last executing test programs: 26.227512788s ago: executing program 1 (id=382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000957c2b73d218e35bc57500970ffe8334528096a9e3b4cce19185689b68b87afee20138c8390201ab5a9213086692880a07b57205e79e7f803f7c57673845ae23c40db143ba1c777d8afd723cd20608af25375926711b1cd92c7be4e7b110fcb000e23543dede8b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 26.186176158s ago: executing program 1 (id=384): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cd9d2cbd7000fedbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000806300000023002a00651208021100b8aeeef2fa9a82a57fd50f0001080211000000ffffffffffff76"], 0x4c}}, 0x4040014) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf253900000008000300", @ANYRES32, @ANYBLOB="2800458004002080"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x240400e0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="95", 0x1, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7fff, 0x0, 0x204, 0xfb7, 0xa000, 0x7ff, 0x0, 0x6}, &(0x7f0000000080)=0x20) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='syscall\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 26.154935318s ago: executing program 1 (id=385): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cd9d2cbd7000fedbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000806300000023002a00651208021100b8aeeef2fa9a82a57fd50f0001080211000000ffffffffffff76"], 0x4c}}, 0x4040014) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="95", 0x1, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7fff, 0x0, 0x204, 0xfb7, 0xa000, 0x7ff, 0x0, 0x6}, &(0x7f0000000080)=0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='syscall\x00') mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 26.085710278s ago: executing program 1 (id=387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000957c2b73d218e35bc57500970ffe8334528096a9e3b4cce19185689b68b87afee20138c8390201ab5a9213086692880a07b57205e79e7f803f7c57673845ae23c40db143ba1c777d8afd723cd20608af25375926711b1cd92c7be4e7b110fcb000e23543dede8b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 25.917911467s ago: executing program 1 (id=389): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0x81}, 0x18) socket$packet(0x11, 0x2, 0x300) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5825, 0x800, 0x3}, &(0x7f0000000100), &(0x7f00000001c0)) 25.820968967s ago: executing program 1 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = epoll_create(0x7) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0901, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000009}) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, {0x0, 0x0, 0x0, 0xe}, {0x100000000000000}, {}, 0xfffffffc, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 10.74237619s ago: executing program 32 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = epoll_create(0x7) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0901, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000009}) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, {0x0, 0x0, 0x0, 0xe}, {0x100000000000000}, {}, 0xfffffffc, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 4.093720566s ago: executing program 2 (id=697): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 2.74648642s ago: executing program 2 (id=727): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 2.293812559s ago: executing program 5 (id=739): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendfile(r2, r2, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x1ae) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$vga_arbiter(r8, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x800) r9 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x543, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x68, 0xaad, 0x2, 0x2082, r9, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa, @void, @value, @void, @value}, 0x50) 1.930976977s ago: executing program 0 (id=744): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cd9d2cbd7000fedbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000806300000023002a00651208021100b8aeeef2fa9a82a57fd50f0001080211000000ffffffffffff76"], 0x4c}}, 0x4040014) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="95", 0x1, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7fff, 0x0, 0x204, 0xfb7, 0xa000, 0x7ff, 0x0, 0x6}, &(0x7f0000000080)=0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 1.842242727s ago: executing program 5 (id=747): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendfile(r2, r2, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x1ae) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$vga_arbiter(r8, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x800) r9 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x543, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x68, 0xaad, 0x2, 0x2082, r9, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa, @void, @value, @void, @value}, 0x50) 1.828715367s ago: executing program 0 (id=748): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendfile(r2, r2, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x1ae) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$vga_arbiter(r8, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x800) r9 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x543, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x68, 0xaad, 0x2, 0x2082, r9, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa, @void, @value, @void, @value}, 0x50) 1.555020276s ago: executing program 3 (id=753): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendfile(r2, r2, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x1ae) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r8, r8, 0x0, 0xfffe80) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$vga_arbiter(r9, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x800) r10 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x543, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x68, 0xaad, 0x2, 0x2082, r10, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa, @void, @value, @void, @value}, 0x50) 1.554118446s ago: executing program 4 (id=754): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000060cb"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000820000000014002b8008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x3c}}, 0x0) 1.474334326s ago: executing program 4 (id=755): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) connect$qrtr(r1, &(0x7f0000000440)={0x2a, 0x4, 0xc000}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x7fe2, 0x1, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff8000000000000, 0x3}, 0x0, 0x5dda, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.444691835s ago: executing program 0 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = epoll_create(0x7) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0901, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000009}) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, {0x0, 0x0, 0x0, 0xe}, {0x100000000000000}, {}, 0xfffffffc, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1.405305725s ago: executing program 5 (id=757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) open(0x0, 0xec40, 0x12) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.381832475s ago: executing program 2 (id=758): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cd9d2cbd7000fedbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000806300000023002a00651208021100b8aeeef2fa9a82a57fd50f0001080211000000ffffffffffff76"], 0x4c}}, 0x4040014) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf253900000008000300", @ANYRES32, @ANYBLOB="2800458004002080"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x240400e0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="95", 0x1, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7fff, 0x0, 0x204, 0xfb7, 0xa000, 0x7ff, 0x0, 0x6}, &(0x7f0000000080)=0x20) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='syscall\x00') mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 1.356880425s ago: executing program 5 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000009}) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, {0x0, 0x0, 0x0, 0xe}, {0x100000000000000}, {}, 0xfffffffc, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.327655345s ago: executing program 4 (id=760): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000060cb96e0171f017c3b"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0xc1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000002000)=""/4096) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000820000000014002b8008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x3c}}, 0x0) 1.309711915s ago: executing program 2 (id=761): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}, {@barrier}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lchown(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r5, &(0x7f0000001500)=ANY=[@ANYBLOB='decodes io'], 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 1.123905224s ago: executing program 4 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.068466694s ago: executing program 3 (id=763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000957c2b73d218e35bc57500970ffe8334528096a9e3b4cce19185689b68b87afee20138c8390201ab5a9213086692880a07b57205e79e7f803f7c57673845ae23c40db143ba1c777d8afd723cd20608af25375926711b1cd92c7be4e7b110fcb000e23543dede8b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.025702294s ago: executing program 3 (id=764): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f00000003c0)='./file0\x00') 1.020185614s ago: executing program 4 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000060cb96e0171f017c3b58d22ebfc761"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0xc1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000002000)=""/4096) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) semop(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000820000000014002b8008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x3c}}, 0x0) 1.006500634s ago: executing program 3 (id=766): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendfile(r2, r2, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x1ae) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$vga_arbiter(r8, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x800) r9 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x543, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x68, 0xaad, 0x2, 0x2082, r9, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa, @void, @value, @void, @value}, 0x50) 554.961862ms ago: executing program 0 (id=767): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) connect$qrtr(r1, &(0x7f0000000440)={0x2a, 0x4, 0xc000}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 490.664942ms ago: executing program 4 (id=768): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendfile(r2, r2, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x1ae) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$vga_arbiter(r8, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x800) r9 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x543, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x68, 0xaad, 0x2, 0x2082, r9, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa, @void, @value, @void, @value}, 0x50) 483.641042ms ago: executing program 5 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) open(0x0, 0xec40, 0x12) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 378.227331ms ago: executing program 5 (id=770): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(r2, r2, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x1ae) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) 376.968091ms ago: executing program 2 (id=771): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000957c2b73d218e35bc57500970ffe8334528096a9e3b4cce19185689b68b87afee20138c8390201ab5a9213086692880a07b57205e79e7f803f7c57673845ae23c40db143ba1c777d8afd723cd20608af25375926711b1cd92c7be4e7b110fcb000e23543dede8b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 343.618631ms ago: executing program 2 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000000700000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = epoll_create(0x7) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0901, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x10000009}) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, {0x0, 0x0, 0x0, 0xe}, {0x100000000000000}, {}, 0xfffffffc, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 328.348561ms ago: executing program 0 (id=773): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) symlink(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 188.136981ms ago: executing program 3 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x40c0080) 649.86µs ago: executing program 0 (id=775): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) connect$qrtr(r1, &(0x7f0000000440)={0x2a, 0x4, 0xc000}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x7fe2, 0x1, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff8000000000000, 0x3}, 0x0, 0x5dda, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/snmp6\x00') pread64(r6, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 0s ago: executing program 3 (id=776): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendfile(r2, r2, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103041, 0x1ae) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$vga_arbiter(r8, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x800) r9 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x543, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x68, 0xaad, 0x2, 0x2082, r9, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): slave_1: left allmulticast mode [ 38.131929][ T1404] bridge_slave_1: left promiscuous mode [ 38.137648][ T1404] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.180938][ T1404] bridge_slave_0: left allmulticast mode [ 38.186637][ T1404] bridge_slave_0: left promiscuous mode [ 38.192441][ T1404] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.488340][ T3704] loop0: detected capacity change from 0 to 512 [ 38.535675][ T1404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.549064][ T1404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.565617][ T1404] bond0 (unregistering): Released all slaves [ 38.587051][ T3704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.618201][ T3704] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.660690][ T1404] hsr_slave_0: left promiscuous mode [ 38.672704][ T1404] hsr_slave_1: left promiscuous mode [ 38.702650][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.710134][ T1404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.734283][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.772356][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.779856][ T1404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.816021][ T1404] veth1_macvtap: left promiscuous mode [ 38.828895][ T1404] veth0_macvtap: left promiscuous mode [ 38.836941][ T1404] veth1_vlan: left promiscuous mode [ 38.858129][ T1404] veth0_vlan: left promiscuous mode [ 38.895427][ T3722] syz.3.76[3722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.895867][ T3722] syz.3.76[3722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.909508][ T3722] syz.3.76[3722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.065261][ T3722] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 39.085000][ T3722] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 39.229270][ T3676] chnl_net:caif_netlink_parms(): no params data found [ 39.336698][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.343908][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.378503][ T3676] bridge_slave_0: entered allmulticast mode [ 39.393481][ T3676] bridge_slave_0: entered promiscuous mode [ 39.440544][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.447691][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.460935][ T3676] bridge_slave_1: entered allmulticast mode [ 39.467692][ T3676] bridge_slave_1: entered promiscuous mode [ 39.542966][ T3676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.564728][ T3676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.610501][ T3676] team0: Port device team_slave_0 added [ 39.642260][ T3676] team0: Port device team_slave_1 added [ 39.693046][ T3676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.700168][ T3676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.728109][ T3676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.952766][ T3676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.959807][ T3676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.986113][ T3676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.320930][ T3793] loop3: detected capacity change from 0 to 128 [ 40.356619][ T3793] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 41.018127][ T3676] hsr_slave_0: entered promiscuous mode [ 41.055145][ T3676] hsr_slave_1: entered promiscuous mode [ 41.085784][ T3676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.120842][ T3676] Cannot create hsr debugfs directory [ 41.380682][ T3809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'. [ 41.951891][ T3676] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.970981][ T3676] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.984753][ T3676] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.003776][ T3676] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.021833][ T3793] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.029764][ T3793] FAT-fs (loop3): Filesystem has been set read-only [ 42.050321][ T3858] 9pnet_virtio: no channels available for device 127.0.0.1 [ 42.063813][ T3793] syz.3.84: attempt to access beyond end of device [ 42.063813][ T3793] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 42.109833][ T3676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.122791][ T3676] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.131306][ T3793] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.139172][ T3793] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.184338][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.191468][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.210106][ T3793] syz.3.84: attempt to access beyond end of device [ 42.210106][ T3793] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.244596][ T3793] syz.3.84: attempt to access beyond end of device [ 42.244596][ T3793] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.246855][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.265624][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.284491][ T3864] loop1: detected capacity change from 0 to 1024 [ 42.300393][ T3864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.310536][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 42.310553][ T29] audit: type=1400 audit(1737627199.458:1653): avc: denied { module_request } for pid=3676 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 42.347497][ T29] audit: type=1400 audit(1737627199.468:1654): avc: denied { mount } for pid=3859 comm="syz.1.93" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.381420][ T29] audit: type=1400 audit(1737627199.528:1655): avc: denied { sys_module } for pid=3676 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 42.403811][ T3875] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.93: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 42.439307][ T29] audit: type=1400 audit(1737627199.578:1656): avc: denied { write } for pid=3859 comm="syz.1.93" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.455971][ T3676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.460961][ T29] audit: type=1400 audit(1737627199.578:1657): avc: denied { add_name } for pid=3859 comm="syz.1.93" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.488647][ T29] audit: type=1400 audit(1737627199.578:1658): avc: denied { create } for pid=3859 comm="syz.1.93" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.508984][ T29] audit: type=1400 audit(1737627199.578:1659): avc: denied { read write } for pid=3859 comm="syz.1.93" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.531484][ T29] audit: type=1400 audit(1737627199.578:1660): avc: denied { open } for pid=3859 comm="syz.1.93" path="/21/file0/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.656931][ T3676] veth0_vlan: entered promiscuous mode [ 42.679133][ T3676] veth1_vlan: entered promiscuous mode [ 42.744556][ T29] audit: type=1400 audit(1737627199.898:1661): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.824504][ T29] audit: type=1400 audit(1737627199.928:1662): avc: denied { mounton } for pid=3910 comm="syz.3.94" path="/15/file0" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.956109][ T3914] loop3: detected capacity change from 0 to 1024 [ 42.978158][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.988452][ T3914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.005522][ T3676] veth0_macvtap: entered promiscuous mode [ 43.052111][ T3917] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.95: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 43.059292][ T3676] veth1_macvtap: entered promiscuous mode [ 43.117185][ T3929] loop1: detected capacity change from 0 to 4096 [ 43.130101][ T3676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.141001][ T3676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.151009][ T3676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.161573][ T3676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.172930][ T3676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.195914][ T3929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.245558][ T3676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.256102][ T3676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.265965][ T3676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.276481][ T3676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.297105][ T3676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.306092][ T3676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.314951][ T3676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.324262][ T3676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.333198][ T3676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.430087][ T3940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.98'. [ 43.498690][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.724797][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.808903][ T3960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.103'. [ 44.008673][ T3963] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 44.095415][ T3963] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.177337][ T3966] syz.4.104[3966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.178854][ T3966] syz.4.104[3966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.269576][ T3966] syz.4.104[3966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.325102][ T3967] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 44.345065][ T3967] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 45.114374][ T3993] 9pnet_virtio: no channels available for device 127.0.0.1 [ 45.145198][ T3982] loop3: detected capacity change from 0 to 4096 [ 45.284166][ T3982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.326013][ T4006] loop4: detected capacity change from 0 to 1024 [ 45.344103][ T4006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.363387][ T4008] 9pnet_fd: Insufficient options for proto=fd [ 45.408238][ T4014] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.113: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 45.604708][ T4033] loop0: detected capacity change from 0 to 1024 [ 45.619598][ T4033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.685644][ T4035] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.117: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 45.784473][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.056136][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.129875][ T4075] loop1: detected capacity change from 0 to 512 [ 46.197831][ T4075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.231680][ T4075] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.332590][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.369774][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.430717][ T4093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.124'. [ 46.485596][ T4100] netlink: 'syz.0.124': attribute type 10 has an invalid length. [ 46.550655][ T4100] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.579538][ T4102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 46.596570][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.604146][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.612674][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.620112][ T4102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.800516][ T4109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 47.744954][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 47.744988][ T29] audit: type=1400 audit(1737627204.898:1904): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.778296][ T29] audit: type=1400 audit(1737627204.898:1905): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.805721][ T29] audit: type=1400 audit(1737627204.898:1906): avc: denied { ioctl } for pid=3307 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.996934][ T29] audit: type=1400 audit(1737627204.938:1907): avc: denied { append } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.021364][ T29] audit: type=1400 audit(1737627205.018:1908): avc: denied { execmem } for pid=4116 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.052129][ T4119] loop4: detected capacity change from 0 to 1024 [ 48.078727][ T4118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 48.130254][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.194297][ T29] audit: type=1400 audit(1737627205.198:1909): avc: denied { prog_load } for pid=4116 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.215949][ T29] audit: type=1400 audit(1737627205.198:1910): avc: denied { bpf } for pid=4116 comm="syz.4.128" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.237730][ T29] audit: type=1400 audit(1737627205.198:1911): avc: denied { perfmon } for pid=4116 comm="syz.4.128" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.259933][ T29] audit: type=1400 audit(1737627205.198:1912): avc: denied { prog_run } for pid=4116 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.279719][ T29] audit: type=1400 audit(1737627205.208:1913): avc: denied { mounton } for pid=4116 comm="syz.4.128" path="/26/file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.313044][ T4133] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.128: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 48.469572][ T4142] syz.0.137[4142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.471177][ T4142] syz.0.137[4142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.471503][ T4144] loop3: detected capacity change from 0 to 512 [ 48.486495][ T4142] syz.0.137[4142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.503175][ T4140] loop1: detected capacity change from 0 to 1024 [ 48.525988][ T4144] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.541500][ T4144] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.556640][ T4142] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 48.564992][ T4142] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 48.626539][ T4140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.651939][ T4144] EXT4-fs (loop3): 1 truncate cleaned up [ 48.658185][ T4144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.691503][ T4151] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.136: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 48.763851][ T4152] loop2: detected capacity change from 0 to 1024 [ 48.774725][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.787547][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.817562][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.854118][ T4158] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.133: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 49.224274][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.304116][ T4176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.140'. [ 50.323696][ T4176] netlink: 'syz.3.140': attribute type 10 has an invalid length. [ 50.702163][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.734836][ T4181] loop3: detected capacity change from 0 to 512 [ 50.743553][ T4182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 50.772997][ T4181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.084639][ T4181] EXT4-fs (loop3): 1 truncate cleaned up [ 51.091155][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.159340][ T4202] team0: entered promiscuous mode [ 51.164520][ T4202] team_slave_0: entered promiscuous mode [ 51.170294][ T4202] team_slave_1: entered promiscuous mode [ 51.194866][ T4200] loop4: detected capacity change from 0 to 1024 [ 51.212466][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.233743][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.265114][ T4202] team0 (unregistering): left promiscuous mode [ 51.271544][ T4202] team_slave_0: left promiscuous mode [ 51.277155][ T4202] team_slave_1: left promiscuous mode [ 51.284372][ T4207] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.155: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 51.309562][ T4206] loop1: detected capacity change from 0 to 4096 [ 51.316644][ T4202] team0 (unregistering): Port device team_slave_0 removed [ 51.328398][ T4206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.346422][ T4202] team0 (unregistering): Port device team_slave_1 removed [ 51.390530][ T4212] loop3: detected capacity change from 0 to 4096 [ 51.401655][ T4212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.582998][ T4206] syz.1.158 (4206) used greatest stack depth: 10136 bytes left [ 51.599479][ T4220] loop0: detected capacity change from 0 to 4096 [ 51.608684][ T4220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.641490][ T4222] loop2: detected capacity change from 0 to 1024 [ 51.723449][ T4222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.789728][ T4224] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.160: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 51.826321][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.838823][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.861185][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.924931][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.993143][ T4228] loop0: detected capacity change from 0 to 512 [ 52.042661][ T4230] loop4: detected capacity change from 0 to 512 [ 52.054719][ T4228] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.094971][ T4230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.127011][ T4228] EXT4-fs (loop0): 1 truncate cleaned up [ 52.159378][ T4228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.177220][ T4230] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.217699][ T4228] netlink: 'syz.0.164': attribute type 13 has an invalid length. [ 52.287013][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.387412][ T4240] loop4: detected capacity change from 0 to 512 [ 52.444459][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.451711][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.779210][ T4240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.019167][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.049794][ T4240] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.072359][ T4246] loop1: detected capacity change from 0 to 1024 [ 53.103089][ T4246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.130869][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 53.130887][ T29] audit: type=1326 audit(1737627210.268:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 53.160229][ T29] audit: type=1326 audit(1737627210.268:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 53.183145][ T29] audit: type=1326 audit(1737627210.268:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 53.216876][ T4248] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.169: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.288889][ T29] audit: type=1400 audit(1737627210.418:2314): avc: denied { prog_load } for pid=4249 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.309792][ T29] audit: type=1400 audit(1737627210.428:2315): avc: denied { bpf } for pid=4249 comm="syz.3.182" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.330901][ T29] audit: type=1400 audit(1737627210.428:2316): avc: denied { read } for pid=4249 comm="syz.3.182" dev="nsfs" ino=4026532734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.354697][ T29] audit: type=1400 audit(1737627210.428:2317): avc: denied { open } for pid=4249 comm="syz.3.182" path="net:[4026532734]" dev="nsfs" ino=4026532734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.378976][ T29] audit: type=1400 audit(1737627210.428:2318): avc: denied { create } for pid=4249 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.400203][ T29] audit: type=1400 audit(1737627210.438:2319): avc: denied { write } for pid=4249 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.421461][ T29] audit: type=1400 audit(1737627210.438:2320): avc: denied { read } for pid=4249 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.455549][ T4228] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.464721][ T4228] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.473769][ T4228] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.482845][ T4228] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.512613][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.588059][ T4252] loop2: detected capacity change from 0 to 4096 [ 53.599398][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.603159][ T4252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.670844][ T4259] loop4: detected capacity change from 0 to 128 [ 53.677783][ T4259] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 53.997022][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.243572][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.485133][ T4297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 54.501437][ T4274] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 54.509384][ T4274] FAT-fs (loop4): Filesystem has been set read-only [ 54.555668][ T4298] loop0: detected capacity change from 0 to 1024 [ 54.647911][ T4298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.676812][ T4274] syz.4.172: attempt to access beyond end of device [ 54.676812][ T4274] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 54.714868][ T4304] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.184: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 54.859028][ T4274] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 54.867135][ T4274] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 55.045690][ T4274] syz.4.172: attempt to access beyond end of device [ 55.045690][ T4274] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.131875][ T4315] loop1: detected capacity change from 0 to 512 [ 55.201132][ T4315] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.259500][ T4315] EXT4-fs (loop1): 1 truncate cleaned up [ 55.283917][ T4315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.384853][ T4274] syz.4.172: attempt to access beyond end of device [ 55.384853][ T4274] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.434629][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.788156][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.009434][ T4339] loop2: detected capacity change from 0 to 512 [ 56.028888][ T4339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.047244][ T4339] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.076688][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.401408][ T4357] loop2: detected capacity change from 0 to 512 [ 56.433277][ T4357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.509476][ T4357] EXT4-fs (loop2): 1 truncate cleaned up [ 56.516239][ T4357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.611737][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.006089][ T4388] loop2: detected capacity change from 0 to 1024 [ 57.020212][ T4388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.120614][ T4391] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.214: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 57.439245][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.446679][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.461445][ T4406] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 57.565539][ T4415] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 57.603704][ T4419] 9pnet_fd: Insufficient options for proto=fd [ 57.674640][ T4426] loop3: detected capacity change from 0 to 512 [ 57.682343][ T4427] loop0: detected capacity change from 0 to 512 [ 57.731127][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.740488][ T4426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.741063][ T4427] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.771449][ T4426] EXT4-fs (loop3): 1 truncate cleaned up [ 57.778652][ T4426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.794253][ T4426] netlink: 'syz.3.229': attribute type 13 has an invalid length. [ 57.840262][ T4427] EXT4-fs (loop0): 1 truncate cleaned up [ 57.846421][ T4427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.898245][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.918977][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.934426][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.971507][ T4426] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.981164][ T4426] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.990305][ T4426] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.999687][ T4426] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.045645][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.144701][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 58.144716][ T29] audit: type=1326 audit(1737627215.278:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 58.174617][ T29] audit: type=1326 audit(1737627215.278:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 58.201947][ T4445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.237'. [ 58.202338][ T29] audit: type=1326 audit(1737627215.308:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 58.234546][ T29] audit: type=1326 audit(1737627215.308:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 58.238825][ T4445] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 58.257870][ T29] audit: type=1326 audit(1737627215.308:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 58.288948][ T29] audit: type=1326 audit(1737627215.308:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 58.312493][ T29] audit: type=1326 audit(1737627215.308:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 58.335912][ T29] audit: type=1326 audit(1737627215.308:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 58.346636][ T4447] loop2: detected capacity change from 0 to 512 [ 58.359761][ T29] audit: type=1326 audit(1737627215.308:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 58.389409][ T29] audit: type=1326 audit(1737627215.308:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 58.469453][ T4447] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.479446][ T4447] EXT4-fs warning (device loop2): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 58.520054][ T4456] loop3: detected capacity change from 0 to 4096 [ 58.551519][ T4447] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 58.568977][ T4458] loop0: detected capacity change from 0 to 512 [ 58.579859][ T4456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.598263][ T4447] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.238: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.627639][ T4447] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.238: couldn't read orphan inode 13 (err -117) [ 58.640576][ T4458] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.648407][ T4458] EXT4-fs warning (device loop0): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 58.664582][ T4447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.669345][ T4462] loop1: detected capacity change from 0 to 4096 [ 58.677420][ T4458] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 58.690894][ T4458] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.243: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.712741][ T4447] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 58.738305][ T4458] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.243: couldn't read orphan inode 13 (err -117) [ 58.753588][ T4462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.757354][ T4447] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 58.860017][ T4458] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 58.870578][ T4458] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 58.902604][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.909916][ T4465] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.941930][ T4465] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 59.089359][ T4484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 59.105001][ T4482] loop0: detected capacity change from 0 to 4096 [ 59.382545][ T4506] loop2: detected capacity change from 0 to 4096 [ 59.412439][ T4511] loop1: detected capacity change from 0 to 1024 [ 59.434695][ T4510] loop4: detected capacity change from 0 to 512 [ 59.528507][ T4510] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.539097][ T4510] EXT4-fs warning (device loop4): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 59.554932][ T4510] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 59.562016][ T4510] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.259: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 59.588467][ T4514] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.257: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 59.614437][ T4510] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.259: couldn't read orphan inode 13 (err -117) [ 59.654169][ T4510] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 59.677805][ T4510] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 60.217042][ T4526] loop3: detected capacity change from 0 to 512 [ 60.227505][ T4526] EXT4-fs: Ignoring removed i_version option [ 60.242973][ T4526] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.479511][ T4536] loop2: detected capacity change from 0 to 4096 [ 60.750719][ T4555] loop0: detected capacity change from 0 to 512 [ 60.821748][ T4555] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.863402][ T4555] EXT4-fs warning (device loop0): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 60.890875][ T4555] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 60.899185][ T4555] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.274: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 60.931044][ T4555] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.274: couldn't read orphan inode 13 (err -117) [ 60.980411][ T4555] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 61.002581][ T4555] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 61.166764][ T4579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.283'. [ 61.171142][ T4577] loop4: detected capacity change from 0 to 4096 [ 61.414955][ T4601] loop1: detected capacity change from 0 to 512 [ 61.423763][ T4603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.290'. [ 61.437388][ T4603] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 61.456254][ T4601] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.465981][ T4601] EXT4-fs warning (device loop1): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 61.499731][ T4606] loop0: detected capacity change from 0 to 4096 [ 61.509767][ T4601] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 61.561653][ T4601] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.289: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 61.609167][ T4601] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.289: couldn't read orphan inode 13 (err -117) [ 61.748855][ T4618] loop4: detected capacity change from 0 to 512 [ 61.758354][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.765600][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.806078][ T4618] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.823062][ T4618] EXT4-fs (loop4): 1 truncate cleaned up [ 61.841647][ T4601] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 61.859400][ T4618] netlink: 'syz.4.297': attribute type 13 has an invalid length. [ 62.007790][ T4618] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.015061][ T4618] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.057390][ T4629] 9pnet_fd: Insufficient options for proto=fd [ 62.122442][ T4618] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.131855][ T4618] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.140998][ T4618] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.149959][ T4618] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.231475][ T4641] loop0: detected capacity change from 0 to 1024 [ 62.315445][ T4643] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.303: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 62.732807][ T4649] loop2: detected capacity change from 0 to 512 [ 62.759513][ T4649] EXT4-fs: Ignoring removed i_version option [ 62.803283][ T4649] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.151312][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 63.151326][ T29] audit: type=1326 audit(1737627220.308:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.237679][ T29] audit: type=1326 audit(1737627220.338:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.261208][ T29] audit: type=1326 audit(1737627220.338:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.284567][ T29] audit: type=1326 audit(1737627220.338:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.307731][ T29] audit: type=1326 audit(1737627220.338:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.331270][ T29] audit: type=1326 audit(1737627220.338:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.354766][ T29] audit: type=1326 audit(1737627220.338:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.378151][ T29] audit: type=1326 audit(1737627220.338:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.401502][ T29] audit: type=1326 audit(1737627220.338:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.424876][ T29] audit: type=1326 audit(1737627220.338:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe006e25d29 code=0x7ffc0000 [ 63.535815][ T4672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.314'. [ 63.668502][ T4684] loop2: detected capacity change from 0 to 512 [ 63.695538][ T4684] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.703346][ T4684] EXT4-fs warning (device loop2): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 63.718811][ T4684] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 63.725912][ T4684] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.319: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 63.748677][ T4684] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.319: couldn't read orphan inode 13 (err -117) [ 63.759074][ T4691] loop1: detected capacity change from 0 to 512 [ 63.794537][ T4684] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 63.838777][ T4691] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.989429][ T4708] loop1: detected capacity change from 0 to 4096 [ 64.151924][ T4712] loop4: detected capacity change from 0 to 1024 [ 64.187745][ T4717] loop2: detected capacity change from 0 to 512 [ 64.302804][ T4726] loop0: detected capacity change from 0 to 512 [ 64.310624][ T4726] EXT4-fs: Ignoring removed i_version option [ 64.362337][ T4717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.394354][ T4726] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.417790][ T4717] EXT4-fs (loop2): 1 truncate cleaned up [ 64.444321][ T4732] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.327: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 64.470623][ T4717] netlink: 'syz.2.329': attribute type 13 has an invalid length. [ 64.525862][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.536198][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.593089][ T4717] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.602186][ T4717] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.611245][ T4717] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.620130][ T4717] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.105677][ T4741] loop2: detected capacity change from 0 to 512 [ 65.155115][ T4741] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.287200][ T4750] loop2: detected capacity change from 0 to 512 [ 65.315821][ T4750] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.341848][ T4750] EXT4-fs warning (device loop2): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 65.387108][ T4750] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 65.410267][ T4750] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.341: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.474591][ T4750] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.341: couldn't read orphan inode 13 (err -117) [ 65.493505][ T4758] loop3: detected capacity change from 0 to 512 [ 65.513946][ T4758] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.540625][ T4758] EXT4-fs warning (device loop3): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 65.564231][ T4761] netlink: 132 bytes leftover after parsing attributes in process `syz.4.345'. [ 65.573775][ T4758] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 65.581794][ T4758] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.344: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.600290][ T4761] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 65.611107][ T4750] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.616564][ T4758] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.344: couldn't read orphan inode 13 (err -117) [ 65.645408][ T4761] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.661161][ T4765] loop1: detected capacity change from 0 to 512 [ 65.667693][ T4765] EXT4-fs: Ignoring removed i_version option [ 65.693544][ T4767] loop2: detected capacity change from 0 to 512 [ 65.703179][ T4765] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.711127][ T4767] EXT4-fs: Ignoring removed i_version option [ 65.729188][ T4765] 9pnet_fd: Insufficient options for proto=fd [ 65.729635][ T4771] loop4: detected capacity change from 0 to 4096 [ 65.745299][ T4758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 65.765763][ T4767] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.826075][ T4778] loop3: detected capacity change from 0 to 512 [ 65.833046][ T4778] EXT4-fs: Ignoring removed i_version option [ 65.843877][ T4778] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.878882][ T4784] loop1: detected capacity change from 0 to 4096 [ 65.915448][ T4786] 9pnet_fd: Insufficient options for proto=fd [ 65.976125][ T4788] loop0: detected capacity change from 0 to 4096 [ 66.092323][ T4791] 9pnet_fd: Insufficient options for proto=fd [ 66.127493][ T4794] loop4: detected capacity change from 0 to 512 [ 66.136390][ T4794] EXT4-fs: Ignoring removed i_version option [ 66.159671][ T4799] loop1: detected capacity change from 0 to 512 [ 66.172039][ T4794] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.193821][ T4799] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.201434][ T4799] EXT4-fs warning (device loop1): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 66.221362][ T4799] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 66.228196][ T4799] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.357: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 66.248239][ T4799] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.357: couldn't read orphan inode 13 (err -117) [ 66.278222][ T4807] loop0: detected capacity change from 0 to 512 [ 66.287469][ T4807] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.306160][ T4807] EXT4-fs warning (device loop0): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 66.321544][ T4807] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 66.329664][ T4807] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.360: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 66.348623][ T4807] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.360: couldn't read orphan inode 13 (err -117) [ 66.363218][ T4807] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 66.364441][ T4810] loop1: detected capacity change from 0 to 512 [ 66.373554][ T4807] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 66.379603][ T4810] EXT4-fs: Ignoring removed i_version option [ 66.402638][ T4810] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.422076][ T4810] 9pnet_fd: Insufficient options for proto=fd [ 66.950429][ T4825] loop2: detected capacity change from 0 to 512 [ 67.030947][ T4825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.212303][ T4825] EXT4-fs (loop2): 1 truncate cleaned up [ 67.532135][ T4834] loop0: detected capacity change from 0 to 512 [ 67.568820][ T4834] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.629915][ T4834] EXT4-fs warning (device loop0): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 67.690027][ T4834] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 67.699049][ T4842] loop2: detected capacity change from 0 to 4096 [ 67.720662][ T4834] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.371: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.870164][ T4834] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.371: couldn't read orphan inode 13 (err -117) [ 67.964238][ T4834] EXT4-fs mount: 72 callbacks suppressed [ 67.964255][ T4834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.075405][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.185462][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.233576][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 68.233594][ T29] audit: type=1400 audit(1737627225.388:3915): avc: denied { create } for pid=4855 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.233880][ T4856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.379'. [ 68.270143][ T29] audit: type=1400 audit(1737627225.388:3916): avc: denied { write } for pid=4855 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.309101][ T29] audit: type=1400 audit(1737627225.448:3917): avc: denied { execute } for pid=4857 comm="syz.1.380" name="file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.351617][ T4856] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 68.391444][ T29] audit: type=1400 audit(1737627225.528:3918): avc: denied { execute_no_trans } for pid=4857 comm="syz.1.380" path="/78/file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.430533][ T4865] loop3: detected capacity change from 0 to 512 [ 68.445432][ T4865] EXT4-fs: Ignoring removed i_version option [ 68.491842][ T4865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.505084][ T4865] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.537019][ T4865] 9pnet_fd: Insufficient options for proto=fd [ 68.592805][ T29] audit: type=1326 audit(1737627225.748:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b737f5d29 code=0x7ffc0000 [ 68.646323][ T29] audit: type=1326 audit(1737627225.748:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b737f5d29 code=0x7ffc0000 [ 68.669784][ T29] audit: type=1326 audit(1737627225.748:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f3b737f5d29 code=0x7ffc0000 [ 68.693306][ T29] audit: type=1326 audit(1737627225.748:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b737f5d29 code=0x7ffc0000 [ 68.716702][ T29] audit: type=1326 audit(1737627225.748:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b737f5d29 code=0x7ffc0000 [ 68.740475][ T29] audit: type=1326 audit(1737627225.778:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b737f5d29 code=0x7ffc0000 [ 68.766535][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.775636][ T4884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'. [ 68.809604][ T4887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.391'. [ 68.819110][ T4887] netlink: 'syz.4.391': attribute type 10 has an invalid length. [ 68.838237][ T4892] loop1: detected capacity change from 0 to 512 [ 68.859480][ T4892] EXT4-fs: Ignoring removed i_version option [ 68.912759][ T4892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.933360][ T4892] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.165819][ T4912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.398'. [ 69.265550][ T4917] loop3: detected capacity change from 0 to 4096 [ 69.295587][ T4917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.426303][ T4928] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 69.579003][ T4935] netlink: 132 bytes leftover after parsing attributes in process `syz.4.405'. [ 69.592657][ T4935] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 69.659929][ T4943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.409'. [ 69.682361][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.768070][ T4950] loop2: detected capacity change from 0 to 512 [ 69.781446][ T4950] EXT4-fs: Ignoring removed i_version option [ 69.804057][ T4950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.817659][ T4950] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.832992][ T4950] 9pnet_fd: Insufficient options for proto=fd [ 69.882707][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.891768][ T4960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.415'. [ 69.931350][ T4963] loop2: detected capacity change from 0 to 4096 [ 69.949993][ T4963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.057615][ T4969] loop3: detected capacity change from 0 to 512 [ 70.073593][ T4969] EXT4-fs: Ignoring removed i_version option [ 70.102937][ T4969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.117200][ T4969] ext4 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.182637][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.193258][ T4975] 9pnet_fd: Insufficient options for proto=fd [ 70.220194][ T4977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.418'. [ 70.234972][ T4977] netlink: 'syz.2.418': attribute type 10 has an invalid length. [ 70.273019][ T4981] loop4: detected capacity change from 0 to 512 [ 70.295294][ T4981] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.302268][ T4981] EXT4-fs warning (device loop4): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 70.317839][ T4981] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 70.318338][ T4986] loop2: detected capacity change from 0 to 4096 [ 70.325248][ T4981] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.420: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 70.350175][ T4981] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.420: couldn't read orphan inode 13 (err -117) [ 70.358171][ T4986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.363977][ T4981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.404385][ T4981] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 70.432290][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.507581][ T4995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'. [ 70.527595][ T4997] loop4: detected capacity change from 0 to 512 [ 70.545728][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.580940][ T4997] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.593591][ T4997] EXT4-fs warning (device loop4): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 70.609749][ T4997] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 70.617149][ T4997] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.425: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 70.638169][ T4997] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.425: couldn't read orphan inode 13 (err -117) [ 70.667857][ T4997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.711102][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.799989][ T5015] loop4: detected capacity change from 0 to 1024 [ 70.818958][ T5016] loop0: detected capacity change from 0 to 512 [ 70.826923][ T5016] EXT4-fs: Ignoring removed i_version option [ 70.857437][ T5017] loop2: detected capacity change from 0 to 512 [ 70.887503][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.690605][ T5015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.705693][ T5016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.719115][ T5017] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.734470][ T5017] EXT4-fs warning (device loop2): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 71.755599][ T5025] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.429: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 71.774310][ T5016] ext4 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.836803][ T5017] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 71.860439][ T5017] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.431: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 71.909100][ T5017] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.431: couldn't read orphan inode 13 (err -117) [ 71.944940][ T5017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.963029][ T5032] loop3: detected capacity change from 0 to 512 [ 71.969823][ T5032] EXT4-fs: Ignoring removed i_version option [ 71.975960][ T5032] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.996934][ T5017] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 72.014863][ T5032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.033716][ T5032] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.054045][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.060891][ T5032] EXT4-fs (loop3): 1 truncate cleaned up [ 72.069348][ T5032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.069804][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.114726][ T5035] loop2: detected capacity change from 0 to 512 [ 72.147854][ T5037] loop4: detected capacity change from 0 to 4096 [ 72.196677][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.221502][ T5035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.242116][ T5041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.439'. [ 72.244295][ T5035] EXT4-fs (loop2): 1 truncate cleaned up [ 72.264380][ T5037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.271131][ T5035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.344088][ T5045] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 72.372131][ T5035] netlink: 'syz.2.437': attribute type 13 has an invalid length. [ 72.514342][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.794983][ T5055] loop2: detected capacity change from 0 to 4096 [ 72.832063][ T5055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.861682][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.897675][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.935053][ T5063] loop4: detected capacity change from 0 to 512 [ 72.943462][ T5058] loop0: detected capacity change from 0 to 4096 [ 72.959327][ T5063] EXT4-fs: Ignoring removed i_version option [ 72.972792][ T5058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.989953][ T5065] loop3: detected capacity change from 0 to 512 [ 73.002057][ T5065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.007937][ T5063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.025050][ T5063] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.052943][ T5065] EXT4-fs (loop3): 1 truncate cleaned up [ 73.059228][ T5065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.087947][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.162206][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.198404][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.234472][ T5077] loop4: detected capacity change from 0 to 512 [ 73.241738][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 73.241755][ T29] audit: type=1326 audit(1737627230.398:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe006e2498a code=0x7ffc0000 [ 73.253170][ T5075] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 73.271148][ T29] audit: type=1326 audit(1737627230.398:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe006e2498a code=0x7ffc0000 [ 73.298718][ T5077] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.310932][ T29] audit: type=1326 audit(1737627230.398:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe006e24597 code=0x7ffc0000 [ 73.318672][ T5077] EXT4-fs warning (device loop4): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.342293][ T29] audit: type=1326 audit(1737627230.398:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe006e274ca code=0x7ffc0000 [ 73.385709][ T29] audit: type=1326 audit(1737627230.448:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 73.401742][ T5077] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 73.411314][ T29] audit: type=1326 audit(1737627230.448:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 73.418610][ T5077] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.449: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 73.442548][ T29] audit: type=1326 audit(1737627230.528:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 73.486669][ T29] audit: type=1326 audit(1737627230.528:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 73.512836][ T29] audit: type=1326 audit(1737627230.528:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 73.536415][ T29] audit: type=1326 audit(1737627230.528:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 73.582757][ T5077] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.449: couldn't read orphan inode 13 (err -117) [ 73.598252][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.610478][ T5077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.683602][ T5089] loop0: detected capacity change from 0 to 512 [ 73.694611][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.819773][ T5089] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.854408][ T5089] EXT4-fs warning (device loop0): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.896502][ T5092] loop4: detected capacity change from 0 to 4096 [ 73.920105][ T5087] Set syz1 is full, maxelem 65536 reached [ 73.947489][ T5092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.987947][ T5089] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 73.996150][ T5089] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.451: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 74.016064][ T5089] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.451: couldn't read orphan inode 13 (err -117) [ 74.029250][ T5089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.096035][ T5098] 9pnet_fd: Insufficient options for proto=fd [ 74.122960][ T5101] 9pnet_fd: Insufficient options for proto=fd [ 74.152704][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.240508][ T5105] loop0: detected capacity change from 0 to 4096 [ 74.260308][ T5105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.312324][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.382484][ T5114] loop4: detected capacity change from 0 to 512 [ 74.401082][ T5114] EXT4-fs: Ignoring removed i_version option [ 74.407630][ T5114] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.419670][ T5114] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.435419][ T5114] EXT4-fs (loop4): 1 truncate cleaned up [ 74.445483][ T5114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.484439][ T5121] loop2: detected capacity change from 0 to 4096 [ 74.525920][ T5121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.549705][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.618766][ T5128] loop0: detected capacity change from 0 to 512 [ 74.638973][ T5128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.682531][ T5128] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.706543][ T5131] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 74.810110][ T5133] 9pnet_fd: Insufficient options for proto=fd [ 74.834742][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.912064][ T5135] loop3: detected capacity change from 0 to 512 [ 74.921740][ T5135] EXT4-fs: Ignoring removed i_version option [ 74.929599][ T5135] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.965283][ T5135] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.003165][ T5135] EXT4-fs (loop3): 1 truncate cleaned up [ 75.009790][ T5135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.202761][ T3676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.638538][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.812684][ T5153] loop0: detected capacity change from 0 to 512 [ 75.819655][ T5151] loop4: detected capacity change from 0 to 512 [ 75.821508][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.827817][ T5153] EXT4-fs: Ignoring removed i_version option [ 75.842270][ T5153] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.849519][ T5151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.854704][ T5153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.898417][ T5151] EXT4-fs (loop4): 1 truncate cleaned up [ 75.909161][ T5153] EXT4-fs (loop0): 1 truncate cleaned up [ 75.921025][ T5158] loop3: detected capacity change from 0 to 4096 [ 75.923224][ T5151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.936134][ T5153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.966836][ T5158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.022098][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.034578][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.273184][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.323593][ T5175] loop0: detected capacity change from 0 to 512 [ 76.364208][ T5175] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.389464][ T5175] EXT4-fs warning (device loop0): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 76.434224][ T5180] loop3: detected capacity change from 0 to 512 [ 76.457247][ T5180] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.476804][ T5175] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 76.484978][ T5175] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.486: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.504524][ T5180] EXT4-fs (loop3): 1 truncate cleaned up [ 76.511218][ T5175] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.486: couldn't read orphan inode 13 (err -117) [ 76.521086][ T5180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.523685][ T5175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.570262][ T5180] netlink: 'syz.3.484': attribute type 13 has an invalid length. [ 76.630896][ T5183] loop0: detected capacity change from 0 to 512 [ 76.646655][ T5185] loop3: detected capacity change from 0 to 512 [ 76.669344][ T5183] EXT4-fs: Ignoring removed i_version option [ 76.676830][ T5185] EXT4-fs: Ignoring removed i_version option [ 76.712714][ T5185] ext4 filesystem being mounted at /105/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.726612][ T5183] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.978821][ T5198] loop3: detected capacity change from 0 to 1024 [ 77.070601][ T5200] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.491: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 77.670914][ T5204] loop4: detected capacity change from 0 to 4096 [ 77.734131][ T5206] loop2: detected capacity change from 0 to 4096 [ 78.148940][ T5220] loop2: detected capacity change from 0 to 4096 [ 78.268934][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 78.268954][ T29] audit: type=1400 audit(1737627235.328:4403): avc: denied { execmem } for pid=5224 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.314069][ T29] audit: type=1400 audit(1737627235.468:4404): avc: denied { connect } for pid=5216 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.334360][ T29] audit: type=1400 audit(1737627235.468:4405): avc: denied { bind } for pid=5216 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.463914][ T5228] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.498'. [ 78.476187][ T29] audit: type=1400 audit(1737627235.508:4406): avc: denied { open } for pid=5216 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.495443][ T29] audit: type=1400 audit(1737627235.508:4407): avc: denied { kernel } for pid=5216 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.517364][ T29] audit: type=1400 audit(1737627235.558:4408): avc: denied { write } for pid=5216 comm="syz.0.498" name="snmp6" dev="proc" ino=4026532955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 78.640862][ T29] audit: type=1326 audit(1737627235.778:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 78.662399][ T5234] loop3: detected capacity change from 0 to 4096 [ 78.665884][ T29] audit: type=1326 audit(1737627235.778:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 78.695650][ T29] audit: type=1326 audit(1737627235.778:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 78.719763][ T29] audit: type=1326 audit(1737627235.778:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 78.785175][ T5217] Set syz1 is full, maxelem 65536 reached [ 78.959838][ T5239] loop2: detected capacity change from 0 to 512 [ 78.971795][ T5239] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.979335][ T5239] EXT4-fs warning (device loop2): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 79.039092][ T5239] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 79.061601][ T5239] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.502: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 79.083058][ T5239] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.502: couldn't read orphan inode 13 (err -117) [ 79.166465][ T5250] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.507'. [ 79.219659][ T5252] loop3: detected capacity change from 0 to 4096 [ 79.347501][ T5257] loop0: detected capacity change from 0 to 512 [ 79.368967][ T5265] loop4: detected capacity change from 0 to 512 [ 79.370996][ T5257] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.376318][ T5265] EXT4-fs: Ignoring removed i_version option [ 79.440029][ T5257] EXT4-fs warning (device loop0): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 79.471977][ T5267] loop2: detected capacity change from 0 to 1024 [ 79.513365][ T5257] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 79.520360][ T5257] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.510: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 79.554337][ T5265] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.602174][ T5272] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.511: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 79.695064][ T5257] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.510: couldn't read orphan inode 13 (err -117) [ 79.906797][ T5275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.514'. [ 80.150456][ T5281] loop0: detected capacity change from 0 to 512 [ 80.160839][ T5281] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.459205][ T5286] loop0: detected capacity change from 0 to 4096 [ 80.586779][ T5296] loop4: detected capacity change from 0 to 512 [ 80.593582][ T5296] EXT4-fs: Ignoring removed i_version option [ 80.642991][ T5296] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.666556][ T5294] 9pnet_fd: Insufficient options for proto=fd [ 80.862180][ T5302] loop3: detected capacity change from 0 to 512 [ 80.872283][ T5302] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.886331][ T5302] EXT4-fs warning (device loop3): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 80.965310][ T5302] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 80.981895][ T5302] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.524: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 81.006789][ T5302] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.524: couldn't read orphan inode 13 (err -117) [ 81.015083][ T5307] 9pnet_fd: Insufficient options for proto=fd [ 81.041922][ T5302] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 81.096589][ T5315] loop2: detected capacity change from 0 to 512 [ 81.131457][ T5315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.142737][ T5315] EXT4-fs (loop2): 1 truncate cleaned up [ 81.165616][ T5315] netlink: 'syz.2.528': attribute type 13 has an invalid length. [ 81.250920][ T5327] loop2: detected capacity change from 0 to 4096 [ 81.319338][ T5330] loop0: detected capacity change from 0 to 1024 [ 81.385817][ T5333] loop4: detected capacity change from 0 to 512 [ 81.473989][ T5333] EXT4-fs: Ignoring removed i_version option [ 81.498047][ T5335] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.527: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 81.553809][ T5338] loop3: detected capacity change from 0 to 512 [ 81.569490][ T5333] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.594441][ T5338] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.689035][ T5338] EXT4-fs (loop3): 1 truncate cleaned up [ 81.979824][ T5344] loop4: detected capacity change from 0 to 4096 [ 82.093458][ T5350] loop3: detected capacity change from 0 to 512 [ 82.137654][ T5350] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.164719][ T5350] EXT4-fs warning (device loop3): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 82.199199][ T5355] loop2: detected capacity change from 0 to 512 [ 82.216559][ T5350] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 82.232175][ T5355] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.241301][ T5350] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.540: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 82.245323][ T5355] EXT4-fs warning (device loop2): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 82.275317][ T5350] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.540: couldn't read orphan inode 13 (err -117) [ 82.288290][ T5355] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 82.295115][ T5355] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 82.313700][ T5355] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.541: couldn't read orphan inode 13 (err -117) [ 82.332541][ T5355] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.362664][ T5350] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 82.373467][ T5350] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 82.386525][ T5350] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 82.790087][ T5362] loop2: detected capacity change from 0 to 512 [ 82.798030][ T5359] loop3: detected capacity change from 0 to 512 [ 82.807089][ T5359] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.820095][ T5362] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.844684][ T5362] EXT4-fs (loop2): 1 truncate cleaned up [ 82.866165][ T5362] netlink: 'syz.2.542': attribute type 13 has an invalid length. [ 83.050081][ T5380] loop0: detected capacity change from 0 to 4096 [ 83.188398][ T5367] Set syz1 is full, maxelem 65536 reached [ 83.370578][ T5375] Set syz1 is full, maxelem 65536 reached [ 83.415577][ T5386] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.551'. [ 83.456865][ T5390] loop0: detected capacity change from 0 to 4096 [ 83.505192][ T5392] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.552'. [ 83.516071][ T5388] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.552'. [ 83.611038][ T5396] loop3: detected capacity change from 0 to 512 [ 83.621697][ T5396] EXT4-fs: Ignoring removed i_version option [ 83.660132][ T5396] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.807585][ T5413] loop4: detected capacity change from 0 to 4096 [ 83.867383][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 83.867476][ T29] audit: type=1400 audit(1737627241.018:4670): avc: denied { write } for pid=5415 comm="syz.3.562" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.910068][ T29] audit: type=1400 audit(1737627241.048:4671): avc: denied { open } for pid=5415 comm="syz.3.562" path="/127/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.933088][ T29] audit: type=1400 audit(1737627241.088:4672): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.980826][ T29] audit: type=1326 audit(1737627241.128:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 84.020093][ T29] audit: type=1326 audit(1737627241.138:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 84.043432][ T29] audit: type=1326 audit(1737627241.138:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 84.066867][ T29] audit: type=1326 audit(1737627241.138:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 84.090269][ T29] audit: type=1326 audit(1737627241.138:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 84.113655][ T29] audit: type=1326 audit(1737627241.138:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 84.136992][ T29] audit: type=1326 audit(1737627241.138:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 84.168655][ T5427] loop3: detected capacity change from 0 to 4096 [ 84.171970][ T5430] loop0: detected capacity change from 0 to 512 [ 84.293437][ T5430] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.300313][ T5430] EXT4-fs warning (device loop0): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 84.321254][ T5430] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 84.331972][ T5430] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.567: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 84.429456][ T5430] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.567: couldn't read orphan inode 13 (err -117) [ 84.477143][ T5448] loop2: detected capacity change from 0 to 512 [ 84.487698][ T5430] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.503286][ T5423] chnl_net:caif_netlink_parms(): no params data found [ 84.524964][ T5448] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.535555][ T5448] EXT4-fs warning (device loop2): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 84.551566][ T5448] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 84.559623][ T5448] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.570: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 84.578474][ T5448] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.570: couldn't read orphan inode 13 (err -117) [ 84.604945][ T5455] loop0: detected capacity change from 0 to 512 [ 84.621016][ T5455] EXT4-fs: Ignoring removed i_version option [ 84.655358][ T5448] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 84.673503][ T5455] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.679265][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.691305][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.699340][ T5423] bridge_slave_0: entered allmulticast mode [ 84.718422][ T5423] bridge_slave_0: entered promiscuous mode [ 84.735647][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.742889][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.755222][ T5423] bridge_slave_1: entered allmulticast mode [ 84.761949][ T5472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 84.762088][ T5423] bridge_slave_1: entered promiscuous mode [ 84.788910][ T5473] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.574'. [ 84.812870][ T5460] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.574'. [ 84.841558][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.867162][ T5479] loop3: detected capacity change from 0 to 512 [ 84.869473][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.897889][ T5479] EXT4-fs: Ignoring removed i_version option [ 84.935067][ T5423] team0: Port device team_slave_0 added [ 84.937542][ T5487] loop4: detected capacity change from 0 to 512 [ 84.953980][ T5487] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.955518][ T5423] team0: Port device team_slave_1 added [ 84.988634][ T5479] ext4 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.013767][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.020852][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.021288][ T5492] loop2: detected capacity change from 0 to 4096 [ 85.046832][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.068508][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.075550][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.102526][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.149864][ T5423] hsr_slave_0: entered promiscuous mode [ 85.171143][ T5423] hsr_slave_1: entered promiscuous mode [ 85.186621][ T5423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.194724][ T5423] Cannot create hsr debugfs directory [ 85.204478][ T5498] loop4: detected capacity change from 0 to 4096 [ 85.285780][ T5423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.294320][ T5423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.313195][ T5423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.322225][ T5423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.337373][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.344486][ T5423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.351860][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.359043][ T5423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.417262][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.430027][ T3393] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.438211][ T3393] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.490848][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.552021][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.559189][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.577717][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.584871][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.595302][ T5523] loop2: detected capacity change from 0 to 512 [ 85.610889][ T5523] EXT4-fs: Ignoring removed i_version option [ 85.643940][ T5523] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.689642][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.709705][ T5534] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.595'. [ 85.736838][ T5525] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.595'. [ 85.747510][ T5541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.598'. [ 85.765854][ T5541] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 85.811904][ T5548] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.597'. [ 85.831676][ T5550] loop3: detected capacity change from 0 to 512 [ 85.838993][ T5550] EXT4-fs: Ignoring removed i_version option [ 85.854661][ T5536] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.597'. [ 85.879134][ T5550] ext4 filesystem being mounted at /132/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.901664][ T5559] loop4: detected capacity change from 0 to 512 [ 85.921733][ T5559] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.941532][ T5423] veth0_vlan: entered promiscuous mode [ 85.945624][ T5565] loop0: detected capacity change from 0 to 512 [ 85.950443][ T5423] veth1_vlan: entered promiscuous mode [ 85.968784][ T5565] EXT4-fs: Ignoring removed i_version option [ 85.976418][ T5423] veth0_macvtap: entered promiscuous mode [ 85.984426][ T5423] veth1_macvtap: entered promiscuous mode [ 85.995597][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.007046][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.016490][ T5565] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.037947][ T5423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.046778][ T5423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.055683][ T5423] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.062434][ T5572] loop4: detected capacity change from 0 to 512 [ 86.064541][ T5423] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.073458][ T5572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.096176][ T5572] EXT4-fs (loop4): 1 truncate cleaned up [ 86.323811][ T5588] loop4: detected capacity change from 0 to 512 [ 86.353894][ T5588] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.361821][ T5588] EXT4-fs warning (device loop4): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 86.381360][ T5588] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 86.429001][ T5588] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.609: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 86.435902][ T5582] Set syz1 is full, maxelem 65536 reached [ 86.459514][ T5588] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.609: couldn't read orphan inode 13 (err -117) [ 86.495321][ T5588] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 86.506258][ T5588] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 86.533110][ T5588] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 86.559589][ T5596] loop2: detected capacity change from 0 to 512 [ 86.581294][ T5596] EXT4-fs: Ignoring removed i_version option [ 86.587497][ T5596] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.622770][ T5596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.637074][ T5600] loop5: detected capacity change from 0 to 512 [ 86.652033][ T5596] EXT4-fs (loop2): 1 truncate cleaned up [ 86.656603][ T5600] EXT4-fs: Ignoring removed i_version option [ 86.690375][ T5607] loop0: detected capacity change from 0 to 512 [ 86.711449][ T5600] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.731919][ T5607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.759426][ T5600] 9pnet_fd: Insufficient options for proto=fd [ 86.772645][ T5613] loop4: detected capacity change from 0 to 512 [ 86.781245][ T5613] EXT4-fs: Ignoring removed i_version option [ 86.795076][ T5607] EXT4-fs (loop0): 1 truncate cleaned up [ 86.819561][ T5613] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.839362][ T5619] loop3: detected capacity change from 0 to 512 [ 86.851650][ T5619] EXT4-fs: Ignoring removed i_version option [ 86.884206][ T5619] ext4 filesystem being mounted at /133/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.940632][ T5628] loop5: detected capacity change from 0 to 4096 [ 87.247936][ T5636] 9pnet_fd: Insufficient options for proto=fd [ 87.378178][ T5640] loop5: detected capacity change from 0 to 4096 [ 87.522119][ T5647] loop2: detected capacity change from 0 to 512 [ 87.529005][ T5647] EXT4-fs: Ignoring removed i_version option [ 87.554620][ T5647] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.626710][ T5652] loop4: detected capacity change from 0 to 512 [ 87.662055][ T5652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.705569][ T5652] EXT4-fs (loop4): 1 truncate cleaned up [ 87.871586][ T5667] loop3: detected capacity change from 0 to 4096 [ 87.880129][ T5665] loop5: detected capacity change from 0 to 4096 [ 88.175292][ T5690] loop3: detected capacity change from 0 to 512 [ 88.183284][ T5692] loop0: detected capacity change from 0 to 512 [ 88.189808][ T5686] loop4: detected capacity change from 0 to 4096 [ 88.190026][ T5692] EXT4-fs: Ignoring removed i_version option [ 88.231717][ T5690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.244125][ T5692] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.257804][ T5692] 9pnet_fd: Insufficient options for proto=fd [ 88.269433][ T5690] EXT4-fs (loop3): 1 truncate cleaned up [ 88.387659][ T5705] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 88.510111][ T5715] loop2: detected capacity change from 0 to 512 [ 88.529711][ T5715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.548977][ T5716] loop4: detected capacity change from 0 to 512 [ 88.559474][ T5715] EXT4-fs (loop2): 1 truncate cleaned up [ 88.569866][ T5718] loop0: detected capacity change from 0 to 4096 [ 88.570205][ T5716] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.597262][ T5715] netlink: 'syz.2.656': attribute type 13 has an invalid length. [ 88.607610][ T5722] __nla_validate_parse: 7 callbacks suppressed [ 88.607627][ T5722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.658'. [ 88.625925][ T5722] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 88.748341][ T5733] loop4: detected capacity change from 0 to 512 [ 88.770199][ T5733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.788995][ T5733] EXT4-fs (loop4): 1 truncate cleaned up [ 88.869151][ T5742] loop2: detected capacity change from 0 to 4096 [ 88.908130][ T5749] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.665'. [ 88.912291][ T5750] loop0: detected capacity change from 0 to 512 [ 88.925548][ T5750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.936877][ T5740] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.665'. [ 88.953171][ T5750] EXT4-fs (loop0): 1 truncate cleaned up [ 88.991416][ T5750] netlink: 'syz.0.670': attribute type 13 has an invalid length. [ 89.053707][ T5756] loop4: detected capacity change from 0 to 512 [ 89.055858][ T5758] loop0: detected capacity change from 0 to 512 [ 89.064705][ T5756] EXT4-fs: Ignoring removed i_version option [ 89.072297][ T5756] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.084467][ T5760] 9pnet_fd: Insufficient options for proto=fd [ 89.088391][ T5758] EXT4-fs: Ignoring removed i_version option [ 89.102424][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 89.102441][ T29] audit: type=1326 audit(1737627246.258:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.131981][ T29] audit: type=1326 audit(1737627246.258:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.155426][ T29] audit: type=1326 audit(1737627246.258:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.179431][ T29] audit: type=1326 audit(1737627246.258:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.202870][ T29] audit: type=1326 audit(1737627246.258:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.202953][ T29] audit: type=1326 audit(1737627246.258:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.202978][ T29] audit: type=1326 audit(1737627246.258:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.203080][ T29] audit: type=1326 audit(1737627246.258:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.203110][ T29] audit: type=1326 audit(1737627246.258:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.203141][ T29] audit: type=1326 audit(1737627246.258:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6970df5d29 code=0x7ffc0000 [ 89.203655][ T5756] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.212228][ T5756] EXT4-fs (loop4): 1 truncate cleaned up [ 89.263583][ T5758] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.266266][ T5773] loop5: detected capacity change from 0 to 512 [ 89.269839][ T5773] EXT4-fs: Ignoring removed i_version option [ 89.353135][ T5773] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.374081][ T5778] 9pnet_fd: Insufficient options for proto=fd [ 89.507024][ T5782] loop2: detected capacity change from 0 to 512 [ 89.514205][ T5782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.529752][ T5782] EXT4-fs (loop2): 1 truncate cleaned up [ 89.593447][ T5784] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 89.676450][ T5786] loop3: detected capacity change from 0 to 512 [ 89.686428][ T5786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.741899][ T5786] EXT4-fs (loop3): 1 truncate cleaned up [ 89.755179][ T5786] netlink: 'syz.3.681': attribute type 13 has an invalid length. [ 89.990105][ T5789] loop2: detected capacity change from 0 to 512 [ 90.019415][ T5789] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.026744][ T5792] loop3: detected capacity change from 0 to 512 [ 90.068748][ T5792] EXT4-fs: Ignoring removed i_version option [ 90.078583][ T5789] EXT4-fs warning (device loop2): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 90.115105][ T5789] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 90.126580][ T5792] ext4 filesystem being mounted at /149/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.127560][ T5789] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.682: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 90.166895][ T5792] 9pnet_fd: Insufficient options for proto=fd [ 90.206429][ T5807] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.685'. [ 90.208737][ T5804] loop4: detected capacity change from 0 to 4096 [ 90.221865][ T5789] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.682: couldn't read orphan inode 13 (err -117) [ 90.234558][ T5800] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.685'. [ 90.281605][ T5812] loop5: detected capacity change from 0 to 512 [ 90.282905][ T5810] loop0: detected capacity change from 0 to 512 [ 90.299078][ T5814] loop3: detected capacity change from 0 to 512 [ 90.319972][ T5789] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 90.336980][ T5810] EXT4-fs: Ignoring removed i_version option [ 90.350379][ T5812] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.358920][ T5812] EXT4-fs warning (device loop5): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 90.375668][ T5812] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 90.381198][ T5814] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.391414][ T5812] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.692: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 90.411732][ T5812] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.692: couldn't read orphan inode 13 (err -117) [ 90.427661][ T5810] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.524898][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.532143][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.609977][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.621778][ T5834] loop0: detected capacity change from 0 to 512 [ 90.628359][ T5834] EXT4-fs: Ignoring removed i_version option [ 90.642653][ T5834] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.679029][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.687309][ T5831] loop4: detected capacity change from 0 to 4096 [ 90.728189][ T5812] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.737186][ T5812] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.746269][ T5812] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.755261][ T5812] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.759288][ T5834] 9pnet_fd: Insufficient options for proto=fd [ 90.764762][ T5841] loop3: detected capacity change from 0 to 512 [ 90.778158][ T5841] EXT4-fs: Ignoring removed i_version option [ 90.810474][ T5841] ext4 filesystem being mounted at /154/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.989113][ T5850] loop4: detected capacity change from 0 to 4096 [ 91.250925][ T5863] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.708'. [ 91.260600][ T5862] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.708'. [ 91.405437][ T5873] loop0: detected capacity change from 0 to 512 [ 91.431511][ T5873] EXT4-fs: Ignoring removed i_version option [ 91.437562][ T5873] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.448095][ T5875] loop4: detected capacity change from 0 to 4096 [ 91.479833][ T5873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.513682][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.716'. [ 91.525901][ T5873] EXT4-fs (loop0): 1 truncate cleaned up [ 91.608700][ T5884] loop5: detected capacity change from 0 to 4096 [ 91.646739][ T5889] 9pnet_fd: Insufficient options for proto=fd [ 91.799663][ T5898] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 92.011241][ T5910] loop5: detected capacity change from 0 to 512 [ 92.030183][ T5910] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.042976][ T5910] EXT4-fs (loop5): 1 truncate cleaned up [ 92.048762][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.731'. [ 92.115819][ T5923] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.730'. [ 92.360447][ T5937] loop4: detected capacity change from 0 to 512 [ 92.370832][ T5937] EXT4-fs: Ignoring removed i_version option [ 92.382638][ T5937] ext4 filesystem being mounted at /174/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.397533][ T5937] 9pnet_fd: Insufficient options for proto=fd [ 92.487818][ T5942] loop5: detected capacity change from 0 to 4096 [ 92.572596][ T5948] loop4: detected capacity change from 0 to 512 [ 92.601688][ T5948] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.640919][ T5948] EXT4-fs (loop4): 1 truncate cleaned up [ 92.785292][ T5961] 9pnet_fd: Insufficient options for proto=fd [ 92.857814][ T5963] loop0: detected capacity change from 0 to 4096 [ 92.883426][ T5965] loop5: detected capacity change from 0 to 4096 [ 93.119806][ T5982] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 93.124859][ T5980] loop3: detected capacity change from 0 to 4096 [ 93.258351][ T5988] loop0: detected capacity change from 0 to 512 [ 93.287603][ T5988] EXT4-fs: Ignoring removed i_version option [ 93.317191][ T5998] loop4: detected capacity change from 0 to 512 [ 93.325714][ T5996] loop5: detected capacity change from 0 to 512 [ 93.337376][ T6002] loop2: detected capacity change from 0 to 512 [ 93.344625][ T5988] ext4 filesystem being mounted at /157/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.350823][ T5996] EXT4-fs: Ignoring removed i_version option [ 93.364661][ T5998] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.372483][ T6002] EXT4-fs: Ignoring removed i_version option [ 93.378557][ T6002] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.386921][ T6002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.392096][ T5996] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.405536][ T5998] EXT4-fs warning (device loop4): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 93.423677][ T5998] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 93.426882][ T6002] EXT4-fs (loop2): 1 truncate cleaned up [ 93.430523][ T5998] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.760: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 93.455425][ T5998] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.760: couldn't read orphan inode 13 (err -117) [ 93.482755][ T5998] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 93.679349][ T6021] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 93.702309][ T6018] loop4: detected capacity change from 0 to 512 [ 93.731239][ T6020] loop3: detected capacity change from 0 to 4096 [ 93.762414][ T6018] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.778555][ T6018] EXT4-fs warning (device loop4): ext4_enable_quotas:7142: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 93.902964][ T6018] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 93.956269][ T6018] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.765: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 94.036013][ T6018] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.765: couldn't read orphan inode 13 (err -117) [ 94.105700][ T6018] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 94.185216][ T6029] loop4: detected capacity change from 0 to 4096 [ 94.195182][ T6030] __nla_validate_parse: 9 callbacks suppressed [ 94.195236][ T6030] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.767'. [ 94.215921][ T6027] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.767'. [ 94.272260][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 94.272277][ T29] audit: type=1326 audit(1737627251.418:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.302800][ T29] audit: type=1326 audit(1737627251.418:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.316402][ T6041] loop0: detected capacity change from 0 to 512 [ 94.326193][ T29] audit: type=1326 audit(1737627251.418:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.356327][ T29] audit: type=1326 audit(1737627251.428:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.371717][ T6038] loop5: detected capacity change from 0 to 4096 [ 94.380077][ T29] audit: type=1326 audit(1737627251.428:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.390899][ T6041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.409907][ T29] audit: type=1326 audit(1737627251.428:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.444455][ T29] audit: type=1326 audit(1737627251.428:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.444490][ T29] audit: type=1326 audit(1737627251.428:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.444565][ T29] audit: type=1326 audit(1737627251.428:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.444591][ T29] audit: type=1326 audit(1737627251.428:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbd0b5d29 code=0x7ffc0000 [ 94.494913][ T6041] EXT4-fs (loop0): 1 truncate cleaned up [ 94.542778][ T6042] loop2: detected capacity change from 0 to 512 [ 94.560577][ T6042] EXT4-fs: Ignoring removed i_version option [ 94.588705][ T6042] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.652713][ T6053] loop3: detected capacity change from 0 to 4096 [ 94.678763][ T6038] ================================================================== [ 94.686925][ T6038] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 94.694262][ T6038] [ 94.696590][ T6038] read-write to 0xffff8881067cc6c8 of 8 bytes by task 6047 on cpu 1: [ 94.704663][ T6038] xas_clear_mark+0x90/0x180 [ 94.709284][ T6038] __folio_start_writeback+0x2f1/0x430 [ 94.714760][ T6038] ext4_bio_write_folio+0x591/0x9d0 [ 94.719993][ T6038] ext4_do_writepages+0x1221/0x2130 [ 94.725224][ T6038] ext4_writepages+0x159/0x2e0 [ 94.730018][ T6038] do_writepages+0x1d8/0x480 [ 94.734635][ T6038] filemap_write_and_wait_range+0x146/0x360 [ 94.740547][ T6038] kiocb_write_and_wait+0x73/0x100 [ 94.745688][ T6038] __iomap_dio_rw+0x50c/0x1110 [ 94.750579][ T6038] iomap_dio_rw+0x40/0x90 [ 94.754927][ T6038] ext4_file_read_iter+0x214/0x290 [ 94.760152][ T6038] copy_splice_read+0x3a0/0x5d0 [ 94.765027][ T6038] splice_direct_to_actor+0x28b/0x670 [ 94.770453][ T6038] do_splice_direct+0xd7/0x150 [ 94.775414][ T6038] do_sendfile+0x398/0x660 [ 94.779843][ T6038] __x64_sys_sendfile64+0x110/0x150 [ 94.785068][ T6038] x64_sys_call+0xfbd/0x2dc0 [ 94.789673][ T6038] do_syscall_64+0xc9/0x1c0 [ 94.794200][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.800640][ T6038] [ 94.802968][ T6038] read to 0xffff8881067cc6c8 of 8 bytes by task 6038 on cpu 0: [ 94.810616][ T6038] xas_find_marked+0x216/0x660 [ 94.815401][ T6038] find_get_entry+0x54/0x390 [ 94.820011][ T6038] filemap_get_folios_tag+0x9e/0x210 [ 94.825860][ T6038] mpage_prepare_extent_to_map+0x329/0xb80 [ 94.831691][ T6038] ext4_do_writepages+0x6ea/0x2130 [ 94.836836][ T6038] ext4_writepages+0x159/0x2e0 [ 94.841614][ T6038] do_writepages+0x1d8/0x480 [ 94.846228][ T6038] filemap_write_and_wait_range+0x146/0x360 [ 94.852159][ T6038] kiocb_write_and_wait+0x73/0x100 [ 94.857285][ T6038] __iomap_dio_rw+0x50c/0x1110 [ 94.862077][ T6038] iomap_dio_rw+0x40/0x90 [ 94.866541][ T6038] ext4_file_read_iter+0x214/0x290 [ 94.871687][ T6038] copy_splice_read+0x3a0/0x5d0 [ 94.876561][ T6038] splice_direct_to_actor+0x28b/0x670 [ 94.881953][ T6038] do_splice_direct+0xd7/0x150 [ 94.886757][ T6038] do_sendfile+0x398/0x660 [ 94.891197][ T6038] __x64_sys_sendfile64+0x110/0x150 [ 94.896410][ T6038] x64_sys_call+0xfbd/0x2dc0 [ 94.901013][ T6038] do_syscall_64+0xc9/0x1c0 [ 94.905549][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.911487][ T6038] [ 94.913817][ T6038] value changed: 0xfff0000000000000 -> 0xf800000000000000 [ 94.920942][ T6038] [ 94.923265][ T6038] Reported by Kernel Concurrency Sanitizer on: [ 94.929429][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.5.770 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 94.939683][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.949759][ T6038] ================================================================== [ 94.998626][ T6038] syz.5.770 (6038) used greatest stack depth: 9064 bytes left [ 95.031109][ T6059] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.775'. [ 95.040737][ T6055] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.775'.