 59.213593][ T4083] Node 0 active_anon:52004kB inactive_anon:0kB active_file:32276kB inactive_file:52008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129136kB dirty:1304kB writeback:0kB shmem:16804kB kernel_stack:3600kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 59.241898][ T4083] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 59.272055][ T4083] lowmem_reserve[]: 0 2883 7862 7862 [ 59.277425][ T4083] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 59.309700][ T4083] lowmem_reserve[]: 0 0 4978 4978 [ 59.314999][ T4083] Node 0 Normal free:4295928kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52004kB inactive_anon:0kB active_file:32276kB inactive_file:52008kB unevictable:0kB writepending:1304kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:83728kB local_pcp:45280kB free_cma:0kB [ 59.349366][ T4083] lowmem_reserve[]: 0 0 0 0 [ 59.354086][ T4083] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 59.356760][ T4086] loop3: detected capacity change from 0 to 512 [ 59.367225][ T4083] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 59.389919][ T4083] Node 0 Normal: 246*4kB (U) 226*8kB (UE) 80*16kB (UE) 66*32kB (U) 44*64kB (U) 28*128kB (U) 30*256kB (UME) 25*512kB (UME) 15*1024kB (UM) 6*2048kB (UME) 1034*4096kB (UM) = 4295976kB [ 59.409044][ T4083] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 59.418614][ T4083] 25326 total pagecache pages [ 59.424065][ T4083] 0 pages in swap cache [ 59.428937][ T4083] Free swap = 124996kB [ 59.433321][ T4083] Total swap = 124996kB [ 59.437958][ T4083] 2097051 pages RAM [ 59.442023][ T4083] 0 pages HighMem/MovableOnly [ 59.447051][ T4083] 80446 pages reserved [ 59.457435][ T4056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.469490][ T4056] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.130: Invalid inode table block 1 in block_group 0 [ 59.482864][ T4056] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 59.488485][ T4086] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.505860][ T4056] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz.2.130: mark_inode_dirty error [ 59.521047][ T4086] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.581201][ T3304] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 59.658103][ T4094] FAULT_INJECTION: forcing a failure. [ 59.658103][ T4094] name failslab, interval 1, probability 0, space 0, times 0 [ 59.658137][ T4094] CPU: 1 UID: 0 PID: 4094 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.658168][ T4094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.658180][ T4094] Call Trace: [ 59.658188][ T4094] [ 59.658197][ T4094] __dump_stack+0x1d/0x30 [ 59.658264][ T4094] dump_stack_lvl+0xe8/0x140 [ 59.658298][ T4094] dump_stack+0x15/0x1b [ 59.658326][ T4094] should_fail_ex+0x265/0x280 [ 59.658426][ T4094] should_failslab+0x8c/0xb0 [ 59.658456][ T4094] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 59.658510][ T4094] ? sidtab_sid2str_get+0xa0/0x130 [ 59.658549][ T4094] kmemdup_noprof+0x2b/0x70 [ 59.658609][ T4094] sidtab_sid2str_get+0xa0/0x130 [ 59.658638][ T4094] security_sid_to_context_core+0x1eb/0x2e0 [ 59.658677][ T4094] security_sid_to_context+0x27/0x40 [ 59.658710][ T4094] selinux_lsmprop_to_secctx+0x67/0xf0 [ 59.658809][ T4094] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 59.658861][ T4094] audit_log_subj_ctx+0xa4/0x3e0 [ 59.658885][ T4094] ? skb_put+0xa9/0xf0 [ 59.658927][ T4094] audit_log_task_context+0x48/0x70 [ 59.658951][ T4094] audit_log_task+0xf4/0x250 [ 59.659027][ T4094] ? kstrtouint+0x76/0xc0 [ 59.659068][ T4094] audit_seccomp+0x61/0x100 [ 59.659141][ T4094] ? __seccomp_filter+0x82d/0x1250 [ 59.659170][ T4094] __seccomp_filter+0x83e/0x1250 [ 59.659199][ T4094] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.659302][ T4094] ? vfs_write+0x7e8/0x960 [ 59.659332][ T4094] ? __rcu_read_unlock+0x4f/0x70 [ 59.659358][ T4094] ? __fget_files+0x184/0x1c0 [ 59.659384][ T4094] __secure_computing+0x82/0x150 [ 59.659408][ T4094] syscall_trace_enter+0xcf/0x1e0 [ 59.659519][ T4094] do_syscall_64+0xac/0x200 [ 59.659553][ T4094] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.659586][ T4094] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.659625][ T4094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.659651][ T4094] RIP: 0033:0x7ff0b141eec9 [ 59.659670][ T4094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.659692][ T4094] RSP: 002b:00007ff0afe7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 59.659715][ T4094] RAX: ffffffffffffffda RBX: 00007ff0b1675fa0 RCX: 00007ff0b141eec9 [ 59.659729][ T4094] RDX: 0000000000000705 RSI: 100000000000600d RDI: 0000000000000000 [ 59.659847][ T4094] RBP: 00007ff0afe7f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.659862][ T4094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.659876][ T4094] R13: 00007ff0b1676038 R14: 00007ff0b1675fa0 R15: 00007ffde114b798 [ 59.659897][ T4094] [ 59.803552][ T4105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.146'. [ 59.803579][ T4105] netem: change failed [ 59.871922][ T4108] loop3: detected capacity change from 0 to 1024 [ 59.872392][ T4108] EXT4-fs: Ignoring removed bh option [ 59.892643][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.321566][ T4108] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.148: Allocating blocks 497-513 which overlap fs metadata [ 60.322914][ T4108] EXT4-fs (loop3): Remounting filesystem read-only [ 60.354411][ T4107] EXT4-fs (loop3): pa ffff8881071d0150: logic 256, phys. 369, len 9 [ 60.399260][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.583643][ T4119] loop0: detected capacity change from 0 to 512 [ 60.600522][ T4117] SELinux: failed to load policy [ 60.638716][ T4121] loop3: detected capacity change from 0 to 512 [ 60.674220][ T4119] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.717826][ T4126] loop2: detected capacity change from 0 to 512 [ 60.730313][ T4121] loop3: detected capacity change from 0 to 1024 [ 60.749697][ T4121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.771151][ T4126] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.790258][ T4119] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.804673][ T4126] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.820358][ T4126] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.153: corrupted inode contents [ 60.834537][ T4126] EXT4-fs (loop2): Remounting filesystem read-only [ 60.861078][ T4126] EXT4-fs (loop2): 1 truncate cleaned up [ 60.867186][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.878013][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.890494][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 60.905234][ T3306] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 60.917054][ T4126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.995478][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.041383][ T4155] 9pnet: Could not find request transport: fs [ 61.072994][ T4155] loop4: detected capacity change from 0 to 1024 [ 61.080395][ T4155] EXT4-fs: inline encryption not supported [ 61.086297][ T4155] EXT4-fs: Ignoring removed i_version option [ 61.096393][ T4155] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.113649][ T4145] ================================================================== [ 61.122160][ T4145] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 61.129519][ T4145] [ 61.131870][ T4145] read-write to 0xffff888107372fe8 of 8 bytes by task 4136 on cpu 0: [ 61.137134][ T4157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.139947][ T4145] xas_clear_mark+0x91/0x180 [ 61.139986][ T4145] __folio_start_writeback+0x24a/0x390 [ 61.140012][ T4145] ext4_bio_write_folio+0x5ad/0x9f0 [ 61.140043][ T4145] mpage_process_page_bufs+0x4a1/0x620 [ 61.173461][ T4145] mpage_prepare_extent_to_map+0x786/0xc00 [ 61.179445][ T4145] ext4_do_writepages+0x708/0x2750 [ 61.184850][ T4145] ext4_writepages+0x176/0x300 [ 61.189722][ T4145] do_writepages+0x1c3/0x310 [ 61.195209][ T4145] filemap_write_and_wait_range+0x144/0x340 [ 61.201384][ T4145] kiocb_write_and_wait+0x7a/0x110 [ 61.206904][ T4145] __iomap_dio_rw+0x52c/0x1240 [ 61.211793][ T4145] iomap_dio_rw+0x40/0x90 [ 61.216421][ T4145] ext4_file_read_iter+0x20f/0x290 [ 61.221581][ T4145] copy_splice_read+0x442/0x660 [ 61.226519][ T4145] splice_direct_to_actor+0x290/0x680 [ 61.231999][ T4145] do_splice_direct+0xda/0x150 [ 61.236880][ T4145] do_sendfile+0x380/0x650 [ 61.241507][ T4145] __x64_sys_sendfile64+0x105/0x150 [ 61.246926][ T4145] x64_sys_call+0x2bb4/0x3000 [ 61.251986][ T4145] do_syscall_64+0xd2/0x200 [ 61.256535][ T4145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.262460][ T4145] [ 61.264938][ T4145] read to 0xffff888107372fe8 of 8 bytes by task 4145 on cpu 1: [ 61.272600][ T4145] xas_find_marked+0x218/0x620 [ 61.277502][ T4145] find_get_entry+0x5d/0x380 [ 61.282502][ T4145] filemap_get_folios_tag+0x13b/0x210 [ 61.288040][ T4145] mpage_prepare_extent_to_map+0x320/0xc00 [ 61.295181][ T4145] ext4_do_writepages+0x708/0x2750 [ 61.300788][ T4145] ext4_writepages+0x176/0x300 [ 61.305787][ T4145] do_writepages+0x1c3/0x310 [ 61.311720][ T4145] file_write_and_wait_range+0x156/0x2c0 [ 61.317441][ T4145] generic_buffers_fsync_noflush+0x45/0x120 [ 61.324243][ T4145] ext4_sync_file+0x1ab/0x690 [ 61.328990][ T4145] vfs_fsync_range+0x10d/0x130 [ 61.334162][ T4145] ext4_buffered_write_iter+0x34f/0x3c0 [ 61.340255][ T4145] ext4_file_write_iter+0x387/0xf60 [ 61.345653][ T4145] do_iter_readv_writev+0x49e/0x540 [ 61.351613][ T4145] vfs_writev+0x2df/0x8b0 [ 61.356523][ T4145] __se_sys_pwritev2+0xfc/0x1c0 [ 61.361864][ T4145] __x64_sys_pwritev2+0x67/0x80 [ 61.366749][ T4145] x64_sys_call+0x2c59/0x3000 [ 61.371451][ T4145] do_syscall_64+0xd2/0x200 [ 61.375985][ T4145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.382428][ T4145] [ 61.384772][ T4145] value changed: 0xfffffffffffffc00 -> 0xfffffffffffe0000 [ 61.392401][ T4145] [ 61.394769][ T4145] Reported by Kernel Concurrency Sanitizer on: [ 61.401044][ T4145] CPU: 1 UID: 0 PID: 4145 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.411077][ T4145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.421156][ T4145] ================================================================== [ 61.434894][ T4161] loop2: detected capacity change from 0 to 512 [ 61.446726][ T4155] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.163: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.463046][ T4161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.469235][ T4145] syz.3.151 (4145) used greatest stack depth: 9432 bytes left [ 61.473440][ T4155] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.163: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.503855][ T4155] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.163: Failed to acquire dquot type 0 [ 61.518932][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.529361][ T4155] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 61.539399][ T4155] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.163: mark_inode_dirty error [ 61.554461][ T4155] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 61.566702][ T4155] EXT4-fs (loop4): 1 orphan inode deleted [ 61.567667][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.574035][ T4155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.587693][ T4161] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.601005][ T1676] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.641254][ T1676] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 61.645187][ T4161] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.164: corrupted xattr block 19: overlapping e_value [ 61.654313][ T4155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.667565][ T4161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 61.678136][ T4155] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.163: Invalid inode table block 1 in block_group 0 [ 61.685847][ T4161] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.164: corrupted xattr block 19: overlapping e_value [ 61.699102][ T4155] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 61.724195][ T4155] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz.4.163: mark_inode_dirty error [ 61.735998][ T4161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 61.745954][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 61.745970][ T29] audit: type=1400 audit(1759774482.815:690): avc: denied { setattr } for pid=4159 comm="syz.2.164" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.776774][ T4161] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.164: corrupted xattr block 19: overlapping e_value [ 61.792762][ T4165] netlink: 'syz.2.164': attribute type 3 has an invalid length. [ 61.800603][ T4165] netlink: 132 bytes leftover after parsing attributes in process `syz.2.164'. [ 61.812756][ T29] audit: type=1326 audit(1759774482.885:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b141eec9 code=0x7ffc0000 [ 61.836912][ T29] audit: type=1326 audit(1759774482.885:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ff0b141eec9 code=0x7ffc0000 [ 61.860955][ T29] audit: type=1326 audit(1759774482.885:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b141eec9 code=0x7ffc0000 [ 61.885281][ T29] audit: type=1326 audit(1759774482.885:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff0b141eec9 code=0x7ffc0000 [ 61.909441][ T29] audit: type=1400 audit(1759774482.885:695): avc: denied { mounton } for pid=4159 comm="syz.2.164" path="/37/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.011361][ T29] audit: type=1326 audit(1759774483.085:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b141eec9 code=0x7ffc0000 [ 62.037729][ T29] audit: type=1326 audit(1759774483.085:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b141eec9 code=0x7ffc0000 [ 62.062931][ T29] audit: type=1326 audit(1759774483.105:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff0b141eec9 code=0x7ffc0000 [ 62.089408][ T29] audit: type=1326 audit(1759774483.105:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b141eec9 code=0x7ffc0000 [ 62.142968][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.