last executing test programs: 2.212563345s ago: executing program 0 (id=213): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 2.104156167s ago: executing program 0 (id=215): socket$tipc(0x1e, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) syz_io_uring_setup(0x8000083f, &(0x7f00000000c0)={0x0, 0xaf5d, 0x1, 0x1, 0x12b}, &(0x7f0000000400), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00001024a5acb700030601020000000000000000070000069c20923ab271e6cd2e7a373205000100070000000500010007000000050001000e00000005000100070000000900020073797a310000000005000100070000000900020673fca931"], 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r3, &(0x7f0000000640)=""/108, 0x6c, 0xa1a28a7d004453a6, &(0x7f00000006c0)={0xa, 0x4e22, 0x2, @remote}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="25000000000100000008000100020000000400090008000a0001000e000400090008000500", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000c80)=""/224, 0xe0, 0x101, &(0x7f0000000d80)={0x11, 0xd, r4, 0x1, 0x1, 0x6, @random="50a502aa5bad"}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:agp_device_t:s0\x00', 0x22, 0x1) 2.096268407s ago: executing program 1 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) mknod(0x0, 0x1ffa, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3, 0x0, 0x68f}, 0x18) stat(0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)='8', 0x1}], 0x1, 0x14, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r7, 0x5) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x80000) sendmmsg(r9, &(0x7f0000001500), 0x588, 0x20) 2.065257937s ago: executing program 4 (id=217): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000740), 0xe70d, 0x8a40) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000780)=0x9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000c40)={0x4, 0x3ff, 0x1, 0x4, 0x8000, 0x9}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x689000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="0000009c9926662deeaf214815c11557503f5b6c8afe4b312135", @ANYRES16, @ANYBLOB="100029bd7000fcdbdf25160000000500040000000000050004000100000048000180080003000000000008000100", @ANYRES32, @ANYBLOB="1400020076657468315f766972745f7769666900080003000100000008000100", @ANYRES32, @ANYBLOB="080003000300000008000100", @ANYRES32, @ANYBLOB="0500030001000000"], 0x74}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000b1000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7a}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6074, 0x2}}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xdd}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x881}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000c00)='kfree\x00', r5}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.712094703s ago: executing program 1 (id=220): r0 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x3, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r2, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) 1.711761793s ago: executing program 2 (id=221): r0 = getpid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, &(0x7f0000000180)=[{&(0x7f0000001440)=""/249, 0xf9}], 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') 1.609247415s ago: executing program 3 (id=223): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2000000013006bcd9e3fe3dc4e48aa31086b870341", 0x15}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.608454495s ago: executing program 4 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.574113525s ago: executing program 4 (id=225): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.573759605s ago: executing program 3 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 1.530555966s ago: executing program 1 (id=227): unshare(0x2040600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) sync_file_range(r0, 0x4000000008, 0x3ff, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r7, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000140081044e81f782db44b9040220080211000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c9201114000000000000000000000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101005ee4001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r10 = socket(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000c40)=[{r10, 0x20}], 0x1, 0x0, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 1.530163526s ago: executing program 2 (id=228): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x6, 0xa000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x1320, 0xffffffff, 0x3, 0x5, 0x8, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x8}, 0x1100, 0x4011, 0x2, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0xb4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x5, 0x9, 0x7, 0x4, 0x9, 0x4, 0x6, 0xfffff7fb, [{0x4, 0xfff, 0x9, 0x2}, {0x1, 0x8, 0x1, 0x6}, {0xb00, 0x0, 0x80000001, 0x6}, {0xff, 0xffff, 0x1, 0x7}, {0x4, 0x2, 0xf, 0xffffffeb}, {0x7, 0x1ff, 0xf8000000, 0x8}, {0x6, 0x1, 0xec8, 0x7}]}}]}}]}, 0xb4}}, 0x4044040) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r5, 0x3}, 0x8) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) 1.422081868s ago: executing program 3 (id=229): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) (fail_nth: 2) 1.398669388s ago: executing program 4 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@delqdisc={0xd0, 0x25, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x5, 0x8}, {0x9, 0xffff}, {0xd, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x7, 0x8000, 0x1d8, 0x1, 0x7f, 0x4, 0x1}}, {0x6, 0x2, [0xffff]}}, {{0x1c, 0x1, {0xc, 0x3, 0x1, 0x94, 0x2, 0x5, 0xfffff124, 0x4}}, {0xc, 0x2, [0x9, 0xb5, 0xb357, 0x6]}}, {{0x1c, 0x1, {0x3, 0x0, 0x8, 0xfffff516, 0x2, 0x7, 0x8, 0x5}}, {0xe, 0x2, [0x4, 0x6, 0x4, 0x3, 0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x18, 0x4}}, @TCA_RATE={0x6, 0x5, {0x41, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0xd0}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffefff86dd604dd3180018060009f8c679090e62f020fe8000000000000000000000000000aafe80000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000005020402"], 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x54, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffe) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000700)={@local, @broadcast}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r9 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 1.162868812s ago: executing program 3 (id=231): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfef4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.161273452s ago: executing program 0 (id=232): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000fc0)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a959fc5ec5071900", "8e083700daf38a6d69e9b5e9c2f133d7", "e2739528", "12772541f8ebfebb"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) 1.148040972s ago: executing program 2 (id=233): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1e, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ba6900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018160000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000010000000700000084000000b7000000000000009500000000000000"], 0x0, 0xf, 0x1000, &(0x7f0000002480)=""/4096, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2400000003060102000200000000000000000001050001005f7b81a22abe641b54761905070000000500010007000000500b78cfe2c9522047bd9859a64b26ebbf76ac248134ad232b3a375c147f83b658648dfe46164fc7b81ba0512ca45db9947e0a1f33ab00c2adfc"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) 1.042588953s ago: executing program 3 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f200000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095001c5ac28fd60d47329fad86dade4fca342ea0ef7544bd0b4fa8dea0c1b93d6dd12eb12e05ece4eac4aad95f3a364ac3cb0cad8022e0b90bd2e0b9099091346e4080d2519f65e91c322c0f42b4353e670af26a32de7bb02eb7"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r5) faccessat2(r6, &(0x7f0000000880)='\x00', 0x1, 0x1100) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060102000000000000b000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', r3, 0x7, 0x40, 0x2, 0x200, {{0x16, 0x4, 0x0, 0x5, 0x58, 0x65, 0x0, 0x64, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0xb, [{@local, 0xfffffff9}, {@multicast2, 0xade}]}, @timestamp={0x44, 0x20, 0x73, 0x0, 0xe, [0x80000001, 0x7, 0x3a, 0xcfac, 0x31, 0x1ff, 0x9]}, @timestamp={0x44, 0x4, 0x87, 0x0, 0x3}, @timestamp={0x44, 0x8, 0xce, 0x0, 0x0, [0xc]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) 1.007827394s ago: executing program 4 (id=235): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2400000003060102000200000000000000000001050001005f7b81a22abe641b54761905070000000500010007000000500b78cfe2c9522047bd9859a64b26ebbf76ac248134ad232b3a375c147f83b658648dfe46164fc7b81ba0512ca45db9947e0a1f33ab00c2adfc"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) 995.795274ms ago: executing program 2 (id=236): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000740), 0xe70d, 0x8a40) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000780)=0x9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000c40)={0x4, 0x3ff, 0x1, 0x4, 0x8000, 0x9}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x689000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="0000009c9926662deeaf214815c11557503f5b6c8afe4b312135", @ANYRES16, @ANYBLOB="100029bd7000fcdbdf25160000000500040000000000050004000100000048000180080003000000000008000100", @ANYRES32, @ANYBLOB="1400020076657468315f766972745f7769666900080003000100000008000100", @ANYRES32, @ANYBLOB="080003000300000008000100", @ANYRES32, @ANYBLOB="0500030001000000"], 0x74}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000b1000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000c00)='kfree\x00', r5}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0x0, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001500)={0x0, 0x0}) timer_create(0x3, &(0x7f0000000380)={0x0, 0x32, 0x0, @tid=r3}, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='rxrpc_rtt_tx\x00', r1, 0x0, 0x8}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r5 = open(&(0x7f00000002c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000c80)='*', 0x1}], 0x3, 0x79fd, 0x0, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r7 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r7, 0x0, 0x0, 0xe7b, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000012c0)="7cb86f614e527c606afc09993cd552845466ea2803d920f6fdc038b0d5fe99b6a89e6d65a88470445c28dd3a2f659b2c1de3b1093498924ab732701a7f6a8be8f6a1cd7ae1cb6af5df2c48c0551b19a86d0fb848998d5b3dbb3a05ee6d7109eb561938ac4b24a387258d6543fc2592879e8742b6a3efe2bf16ceb853c1b3f3914135c065fb5cfb4b9768f4c60701b0fc59a4a3bf05ece076c6dceafe928f22535546b54113da41c1da9d2b6715beb2428e5ddd5dcd02163ab58f4bd73cd91d42bd5900a6755d02d0d950f148ce7ad9f4", 0xd0, 0x8004, &(0x7f0000000400)={0xa, 0x4e22, 0x9, @private0, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000000c0)=0x5, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) 842.535136ms ago: executing program 3 (id=238): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)="d7053e40ffce199394766d14525b36a6270aae3f3c9a52d13a7e3b9f38e13eb35e5440f5b13b396f2fd19034ba933f12902e4874ec00431e754f8f2e86c6d4991dbd4ae76769c613461f986e2dbaf27fad56ae0c247ab49d94d7e937b70ddbd710db7b4d130f185623d0718ee3a121704d4f452f8f55", &(0x7f0000000c80)="4bbb3d6bdd05f6af8038fa29718db98bbde5d8bcd3e84636998a11dc404fc464499a0f847a582bcacb7ef248f9fe1eb275ae3d50a3afcc21c71b27ddf1d9463b37eb93fbfed54c961c824bf1e92253b0f24b84b59bd9ca286319ceee1ea58c5b344dc2e216f2a8745f9e33f1864e8b7c3cda7439bbb1a4c74511d9fa1ff155320957880c38ec8b62e0f27df2192b034cae1c5e702d4567396aca3f5442479a1b027a0a816b762c10c2249b8aa748d1e153f6579cd6e4d4be7ce7dcc489d001a3519f04570b2dbb44cd22b1c740ee6e95da682c8fa3ad0efba60293eb9a0476938dcbd62943b17191", 0xfffffff7, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYBLOB="00000000000000b708000000000006302f8afcc8ad6eb5bf88a145007b8af8ff00000000bf1a95000000000007779e8ea9d38b6bd86044c1da653de97ed778e2", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e177150b38fb97, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@nodioread_nolock}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000001440)='./file1\x00', 0x21881e, &(0x7f0000001480)={[{@mb_optimize_scan}, {@sb={'sb', 0x3d, 0x2}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x4f9, &(0x7f0000000dc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000580)=0x0, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0x0, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001500)={0x0, 0x0}) timer_create(0x3, &(0x7f0000000380)={0x0, 0x32, 0x0, @tid=r3}, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='rxrpc_rtt_tx\x00', r1, 0x0, 0x8}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r5 = open(&(0x7f00000002c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000c80)='*', 0x1}], 0x3, 0x79fd, 0x0, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r7 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r7, 0x0, 0x0, 0xe7b, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000012c0)="7cb86f614e527c606afc09993cd552845466ea2803d920f6fdc038b0d5fe99b6a89e6d65a88470445c28dd3a2f659b2c1de3b1093498924ab732701a7f6a8be8f6a1cd7ae1cb6af5df2c48c0551b19a86d0fb848998d5b3dbb3a05ee6d7109eb561938ac4b24a387258d6543fc2592879e8742b6a3efe2bf16ceb853c1b3f3914135c065fb5cfb4b9768f4c60701b0fc59a4a3bf05ece076c6dceafe928f22535546b54113da41c1da9d2b6715beb2428e5ddd5dcd02163ab58f4bd73cd91d42bd5900a6755d02d0d950f148ce7ad9f4", 0xd0, 0x8004, &(0x7f0000000400)={0xa, 0x4e22, 0x9, @private0, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000000c0)=0x5, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) 672.713609ms ago: executing program 1 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 655.915139ms ago: executing program 0 (id=240): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 625.8019ms ago: executing program 2 (id=241): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) alarm(0xffffffffffffbb57) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f0000ff030000000085100000060000008510000821000000040800000000000018000000000000000000000001000000950000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="e08a7a0bd0241bf25a418eea931e8ab226680993796b548b6c3ee039e5bd88fc035f485796a110b15318d2fae2c80783cec7c7111761521a0747befb6b0714145b1ba25b21b8d1ebaa76bae18adae35c168b71479fe7d29aa5fcd50e7e0ccf19346158206c80839ad4e9a053dad7a92f3588b4e1ae1913b2390cb50dfdc81314337b522a1d930fccaee50972b495c803e4c6f73719dcc83b28c304dad011bfe767a259a3b4b6ae20fb44fe060a1b423b6b8994b7b013a13a6320fa4bb5", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000d6a75d1000e175e8008100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xd92a50e5671c2e04, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010000000000fbdbdf2500000000", @ANYRES32=r9, @ANYBLOB="00525c00000000000400028000"/28], 0x34}, 0x1, 0x2}, 0x40000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) 593.51518ms ago: executing program 1 (id=242): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) timerfd_create(0x0, 0x80000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x7079, 0x800, 0x7, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000840)="11d5939415106f293e54d783de7bd4645f8e6ab3bbf0fd9fadca6c509635ab543bb9855a2f4d27dd0c816f8d5b0c0529b59591b2feba7b50750fe3ffb4340fa7dc4c7c531255e9d99bac90c7a61ce12a08cb4835f52a63d8c920385369be301f5ea4388aa357440c71260c6ff104e2528722770bdf72aa7430264a80b9d6c8f51a45be4590e06ec8e190d385def5733d3c2e156fd0c523ab78e41ecdd82c84e60b689d359991bfef7fda27864e0f9292ea5346c4c14405ca22a9772f88aa60ee221db0d600daed9c647c72d441725431b63d28dc2f97d1b0d80171abc709b14c4eb186cd8b22d51141", &(0x7f0000000440)=""/99}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5", 0x4}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x41) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)) 449.928472ms ago: executing program 2 (id=243): socket$tipc(0x1e, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) syz_io_uring_setup(0x8000083f, &(0x7f00000000c0)={0x0, 0xaf5d, 0x1, 0x1, 0x12b}, &(0x7f0000000400), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00001024a5acb700030601020000000000000000070000069c20923ab271e6cd2e7a373205000100070000000500010007000000050001000e00000005000100070000000900020073797a310000000005000100070000000900020673fca931"], 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r3, &(0x7f0000000640)=""/108, 0x6c, 0xa1a28a7d004453a6, &(0x7f00000006c0)={0xa, 0x4e22, 0x2, @remote}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="25000000000100000008000100020000000400090008000a0001000e000400090008000500", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000c80)=""/224, 0xe0, 0x101, &(0x7f0000000d80)={0x11, 0xd, r4, 0x1, 0x1, 0x6, @random="50a502aa5bad"}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:agp_device_t:s0\x00', 0x22, 0x1) 392.195953ms ago: executing program 0 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) (fail_nth: 2) 0s ago: executing program 0 (id=245): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfef4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): [ 22.018506][ T29] audit: type=1400 audit(1744420448.156:81): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 27.145724][ T29] audit: type=1400 audit(1744420453.276:82): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.146771][ T3291] cgroup: Unknown subsys name 'net' [ 27.168543][ T29] audit: type=1400 audit(1744420453.276:83): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.195866][ T29] audit: type=1400 audit(1744420453.306:84): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.368532][ T3291] cgroup: Unknown subsys name 'cpuset' [ 27.374705][ T3291] cgroup: Unknown subsys name 'rlimit' [ 27.526317][ T29] audit: type=1400 audit(1744420453.656:85): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.549715][ T29] audit: type=1400 audit(1744420453.656:86): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.570291][ T29] audit: type=1400 audit(1744420453.656:87): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.581912][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.590699][ T29] audit: type=1400 audit(1744420453.656:88): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.619737][ T29] audit: type=1400 audit(1744420453.676:89): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.644543][ T29] audit: type=1400 audit(1744420453.676:90): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.645553][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.667888][ T29] audit: type=1400 audit(1744420453.736:91): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.756750][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.826833][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.867992][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.892675][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.903973][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.911082][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.918298][ T3302] bridge_slave_0: entered allmulticast mode [ 28.924682][ T3302] bridge_slave_0: entered promiscuous mode [ 28.950181][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.957283][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.964621][ T3302] bridge_slave_1: entered allmulticast mode [ 28.971003][ T3302] bridge_slave_1: entered promiscuous mode [ 28.994090][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.001187][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.008623][ T3311] bridge_slave_0: entered allmulticast mode [ 29.015063][ T3311] bridge_slave_0: entered promiscuous mode [ 29.035886][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.042977][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.050221][ T3311] bridge_slave_1: entered allmulticast mode [ 29.056667][ T3311] bridge_slave_1: entered promiscuous mode [ 29.096193][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.108298][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.135149][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.147347][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.165993][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.173090][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.180363][ T3307] bridge_slave_0: entered allmulticast mode [ 29.186680][ T3307] bridge_slave_0: entered promiscuous mode [ 29.193093][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.200191][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.207406][ T3301] bridge_slave_0: entered allmulticast mode [ 29.213910][ T3301] bridge_slave_0: entered promiscuous mode [ 29.220849][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.228091][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.235372][ T3301] bridge_slave_1: entered allmulticast mode [ 29.241918][ T3301] bridge_slave_1: entered promiscuous mode [ 29.249026][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.266312][ T3302] team0: Port device team_slave_0 added [ 29.272891][ T3302] team0: Port device team_slave_1 added [ 29.283626][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.290697][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.298047][ T3307] bridge_slave_1: entered allmulticast mode [ 29.304299][ T3307] bridge_slave_1: entered promiscuous mode [ 29.323936][ T3311] team0: Port device team_slave_0 added [ 29.349257][ T3311] team0: Port device team_slave_1 added [ 29.355263][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.362237][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.388151][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.399379][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.406325][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.432248][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.449246][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.478987][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.493732][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.523622][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.532914][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.539989][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.565909][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.583523][ T3301] team0: Port device team_slave_0 added [ 29.603976][ T3307] team0: Port device team_slave_0 added [ 29.610089][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.617030][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.642988][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.659747][ T3301] team0: Port device team_slave_1 added [ 29.675803][ T3307] team0: Port device team_slave_1 added [ 29.700617][ T3302] hsr_slave_0: entered promiscuous mode [ 29.706455][ T3302] hsr_slave_1: entered promiscuous mode [ 29.717890][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.725026][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.732770][ T3304] bridge_slave_0: entered allmulticast mode [ 29.739326][ T3304] bridge_slave_0: entered promiscuous mode [ 29.745949][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.753117][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.760430][ T3304] bridge_slave_1: entered allmulticast mode [ 29.766860][ T3304] bridge_slave_1: entered promiscuous mode [ 29.778633][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.785659][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.811754][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.839761][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.846711][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.872831][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.883965][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.890972][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.917037][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.941279][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.948329][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.974258][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.992639][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.010509][ T3311] hsr_slave_0: entered promiscuous mode [ 30.016422][ T3311] hsr_slave_1: entered promiscuous mode [ 30.022370][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.029957][ T3311] Cannot create hsr debugfs directory [ 30.041821][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.066988][ T3307] hsr_slave_0: entered promiscuous mode [ 30.073049][ T3307] hsr_slave_1: entered promiscuous mode [ 30.078928][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.086482][ T3307] Cannot create hsr debugfs directory [ 30.105220][ T3301] hsr_slave_0: entered promiscuous mode [ 30.111204][ T3301] hsr_slave_1: entered promiscuous mode [ 30.116932][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.124520][ T3301] Cannot create hsr debugfs directory [ 30.142715][ T3304] team0: Port device team_slave_0 added [ 30.164023][ T3304] team0: Port device team_slave_1 added [ 30.205157][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.212162][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.238153][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.254619][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.261595][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.287590][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.373207][ T3304] hsr_slave_0: entered promiscuous mode [ 30.379382][ T3304] hsr_slave_1: entered promiscuous mode [ 30.385230][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.392852][ T3304] Cannot create hsr debugfs directory [ 30.414413][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.436455][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.449838][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.464376][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.501050][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.510099][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.531040][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.541792][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.564187][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.572722][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.582097][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.590490][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.626186][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.644670][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.653684][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.663198][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.706967][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.714377][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.723587][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.735107][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.751850][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.758928][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.767588][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.774662][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.782832][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.791868][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.834857][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.859540][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.872050][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.886220][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.902638][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.909775][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.918882][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.925936][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.941164][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.948309][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.969289][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.976400][ T1933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.002132][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.054005][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.065315][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.081280][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.091345][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.101978][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.109157][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.119599][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.126667][ T1933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.144411][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.151647][ T1933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.172828][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.191201][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.198291][ T1933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.213621][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.263597][ T3302] veth0_vlan: entered promiscuous mode [ 31.273544][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.284038][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.308620][ T3302] veth1_vlan: entered promiscuous mode [ 31.322371][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.352198][ T3302] veth0_macvtap: entered promiscuous mode [ 31.368701][ T3302] veth1_macvtap: entered promiscuous mode [ 31.384610][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.400407][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.427643][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.459392][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.494611][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.503508][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.512385][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.521207][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.534571][ T3301] veth0_vlan: entered promiscuous mode [ 31.576570][ T3311] veth0_vlan: entered promiscuous mode [ 31.584447][ T3301] veth1_vlan: entered promiscuous mode [ 31.597894][ T3304] veth0_vlan: entered promiscuous mode [ 31.603695][ T3307] veth0_vlan: entered promiscuous mode [ 31.615368][ T3304] veth1_vlan: entered promiscuous mode [ 31.625944][ T3311] veth1_vlan: entered promiscuous mode [ 31.642071][ T3301] veth0_macvtap: entered promiscuous mode [ 31.650972][ T3307] veth1_vlan: entered promiscuous mode [ 31.661106][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.661108][ T3301] veth1_macvtap: entered promiscuous mode [ 31.681046][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.692109][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.702769][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.713624][ T3311] veth0_macvtap: entered promiscuous mode [ 31.721557][ T3304] veth0_macvtap: entered promiscuous mode [ 31.734839][ T3304] veth1_macvtap: entered promiscuous mode [ 31.742378][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.752851][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.753192][ T3442] loop0: detected capacity change from 0 to 1024 [ 31.765128][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.778650][ T3307] veth0_macvtap: entered promiscuous mode [ 31.781645][ T3442] ======================================================= [ 31.781645][ T3442] WARNING: The mand mount option has been deprecated and [ 31.781645][ T3442] and is ignored by this kernel. Remove the mand [ 31.781645][ T3442] option from the mount to silence this warning. [ 31.781645][ T3442] ======================================================= [ 31.786382][ T3307] veth1_macvtap: entered promiscuous mode [ 31.826262][ T3442] EXT4-fs: Ignoring removed bh option [ 31.832042][ T3442] EXT4-fs: inline encryption not supported [ 31.838080][ T3442] EXT4-fs: Ignoring removed i_version option [ 31.840276][ T3311] veth1_macvtap: entered promiscuous mode [ 31.851709][ T3442] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.859531][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.870805][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.879545][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.888293][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.905251][ T3442] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 2: comm syz.0.1: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.907605][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.929519][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.938240][ T3442] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 48: comm syz.0.1: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.939354][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.963571][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.973652][ T3442] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1: Failed to acquire dquot type 0 [ 31.975290][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.992610][ T3442] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 31.992769][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.003446][ T3442] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.1: mark_inode_dirty error [ 32.012619][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.024963][ T3442] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 32.033481][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.045658][ T3442] EXT4-fs (loop0): 1 orphan inode deleted [ 32.054078][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.061926][ T3442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.069637][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.092227][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.102840][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.103418][ T3405] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.123449][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.134667][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.138278][ T3405] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 32.144527][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.166439][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.176285][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.186815][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.188625][ T3442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.196754][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.216080][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.226546][ T3442] EXT4-fs error (device loop0): __ext4_get_inode_loc:4449: comm syz.0.1: Invalid inode table block 1 in block_group 0 [ 32.229473][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.240448][ T3442] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 32.256581][ T3442] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz.0.1: mark_inode_dirty error [ 32.261757][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.277932][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.287848][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.298449][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.309486][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.317841][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.328427][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.338296][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.348846][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.351134][ T3442] loop0: detected capacity change from 0 to 512 [ 32.358741][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.375454][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.386297][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.393620][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 32.393657][ T29] audit: type=1400 audit(1744420458.516:130): avc: denied { setattr } for pid=3441 comm="syz.0.1" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.398848][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.418522][ T29] audit: type=1400 audit(1744420458.526:131): avc: denied { create } for pid=3441 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.421847][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.458146][ T3442] loop0: detected capacity change from 0 to 2048 [ 32.462347][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.479163][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.489083][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.499583][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.509429][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.519948][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.531885][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.542943][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.551688][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.560154][ T3442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.560440][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.580374][ T3442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.581804][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.603824][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.612653][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.617761][ T29] audit: type=1400 audit(1744420458.736:132): avc: denied { write } for pid=3441 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.621409][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.621437][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.699112][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.707880][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.716587][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.725398][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.736031][ T29] audit: type=1400 audit(1744420458.866:133): avc: denied { prog_run } for pid=3441 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.819390][ T29] audit: type=1400 audit(1744420458.956:134): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.885018][ T29] audit: type=1400 audit(1744420459.016:135): avc: denied { name_bind } for pid=3456 comm="syz.2.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 32.910411][ T3455] loop3: detected capacity change from 0 to 128 [ 32.933030][ T3455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.959140][ T3457] loop2: detected capacity change from 0 to 128 [ 32.989926][ T29] audit: type=1400 audit(1744420459.046:136): avc: denied { create } for pid=3451 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.004217][ T3457] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.009837][ T29] audit: type=1326 audit(1744420459.056:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0f5d169 code=0x7ffc0000 [ 33.024383][ T3457] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.044925][ T29] audit: type=1326 audit(1744420459.056:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b0f5d169 code=0x7ffc0000 [ 33.078728][ T29] audit: type=1326 audit(1744420459.056:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3454 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4b0f5d169 code=0x7ffc0000 [ 33.101929][ T3468] loop0: detected capacity change from 0 to 4096 [ 33.108643][ T3468] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 33.129267][ T3462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 33.138400][ T3462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=3462 comm=syz.0.6 [ 33.151919][ T3462] Zero length message leads to an empty skb [ 33.184083][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.207234][ T3473] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.228738][ T3473] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 33.235687][ T23] kernel write not supported for file /uhid (pid: 23 comm: kworker/1:0) [ 33.300142][ T3482] loop4: detected capacity change from 0 to 1024 [ 33.312595][ T3482] EXT4-fs: Ignoring removed bh option [ 33.336931][ T3482] EXT4-fs: inline encryption not supported [ 33.342896][ T3482] EXT4-fs: Ignoring removed i_version option [ 33.370250][ T3486] loop1: detected capacity change from 0 to 1024 [ 33.384821][ T3482] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.408011][ T3486] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.418990][ T3486] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.440453][ T3486] JBD2: no valid journal superblock found [ 33.446223][ T3486] EXT4-fs (loop1): Could not load journal inode [ 33.518043][ T3496] loop3: detected capacity change from 0 to 4096 [ 33.524887][ T3496] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 33.541124][ T3496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 33.550297][ T3496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=3496 comm=syz.3.10 [ 33.632179][ T3482] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.11: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.684750][ T3482] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.11: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.076312][ T3482] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.11: Failed to acquire dquot type 0 [ 34.135560][ T3482] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 34.167570][ T3482] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.11: mark_inode_dirty error [ 34.200494][ T3482] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 34.218969][ T3482] EXT4-fs (loop4): 1 orphan inode deleted [ 34.231214][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.285921][ T3501] netlink: 'syz.0.15': attribute type 2 has an invalid length. [ 34.293623][ T3501] netlink: 'syz.0.15': attribute type 8 has an invalid length. [ 34.301283][ T3501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15'. [ 34.434528][ T139] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.483383][ T139] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 34.548270][ T3482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.572564][ T3482] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz.4.11: Invalid inode table block 1 in block_group 0 [ 34.629931][ T3482] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 34.660689][ T3482] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.11: mark_inode_dirty error [ 34.673271][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 34.712576][ T3482] loop4: detected capacity change from 0 to 512 [ 34.962306][ T3512] loop2: detected capacity change from 0 to 8192 [ 34.984351][ T3512] syz.2.19: attempt to access beyond end of device [ 34.984351][ T3512] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 35.010293][ T3512] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 35.018204][ T3512] FAT-fs (loop2): Filesystem has been set read-only [ 35.025342][ T3512] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 35.033570][ T3512] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 35.095323][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 35.246927][ T3516] mmap: syz.2.21 (3516) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.302651][ T3516] loop2: detected capacity change from 0 to 1024 [ 35.320415][ T3516] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.331402][ T3516] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.371821][ T3516] JBD2: no valid journal superblock found [ 35.377593][ T3516] EXT4-fs (loop2): Could not load journal inode [ 35.409587][ T3482] loop4: detected capacity change from 0 to 2048 [ 35.422610][ T3518] loop0: detected capacity change from 0 to 1024 [ 35.440366][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.479691][ T3518] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.490737][ T3518] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.505829][ T3482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.549319][ T3518] JBD2: no valid journal superblock found [ 35.555067][ T3518] EXT4-fs (loop0): Could not load journal inode [ 35.598083][ T3518] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 35.646801][ T3523] loop2: detected capacity change from 0 to 1024 [ 35.659246][ T3523] EXT4-fs: Ignoring removed bh option [ 35.665917][ T3523] EXT4-fs: inline encryption not supported [ 35.671829][ T3523] EXT4-fs: Ignoring removed i_version option [ 35.694614][ T3523] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.741922][ T3531] loop0: detected capacity change from 0 to 164 [ 35.755602][ T3523] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 2: comm syz.2.24: lblock 2 mapped to illegal pblock 2 (length 1) [ 35.812382][ T3531] Unable to read rock-ridge attributes [ 35.818220][ T3523] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 48: comm syz.2.24: lblock 0 mapped to illegal pblock 48 (length 1) [ 35.853001][ T3523] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.24: Failed to acquire dquot type 0 [ 35.867308][ T3523] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 35.897957][ T3523] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.24: mark_inode_dirty error [ 35.900986][ T3539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 35.915483][ T3537] loop4: detected capacity change from 0 to 164 [ 35.932630][ T3523] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 35.944091][ T3528] loop3: detected capacity change from 0 to 1024 [ 35.945570][ T3523] EXT4-fs (loop2): 1 orphan inode deleted [ 35.958887][ T3537] Unable to read rock-ridge attributes [ 35.960041][ T31] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.983850][ T3523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.987943][ T3528] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.006881][ T3528] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.006875][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 36.033815][ T3528] JBD2: no valid journal superblock found [ 36.033906][ T3523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.039593][ T3528] EXT4-fs (loop3): Could not load journal inode [ 36.058478][ T3523] EXT4-fs error (device loop2): __ext4_get_inode_loc:4449: comm syz.2.24: Invalid inode table block 1 in block_group 0 [ 36.079342][ T3528] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 36.100772][ T3523] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 36.143728][ T3523] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz.2.24: mark_inode_dirty error [ 36.169511][ T3555] loop4: detected capacity change from 0 to 1024 [ 36.176261][ T3555] EXT4-fs: Ignoring removed bh option [ 36.189993][ T3555] EXT4-fs: inline encryption not supported [ 36.195926][ T3555] EXT4-fs: Ignoring removed i_version option [ 36.202727][ T3555] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.213428][ T3523] loop2: detected capacity change from 0 to 512 [ 36.216701][ T3555] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.37: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.235551][ T3555] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.37: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.251667][ T3555] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.37: Failed to acquire dquot type 0 [ 36.263775][ T3555] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 36.274320][ T3555] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.37: mark_inode_dirty error [ 36.305264][ T3555] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 36.317205][ T3559] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.325789][ T3523] loop2: detected capacity change from 0 to 2048 [ 36.325973][ T3555] EXT4-fs (loop4): 1 orphan inode deleted [ 36.338190][ T374] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.361213][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.365905][ T374] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 36.375884][ T3523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.402667][ T3523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.412941][ T3555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.417419][ T3569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.41'. [ 36.423503][ T3555] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz.4.37: Invalid inode table block 1 in block_group 0 [ 36.445490][ T3555] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 36.460409][ T3555] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.37: mark_inode_dirty error [ 36.545428][ T3555] loop4: detected capacity change from 0 to 512 [ 36.619558][ T3555] loop4: detected capacity change from 0 to 2048 [ 36.626113][ T3569] loop3: detected capacity change from 0 to 1024 [ 36.633873][ T3569] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.644821][ T3569] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.668118][ T3569] JBD2: no valid journal superblock found [ 36.674139][ T3569] EXT4-fs (loop3): Could not load journal inode [ 36.696196][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.702310][ T3569] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 36.727044][ T3555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.814172][ T3588] loop1: detected capacity change from 0 to 1024 [ 36.822010][ T3586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.48'. [ 36.855759][ T3588] EXT4-fs: Ignoring removed bh option [ 36.858895][ T3590] loop3: detected capacity change from 0 to 1024 [ 36.871676][ T3588] EXT4-fs: inline encryption not supported [ 36.876713][ T3590] EXT4-fs: Ignoring removed bh option [ 36.877787][ T3588] EXT4-fs: Ignoring removed i_version option [ 36.896550][ T3590] EXT4-fs: inline encryption not supported [ 36.902926][ T3590] EXT4-fs: Ignoring removed i_version option [ 36.910770][ T3590] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.930907][ T3588] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.974307][ T3590] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 2: comm syz.3.49: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.019207][ T3588] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.47: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.038936][ T3588] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.47: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.038941][ T3590] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 48: comm syz.3.49: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.039055][ T3590] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.49: Failed to acquire dquot type 0 [ 37.091693][ T3586] loop4: detected capacity change from 0 to 1024 [ 37.099280][ T3588] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.47: Failed to acquire dquot type 0 [ 37.111235][ T3586] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.122247][ T3586] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 37.133142][ T3588] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 37.133854][ T3590] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 37.147702][ T3588] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.47: mark_inode_dirty error [ 37.154071][ T3586] JBD2: no valid journal superblock found [ 37.168958][ T3586] EXT4-fs (loop4): Could not load journal inode [ 37.175916][ T3588] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 37.186165][ T3590] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.49: mark_inode_dirty error [ 37.196810][ T3588] EXT4-fs (loop1): 1 orphan inode deleted [ 37.209114][ T1933] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.221632][ T3588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.232646][ T3590] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 37.239318][ T3608] loop0: detected capacity change from 0 to 1024 [ 37.246963][ T1933] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 37.257235][ T3608] EXT4-fs: Ignoring removed bh option [ 37.264724][ T3586] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 37.269231][ T3608] EXT4-fs: inline encryption not supported [ 37.278364][ T3590] EXT4-fs (loop3): 1 orphan inode deleted [ 37.284056][ T3608] EXT4-fs: Ignoring removed i_version option [ 37.298492][ T3405] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.310040][ T3590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.326803][ T3405] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 37.330462][ T3608] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.355679][ T3610] syzkaller0: entered allmulticast mode [ 37.362959][ T3588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.364178][ T3590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.384395][ T3590] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz.3.49: Invalid inode table block 1 in block_group 0 [ 37.387629][ T3588] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz.1.47: Invalid inode table block 1 in block_group 0 [ 37.411121][ T3588] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 37.422151][ T3590] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 37.423630][ T3608] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 2: comm syz.0.55: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.446154][ T3590] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz.3.49: mark_inode_dirty error [ 37.446986][ T3588] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz.1.47: mark_inode_dirty error [ 37.468468][ T3609] syzkaller0: left allmulticast mode [ 37.469500][ T3608] __quota_error: 305 callbacks suppressed [ 37.469515][ T3608] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 37.489015][ T3608] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 48: comm syz.0.55: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.529583][ T3590] loop3: detected capacity change from 0 to 512 [ 37.541204][ T3608] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 37.550044][ T3608] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.55: Failed to acquire dquot type 0 [ 37.591488][ T3608] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 37.607575][ T3588] loop1: detected capacity change from 0 to 512 [ 37.614382][ T3608] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.55: mark_inode_dirty error [ 37.629011][ T3590] loop3: detected capacity change from 0 to 2048 [ 37.639465][ T3608] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 37.653754][ T3608] EXT4-fs (loop0): 1 orphan inode deleted [ 37.668842][ T1933] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.674368][ T3608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.686323][ T3590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.707691][ T3588] loop1: detected capacity change from 0 to 2048 [ 37.713818][ T1933] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 37.722500][ T1933] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 37.737132][ T3590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.739498][ T29] audit: type=1400 audit(1744420463.876:430): avc: denied { create } for pid=3619 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.747845][ T3588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.779464][ T29] audit: type=1400 audit(1744420463.916:431): avc: denied { ioctl } for pid=3619 comm="syz.4.60" path="socket:[4634]" dev="sockfs" ino=4634 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.807018][ T3608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.807028][ T3588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.869452][ T3608] EXT4-fs error (device loop0): __ext4_get_inode_loc:4449: comm syz.0.55: Invalid inode table block 1 in block_group 0 [ 37.886147][ T3631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 37.895681][ T3608] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 37.907249][ T3608] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz.0.55: mark_inode_dirty error [ 37.983152][ T3608] loop0: detected capacity change from 0 to 512 [ 37.992555][ T3636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.63'. [ 38.040067][ T3631] loop2: detected capacity change from 0 to 1024 [ 38.065054][ T3608] loop0: detected capacity change from 0 to 2048 [ 38.073466][ T3631] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.084444][ T3631] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.134056][ T3608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.136721][ T29] audit: type=1400 audit(1744420464.256:432): avc: denied { create } for pid=3640 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.165936][ T29] audit: type=1400 audit(1744420464.256:433): avc: denied { shutdown } for pid=3640 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.167233][ T3631] JBD2: no valid journal superblock found [ 38.185749][ T29] audit: type=1400 audit(1744420464.256:434): avc: denied { getopt } for pid=3640 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.191193][ T3631] EXT4-fs (loop2): Could not load journal inode [ 38.198484][ T3608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.210691][ T29] audit: type=1400 audit(1744420464.256:435): avc: denied { connect } for pid=3640 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.245371][ T29] audit: type=1400 audit(1744420464.256:436): avc: denied { name_connect } for pid=3640 comm="syz.3.64" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.245531][ T3645] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 38.296575][ T3646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 38.310702][ T3631] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 38.332178][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 38.454846][ T3648] loop4: detected capacity change from 0 to 1024 [ 38.492229][ T3648] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.503332][ T3648] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.516972][ T3648] JBD2: no valid journal superblock found [ 38.522902][ T3648] EXT4-fs (loop4): Could not load journal inode [ 38.540891][ T3648] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 38.580506][ T3645] syz.3.64 (3645) used greatest stack depth: 10296 bytes left [ 38.603214][ T3659] loop2: detected capacity change from 0 to 1024 [ 38.620251][ T3659] EXT4-fs: Ignoring removed bh option [ 38.625697][ T3659] EXT4-fs: inline encryption not supported [ 38.631587][ T3659] EXT4-fs: Ignoring removed i_version option [ 38.655071][ T3659] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.672179][ T3667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 38.682388][ T3659] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 2: comm syz.2.71: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.694189][ T3657] loop1: detected capacity change from 0 to 1024 [ 38.708620][ T3657] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.719611][ T3657] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.722949][ T3659] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 48: comm syz.2.71: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.755323][ T3659] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.71: Failed to acquire dquot type 0 [ 38.769511][ T3657] JBD2: no valid journal superblock found [ 38.775295][ T3657] EXT4-fs (loop1): Could not load journal inode [ 38.782047][ T3659] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 38.793263][ T3659] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.71: mark_inode_dirty error [ 38.814410][ T3657] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 38.839797][ T3678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.77'. [ 38.851019][ T3659] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 38.852253][ T3671] loop3: detected capacity change from 0 to 2048 [ 38.895866][ T3671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.907587][ T3659] EXT4-fs (loop2): 1 orphan inode deleted [ 38.914287][ T3659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.942936][ T139] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.961130][ T3678] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 39.001301][ T139] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 39.012415][ T3690] loop1: detected capacity change from 0 to 1024 [ 39.023110][ T3690] EXT4-fs: Ignoring removed bh option [ 39.030145][ T3690] EXT4-fs: inline encryption not supported [ 39.036020][ T3690] EXT4-fs: Ignoring removed i_version option [ 39.044346][ T3690] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.063045][ T3659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.082030][ T3659] EXT4-fs error (device loop2): __ext4_get_inode_loc:4449: comm syz.2.71: Invalid inode table block 1 in block_group 0 [ 39.094702][ T3690] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.82: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.109240][ T3690] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.82: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.127920][ T3659] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 39.137585][ T3690] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.82: Failed to acquire dquot type 0 [ 39.152067][ T3659] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz.2.71: mark_inode_dirty error [ 39.163585][ T3690] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 39.179775][ T3690] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.82: mark_inode_dirty error [ 39.192784][ T3690] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 39.206350][ T3698] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.221830][ T3698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 39.230939][ T3690] EXT4-fs (loop1): 1 orphan inode deleted [ 39.237027][ T3690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.250332][ T139] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.264779][ T3659] loop2: detected capacity change from 0 to 512 [ 39.267485][ T139] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 39.288623][ T3690] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.303074][ T3690] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz.1.82: Invalid inode table block 1 in block_group 0 [ 39.319950][ T3659] loop2: detected capacity change from 0 to 2048 [ 39.328042][ T3690] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 39.339210][ T3690] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz.1.82: mark_inode_dirty error [ 39.367863][ T3659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.380578][ T3690] loop1: detected capacity change from 0 to 512 [ 39.409926][ T3690] loop1: detected capacity change from 0 to 2048 [ 39.423480][ T3659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.458952][ T3690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.494795][ T3690] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.545953][ T3706] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 39.657869][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.712930][ T3718] loop1: detected capacity change from 0 to 764 [ 39.776326][ T3721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 39.918416][ T3721] loop1: detected capacity change from 0 to 1024 [ 39.925478][ T3721] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.936457][ T3721] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.947593][ T3721] JBD2: no valid journal superblock found [ 39.953407][ T3721] EXT4-fs (loop1): Could not load journal inode [ 39.960799][ T3730] netlink: 'syz.0.95': attribute type 2 has an invalid length. [ 39.968417][ T3730] netlink: 'syz.0.95': attribute type 8 has an invalid length. [ 39.976004][ T3730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.95'. [ 40.028699][ T3721] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 40.172937][ T3735] netlink: 'syz.2.96': attribute type 2 has an invalid length. [ 40.180584][ T3735] netlink: 'syz.2.96': attribute type 8 has an invalid length. [ 40.188348][ T3735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.96'. [ 40.199076][ T3734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 40.291506][ T3737] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 40.417642][ T3745] xt_hashlimit: size too large, truncated to 1048576 [ 40.424418][ T3745] xt_hashlimit: max too large, truncated to 1048576 [ 40.533472][ T3747] loop4: detected capacity change from 0 to 1024 [ 40.548410][ T3747] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.559373][ T3747] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.589829][ T3747] JBD2: no valid journal superblock found [ 40.595606][ T3747] EXT4-fs (loop4): Could not load journal inode [ 40.618944][ T3747] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 40.695251][ T3784] FAULT_INJECTION: forcing a failure. [ 40.695251][ T3784] name failslab, interval 1, probability 0, space 0, times 0 [ 40.708083][ T3784] CPU: 0 UID: 0 PID: 3784 Comm: syz.4.109 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 40.708114][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.708129][ T3784] Call Trace: [ 40.708136][ T3784] [ 40.708150][ T3784] dump_stack_lvl+0xf6/0x150 [ 40.708256][ T3784] dump_stack+0x15/0x1a [ 40.708280][ T3784] should_fail_ex+0x261/0x270 [ 40.708307][ T3784] should_failslab+0x8f/0xb0 [ 40.708346][ T3784] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 40.708431][ T3784] ? shmem_alloc_inode+0x34/0x50 [ 40.708454][ T3784] shmem_alloc_inode+0x34/0x50 [ 40.708476][ T3784] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 40.708499][ T3784] alloc_inode+0x40/0x170 [ 40.708538][ T3784] new_inode+0x1e/0xe0 [ 40.708561][ T3784] shmem_get_inode+0x24e/0x730 [ 40.708668][ T3784] __shmem_file_setup+0x127/0x1f0 [ 40.708788][ T3784] shmem_file_setup+0x3b/0x50 [ 40.708844][ T3784] __se_sys_memfd_create+0x2e1/0x5a0 [ 40.708879][ T3784] __x64_sys_memfd_create+0x31/0x40 [ 40.708910][ T3784] x64_sys_call+0x1163/0x2e10 [ 40.708937][ T3784] do_syscall_64+0xc9/0x1c0 [ 40.709042][ T3784] ? clear_bhb_loop+0x25/0x80 [ 40.709077][ T3784] ? clear_bhb_loop+0x25/0x80 [ 40.709103][ T3784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.709135][ T3784] RIP: 0033:0x7fc4b0f5d169 [ 40.709153][ T3784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.709175][ T3784] RSP: 002b:00007fc4af5c6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 40.709272][ T3784] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007fc4b0f5d169 [ 40.709362][ T3784] RDX: 00007fc4af5c6dec RSI: 0000000000000000 RDI: 00007fc4b0fdf32c [ 40.709377][ T3784] RBP: 0000200000000000 R08: 00007fc4af5c6b07 R09: 0000000000000000 [ 40.709391][ T3784] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 40.709405][ T3784] R13: 00007fc4af5c6dec R14: 00007fc4af5c6df0 R15: 00007ffe91ccb0f8 [ 40.709427][ T3784] [ 40.965435][ T3797] FAULT_INJECTION: forcing a failure. [ 40.965435][ T3797] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.978583][ T3797] CPU: 0 UID: 0 PID: 3797 Comm: syz.0.113 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 40.978657][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.978672][ T3797] Call Trace: [ 40.978679][ T3797] [ 40.978688][ T3797] dump_stack_lvl+0xf6/0x150 [ 40.978716][ T3797] dump_stack+0x15/0x1a [ 40.978736][ T3797] should_fail_ex+0x261/0x270 [ 40.978832][ T3797] should_fail+0xb/0x10 [ 40.978861][ T3797] should_fail_usercopy+0x1a/0x20 [ 40.978895][ T3797] strncpy_from_user+0x25/0x230 [ 40.978921][ T3797] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 40.979033][ T3797] __se_sys_memfd_create+0x218/0x5a0 [ 40.979067][ T3797] __x64_sys_memfd_create+0x31/0x40 [ 40.979099][ T3797] x64_sys_call+0x1163/0x2e10 [ 40.979152][ T3797] do_syscall_64+0xc9/0x1c0 [ 40.979182][ T3797] ? clear_bhb_loop+0x25/0x80 [ 40.979204][ T3797] ? clear_bhb_loop+0x25/0x80 [ 40.979286][ T3797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.979306][ T3797] RIP: 0033:0x7f570bf8d169 [ 40.979319][ T3797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.979393][ T3797] RSP: 002b:00007f570a5eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 40.979415][ T3797] RAX: ffffffffffffffda RBX: 00000000000004c6 RCX: 00007f570bf8d169 [ 40.979430][ T3797] RDX: 00007f570a5eeef0 RSI: 0000000000000000 RDI: 00007f570c00f32c [ 40.979443][ T3797] RBP: 0000200000000b00 R08: 00007f570a5eebb7 R09: 00007f570a5eee40 [ 40.979457][ T3797] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 40.979514][ T3797] R13: 00007f570a5eeef0 R14: 00007f570a5eeeb0 R15: 00002000000000c0 [ 40.979534][ T3797] [ 41.164695][ T3792] loop4: detected capacity change from 0 to 2048 [ 41.210379][ T3792] Alternate GPT is invalid, using primary GPT. [ 41.216858][ T3792] loop4: p2 p3 p7 [ 41.303792][ T3816] loop1: detected capacity change from 0 to 1024 [ 41.329403][ T3816] EXT4-fs: Ignoring removed bh option [ 41.360340][ T3816] EXT4-fs: inline encryption not supported [ 41.366229][ T3816] EXT4-fs: Ignoring removed i_version option [ 41.376102][ T3816] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.518076][ T3816] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.115: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.587637][ T3816] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.115: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.606639][ T3872] SELinux: failed to load policy [ 41.648114][ T3816] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.115: Failed to acquire dquot type 0 [ 41.665878][ T3816] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 41.693005][ T3816] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.115: mark_inode_dirty error [ 41.706709][ T3816] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 41.706747][ T3816] EXT4-fs (loop1): 1 orphan inode deleted [ 41.707221][ T3816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.738745][ T3853] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.753428][ T3853] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 0 [ 41.766238][ T3816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.771802][ T3883] loop2: detected capacity change from 0 to 1024 [ 41.777147][ T3816] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz.1.115: Invalid inode table block 1 in block_group 0 [ 41.796934][ T3816] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 41.797520][ T3883] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.809665][ T3816] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz.1.115: mark_inode_dirty error [ 41.817299][ T3883] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.849956][ T3883] JBD2: no valid journal superblock found [ 41.855701][ T3883] EXT4-fs (loop2): Could not load journal inode [ 41.871660][ T3816] loop1: detected capacity change from 0 to 512 [ 41.882807][ T3886] SELinux: syz.3.124 (3886) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.898339][ T3883] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 41.958253][ T3892] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.203361][ T3903] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 42.211350][ T3903] netlink: 'syz.0.133': attribute type 8 has an invalid length. [ 42.232851][ T3915] loop3: detected capacity change from 0 to 1024 [ 42.244697][ T3915] EXT4-fs: Ignoring removed bh option [ 42.257552][ T3915] EXT4-fs: inline encryption not supported [ 42.263456][ T3915] EXT4-fs: Ignoring removed i_version option [ 42.270852][ T3915] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.283941][ T3915] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 2: comm syz.3.136: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.298958][ T3915] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 48: comm syz.3.136: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.313227][ T3915] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.136: Failed to acquire dquot type 0 [ 42.325531][ T3915] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 42.335511][ T3915] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.136: mark_inode_dirty error [ 42.346926][ T3915] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 42.411343][ T3915] EXT4-fs (loop3): 1 orphan inode deleted [ 42.417620][ T3915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.431135][ T3924] loop1: detected capacity change from 0 to 2048 [ 42.435418][ T3848] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.452380][ T3848] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0 [ 42.464086][ T3920] loop4: detected capacity change from 0 to 1024 [ 42.471659][ T3920] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.482616][ T3920] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.483985][ T3915] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.492645][ T3920] JBD2: no valid journal superblock found [ 42.505162][ T3924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.506967][ T3920] EXT4-fs (loop4): Could not load journal inode [ 42.521838][ T3915] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz.3.136: Invalid inode table block 1 in block_group 0 [ 42.544886][ T3920] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 42.559683][ T3915] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 42.586171][ T3928] loop4: detected capacity change from 0 to 2048 [ 42.593673][ T3915] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz.3.136: mark_inode_dirty error [ 42.618094][ T3928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.656048][ T3915] loop3: detected capacity change from 0 to 512 [ 42.682890][ T3915] loop3: detected capacity change from 0 to 2048 [ 42.703266][ T3915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.719266][ T3915] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.799465][ T3934] loop3: detected capacity change from 0 to 1024 [ 42.806222][ T3934] EXT4-fs: Ignoring removed bh option [ 42.813408][ T3934] EXT4-fs: inline encryption not supported [ 42.819579][ T3934] EXT4-fs: Ignoring removed i_version option [ 42.826827][ T3934] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.842033][ T3934] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 2: comm syz.3.141: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.856208][ T3934] __quota_error: 303 callbacks suppressed [ 42.856224][ T3934] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 42.870661][ T3934] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 48: comm syz.3.141: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.903241][ T3934] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 42.912257][ T3934] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.141: Failed to acquire dquot type 0 [ 42.934658][ T29] audit: type=1326 audit(1744420469.066:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570bf8d169 code=0x7ffc0000 [ 42.937625][ T3937] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.958015][ T29] audit: type=1326 audit(1744420469.066:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570bf8d169 code=0x7ffc0000 [ 42.989712][ T3934] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 43.003476][ T29] audit: type=1326 audit(1744420469.066:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f570bf8d169 code=0x7ffc0000 [ 43.026773][ T29] audit: type=1326 audit(1744420469.066:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570bf8d169 code=0x7ffc0000 [ 43.050203][ T29] audit: type=1326 audit(1744420469.066:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570bf8d169 code=0x7ffc0000 [ 43.059082][ T3934] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.141: mark_inode_dirty error [ 43.073545][ T29] audit: type=1326 audit(1744420469.066:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f570bf8d169 code=0x7ffc0000 [ 43.108023][ T29] audit: type=1326 audit(1744420469.066:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f570bf8d169 code=0x7ffc0000 [ 43.108436][ T3941] loop2: detected capacity change from 0 to 1024 [ 43.131296][ T29] audit: type=1326 audit(1744420469.066:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.0.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f570bf8d169 code=0x7ffc0000 [ 43.161105][ T3941] EXT4-fs: Ignoring removed bh option [ 43.166534][ T3941] EXT4-fs: inline encryption not supported [ 43.169080][ T3934] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 43.172472][ T3941] EXT4-fs: Ignoring removed i_version option [ 43.189074][ T3934] EXT4-fs (loop3): 1 orphan inode deleted [ 43.195363][ T3934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.216947][ T3853] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.243376][ T3853] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 0 [ 43.258064][ T3941] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.276494][ T3934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.308914][ T3934] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz.3.141: Invalid inode table block 1 in block_group 0 [ 43.311700][ T3941] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 2: comm syz.2.142: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.321873][ T3934] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 43.345139][ T3934] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz.3.141: mark_inode_dirty error [ 43.356891][ T3941] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 48: comm syz.2.142: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.398069][ T3941] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.142: Failed to acquire dquot type 0 [ 43.439422][ T3934] loop3: detected capacity change from 0 to 512 [ 43.446134][ T3941] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 43.461718][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.479074][ T3941] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.142: mark_inode_dirty error [ 43.528009][ T3941] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 43.547158][ T3941] EXT4-fs (loop2): 1 orphan inode deleted [ 43.558064][ T3405] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.558169][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.598007][ T3405] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 43.614640][ T3941] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.619428][ T3955] loop3: detected capacity change from 0 to 764 [ 43.642873][ T3941] EXT4-fs error (device loop2): __ext4_get_inode_loc:4449: comm syz.2.142: Invalid inode table block 1 in block_group 0 [ 43.656343][ T3941] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 43.667366][ T3941] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz.2.142: mark_inode_dirty error [ 43.672541][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.711665][ T3941] loop2: detected capacity change from 0 to 512 [ 43.766475][ T3958] __nla_validate_parse: 3 callbacks suppressed [ 43.766491][ T3958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 43.774794][ T3941] loop2: detected capacity change from 0 to 2048 [ 43.809435][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.823829][ T3941] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.992871][ T3974] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.052642][ T3978] netlink: 64 bytes leftover after parsing attributes in process `syz.2.156'. [ 44.065627][ T3978] loop2: detected capacity change from 0 to 512 [ 44.072875][ T3978] EXT4-fs: Ignoring removed nobh option [ 44.080168][ T3978] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.102361][ T3978] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #16: comm syz.2.156: corrupted inode contents [ 44.114692][ T3978] EXT4-fs (loop2): Remounting filesystem read-only [ 44.121657][ T3978] EXT4-fs (loop2): 1 truncate cleaned up [ 44.128052][ T3978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.140890][ T3978] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.151055][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.161794][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.183750][ T51] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.194862][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.272015][ T3986] loop2: detected capacity change from 0 to 164 [ 44.374213][ T3995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 44.480558][ T3995] loop1: detected capacity change from 0 to 1024 [ 44.487495][ T3995] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.499999][ T3995] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.513893][ T3995] JBD2: no valid journal superblock found [ 44.519739][ T3995] EXT4-fs (loop1): Could not load journal inode [ 44.538172][ T3995] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 44.619474][ T4003] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.655091][ T4004] loop4: detected capacity change from 0 to 164 [ 44.711721][ T4008] FAULT_INJECTION: forcing a failure. [ 44.711721][ T4008] name failslab, interval 1, probability 0, space 0, times 0 [ 44.724466][ T4008] CPU: 1 UID: 0 PID: 4008 Comm: syz.4.168 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 44.724496][ T4008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.724510][ T4008] Call Trace: [ 44.724516][ T4008] [ 44.724585][ T4008] dump_stack_lvl+0xf6/0x150 [ 44.724613][ T4008] dump_stack+0x15/0x1a [ 44.724633][ T4008] should_fail_ex+0x261/0x270 [ 44.724700][ T4008] should_failslab+0x8f/0xb0 [ 44.724730][ T4008] kmem_cache_alloc_noprof+0x59/0x340 [ 44.724755][ T4008] ? fcntl_dirnotify+0x1bd/0x590 [ 44.724790][ T4008] fcntl_dirnotify+0x1bd/0x590 [ 44.724823][ T4008] ? vfs_write+0x669/0x950 [ 44.724892][ T4008] ? putname+0xe1/0x100 [ 44.724915][ T4008] do_fcntl+0x642/0xe20 [ 44.724946][ T4008] __se_sys_fcntl+0xbd/0x1b0 [ 44.724970][ T4008] __x64_sys_fcntl+0x43/0x50 [ 44.724991][ T4008] x64_sys_call+0x1ecc/0x2e10 [ 44.725075][ T4008] do_syscall_64+0xc9/0x1c0 [ 44.725104][ T4008] ? clear_bhb_loop+0x25/0x80 [ 44.725136][ T4008] ? clear_bhb_loop+0x25/0x80 [ 44.725155][ T4008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.725239][ T4008] RIP: 0033:0x7fc4b0f5d169 [ 44.725256][ T4008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.725272][ T4008] RSP: 002b:00007fc4af5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 44.725294][ T4008] RAX: ffffffffffffffda RBX: 00007fc4b1175fa0 RCX: 00007fc4b0f5d169 [ 44.725309][ T4008] RDX: 000000008000003d RSI: 0000000000000402 RDI: 0000000000000003 [ 44.725323][ T4008] RBP: 00007fc4af5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.725336][ T4008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.725349][ T4008] R13: 0000000000000000 R14: 00007fc4b1175fa0 R15: 00007ffe91ccb0f8 [ 44.725417][ T4008] [ 44.936621][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 44.965379][ T4012] xt_connbytes: Forcing CT accounting to be enabled [ 44.979880][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.990104][ T4012] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 45.002302][ T4012] xt_bpf: check failed: parse error [ 45.009398][ T4018] syzkaller0: entered allmulticast mode [ 45.030878][ T4015] syzkaller0: left allmulticast mode [ 45.060192][ C0] hrtimer: interrupt took 27030 ns [ 45.068861][ T4026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'. [ 45.156343][ T4034] netlink: 'syz.3.177': attribute type 2 has an invalid length. [ 45.164058][ T4034] netlink: 'syz.3.177': attribute type 8 has an invalid length. [ 45.171720][ T4034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.177'. [ 45.186507][ T4026] loop1: detected capacity change from 0 to 1024 [ 45.292168][ T4026] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.303311][ T4026] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.314730][ T4026] JBD2: no valid journal superblock found [ 45.320614][ T4026] EXT4-fs (loop1): Could not load journal inode [ 45.336424][ T4026] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 45.424465][ T4040] loop2: detected capacity change from 0 to 512 [ 45.477900][ T4040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.518049][ T4040] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.548036][ T4040] EXT4-fs (loop2): 1 truncate cleaned up [ 45.555857][ T4040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.569519][ T4045] FAULT_INJECTION: forcing a failure. [ 45.569519][ T4045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.582652][ T4045] CPU: 1 UID: 0 PID: 4045 Comm: syz.0.181 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 45.582684][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.582698][ T4045] Call Trace: [ 45.582768][ T4045] [ 45.582776][ T4045] dump_stack_lvl+0xf6/0x150 [ 45.582803][ T4045] dump_stack+0x15/0x1a [ 45.582824][ T4045] should_fail_ex+0x261/0x270 [ 45.582857][ T4045] should_fail+0xb/0x10 [ 45.582955][ T4045] should_fail_usercopy+0x1a/0x20 [ 45.582990][ T4045] strncpy_from_user+0x25/0x230 [ 45.583019][ T4045] strncpy_from_user_nofault+0x66/0xe0 [ 45.583045][ T4045] bpf_probe_read_compat_str+0xb3/0x130 [ 45.583077][ T4045] bpf_prog_597e1462992804d8+0x46/0x48 [ 45.583127][ T4045] bpf_trace_run2+0x106/0x1d0 [ 45.583173][ T4045] ? rtnl_newlink+0x1047/0x12d0 [ 45.583213][ T4045] ? rtnl_newlink+0x1047/0x12d0 [ 45.583304][ T4045] ? rtnl_newlink+0x1047/0x12d0 [ 45.583345][ T4045] __traceiter_kfree+0x2b/0x50 [ 45.583368][ T4045] kfree+0x273/0x320 [ 45.583393][ T4045] rtnl_newlink+0x1047/0x12d0 [ 45.583463][ T4045] ? fixup_exception+0x814/0xd30 [ 45.583522][ T4045] ? __pfx_rtnl_newlink+0x10/0x10 [ 45.583560][ T4045] rtnetlink_rcv_msg+0x65a/0x740 [ 45.583648][ T4045] ? should_fail_ex+0xd7/0x270 [ 45.583674][ T4045] ? ref_tracker_free+0x3b8/0x420 [ 45.583735][ T4045] netlink_rcv_skb+0x12f/0x230 [ 45.583763][ T4045] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 45.583805][ T4045] rtnetlink_rcv+0x1c/0x30 [ 45.583835][ T4045] netlink_unicast+0x605/0x6c0 [ 45.583981][ T4045] netlink_sendmsg+0x609/0x720 [ 45.584025][ T4045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.584056][ T4045] __sock_sendmsg+0x140/0x180 [ 45.584076][ T4045] ____sys_sendmsg+0x350/0x4e0 [ 45.584113][ T4045] __sys_sendmsg+0x1a0/0x240 [ 45.584195][ T4045] __x64_sys_sendmsg+0x46/0x50 [ 45.584228][ T4045] x64_sys_call+0x26f3/0x2e10 [ 45.584254][ T4045] do_syscall_64+0xc9/0x1c0 [ 45.584290][ T4045] ? clear_bhb_loop+0x25/0x80 [ 45.584316][ T4045] ? clear_bhb_loop+0x25/0x80 [ 45.584407][ T4045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.584431][ T4045] RIP: 0033:0x7f570bf8d169 [ 45.584448][ T4045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.584483][ T4045] RSP: 002b:00007f570a5ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.584506][ T4045] RAX: ffffffffffffffda RBX: 00007f570c1a5fa0 RCX: 00007f570bf8d169 [ 45.584520][ T4045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 45.584533][ T4045] RBP: 00007f570a5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 45.584549][ T4045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.584560][ T4045] R13: 0000000000000000 R14: 00007f570c1a5fa0 R15: 00007ffc5534a838 [ 45.584646][ T4045] [ 45.895036][ T4047] netlink: 72 bytes leftover after parsing attributes in process `syz.0.182'. [ 45.908492][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.003051][ T4057] syzkaller0: entered allmulticast mode [ 46.018767][ T4051] loop2: detected capacity change from 0 to 1024 [ 46.027551][ T4051] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.038500][ T4051] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.048413][ T4051] JBD2: no valid journal superblock found [ 46.054158][ T4051] EXT4-fs (loop2): Could not load journal inode [ 46.060876][ T4056] syzkaller0: left allmulticast mode [ 46.067303][ T4051] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 46.105957][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 46.144174][ T4066] loop2: detected capacity change from 0 to 1024 [ 46.153112][ T4066] EXT4-fs: Ignoring removed bh option [ 46.160025][ T4066] EXT4-fs: inline encryption not supported [ 46.165895][ T4066] EXT4-fs: Ignoring removed i_version option [ 46.177242][ T4066] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.201453][ T4066] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 2: comm syz.2.191: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.201602][ T4066] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 48: comm syz.2.191: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.229750][ T4066] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.191: Failed to acquire dquot type 0 [ 46.229902][ T4066] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 46.267859][ T4070] loop3: detected capacity change from 0 to 512 [ 46.274152][ T4066] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.191: mark_inode_dirty error [ 46.286126][ T4070] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.295199][ T4070] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 46.303732][ T4066] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 46.328331][ T4066] EXT4-fs (loop2): 1 orphan inode deleted [ 46.345621][ T4066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.349062][ T4077] loop1: detected capacity change from 0 to 1024 [ 46.364276][ T51] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.364472][ T4077] EXT4-fs: Ignoring removed bh option [ 46.383287][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 46.385093][ T4077] EXT4-fs: inline encryption not supported [ 46.396278][ T4070] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 46.401144][ T4077] EXT4-fs: Ignoring removed i_version option [ 46.414101][ T4070] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 46.424173][ T4077] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.425130][ T4066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.425403][ T4066] EXT4-fs error (device loop2): __ext4_get_inode_loc:4449: comm syz.2.191: Invalid inode table block 1 in block_group 0 [ 46.436582][ T4070] System zones: [ 46.447247][ T4077] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.194: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.457078][ T4070] 0-2, 18-18, 34-34 [ 46.462006][ T4066] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 46.474438][ T4070] [ 46.478603][ T4066] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz.2.191: mark_inode_dirty error [ 46.487933][ T4070] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.501414][ T4077] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.194: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.516424][ T4070] EXT4-fs (loop3): 1 truncate cleaned up [ 46.531214][ T4077] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.194: Failed to acquire dquot type 0 [ 46.546753][ T4077] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 46.555731][ T4070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.556462][ T4077] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.194: mark_inode_dirty error [ 46.579805][ T4066] loop2: detected capacity change from 0 to 512 [ 46.592989][ T4077] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 46.603533][ T4077] EXT4-fs (loop1): 1 orphan inode deleted [ 46.609986][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.622199][ T3848] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.636770][ T4066] loop2: detected capacity change from 0 to 2048 [ 46.637499][ T3848] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0 [ 46.656241][ T4077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.659414][ T4066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.665554][ T4077] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz.1.194: Invalid inode table block 1 in block_group 0 [ 46.679122][ T4066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.691375][ T4077] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 46.710493][ T4077] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz.1.194: mark_inode_dirty error [ 46.743743][ T4077] loop1: detected capacity change from 0 to 512 [ 46.763911][ T4077] loop1: detected capacity change from 0 to 2048 [ 46.797978][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.814091][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.825336][ T4077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.861831][ T4089] loop3: detected capacity change from 0 to 2048 [ 46.907693][ T4089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.940768][ T4093] loop2: detected capacity change from 0 to 1024 [ 46.946278][ T4096] syzkaller0: entered allmulticast mode [ 46.949479][ T4093] EXT4-fs: Ignoring removed bh option [ 46.958837][ T4093] EXT4-fs: inline encryption not supported [ 46.961133][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 46.964702][ T4093] EXT4-fs: Ignoring removed i_version option [ 46.996225][ T4094] syzkaller0: left allmulticast mode [ 47.025449][ T4093] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.104115][ T4101] loop1: detected capacity change from 0 to 1024 [ 47.114105][ T4101] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.125138][ T4101] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.130979][ T4093] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 2: comm syz.2.198: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.142646][ T4101] JBD2: no valid journal superblock found [ 47.150366][ T4093] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 48: comm syz.2.198: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.154235][ T4101] EXT4-fs (loop1): Could not load journal inode [ 47.212219][ T4093] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.198: Failed to acquire dquot type 0 [ 47.238391][ T4101] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 47.335240][ T4093] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 47.348363][ T4093] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.198: mark_inode_dirty error [ 47.369380][ T4093] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 47.380034][ T4093] EXT4-fs (loop2): 1 orphan inode deleted [ 47.396090][ T4093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.408250][ T51] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.426308][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 47.473810][ T4093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.505528][ T4093] EXT4-fs error (device loop2): __ext4_get_inode_loc:4449: comm syz.2.198: Invalid inode table block 1 in block_group 0 [ 47.539626][ T4117] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 47.564395][ T4093] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 47.584239][ T4093] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz.2.198: mark_inode_dirty error [ 47.694268][ T4093] loop2: detected capacity change from 0 to 512 [ 47.729411][ T4133] syzkaller0: entered allmulticast mode [ 47.742010][ T4093] loop2: detected capacity change from 0 to 2048 [ 47.764271][ T4093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.779977][ T4093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.789400][ T4132] syzkaller0: left allmulticast mode [ 47.819891][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.910001][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 47.910018][ T29] audit: type=1326 audit(1744420474.046:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 47.915163][ T4149] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.916214][ T29] audit: type=1326 audit(1744420474.046:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 47.970347][ T29] audit: type=1326 audit(1744420474.046:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 47.993761][ T29] audit: type=1326 audit(1744420474.046:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 48.017159][ T29] audit: type=1326 audit(1744420474.046:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 48.040516][ T29] audit: type=1326 audit(1744420474.046:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 48.063862][ T29] audit: type=1326 audit(1744420474.046:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 48.087296][ T29] audit: type=1326 audit(1744420474.046:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 48.094094][ T4143] loop4: detected capacity change from 0 to 1024 [ 48.110640][ T29] audit: type=1326 audit(1744420474.046:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 48.140353][ T29] audit: type=1326 audit(1744420474.046:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ee4d169 code=0x7ffc0000 [ 48.172332][ T4143] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.183297][ T4143] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.202290][ T4143] JBD2: no valid journal superblock found [ 48.208110][ T4143] EXT4-fs (loop4): Could not load journal inode [ 48.239211][ T4143] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 48.271429][ T4163] SELinux: ebitmap: truncated map [ 48.277976][ T4163] SELinux: failed to load policy [ 48.354419][ T4171] syzkaller0: entered allmulticast mode [ 48.494506][ T4170] syzkaller0: left allmulticast mode [ 48.509911][ T4175] SELinux: security policydb version 17 (MLS) not backwards compatible [ 48.518575][ T4175] SELinux: failed to load policy [ 48.540449][ T4180] FAULT_INJECTION: forcing a failure. [ 48.540449][ T4180] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.553796][ T4180] CPU: 1 UID: 0 PID: 4180 Comm: syz.3.229 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 48.553859][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.553870][ T4180] Call Trace: [ 48.553875][ T4180] [ 48.553881][ T4180] dump_stack_lvl+0xf6/0x150 [ 48.553908][ T4180] dump_stack+0x15/0x1a [ 48.553938][ T4180] should_fail_ex+0x261/0x270 [ 48.553968][ T4180] should_fail_alloc_page+0xfd/0x110 [ 48.554038][ T4180] __alloc_frozen_pages_noprof+0x11d/0x360 [ 48.554153][ T4180] alloc_pages_mpol+0xb6/0x260 [ 48.554177][ T4180] alloc_pages_noprof+0xe8/0x130 [ 48.554222][ T4180] __pmd_alloc+0x4d/0x440 [ 48.554244][ T4180] handle_mm_fault+0x188d/0x2e80 [ 48.554311][ T4180] ? mas_walk+0x204/0x320 [ 48.554369][ T4180] ? __rcu_read_unlock+0x4e/0x70 [ 48.554407][ T4180] exc_page_fault+0x3b9/0x6a0 [ 48.554438][ T4180] ? do_syscall_64+0xd6/0x1c0 [ 48.554486][ T4180] asm_exc_page_fault+0x26/0x30 [ 48.554510][ T4180] RIP: 0033:0x7fc3d85b5cb9 [ 48.554525][ T4180] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 48.554543][ T4180] RSP: 002b:00007fc3d6c3e7c8 EFLAGS: 00010283 [ 48.554562][ T4180] RAX: 0000000000000000 RBX: 00007fc3d6c3ed30 RCX: 00007fc3d87be120 [ 48.554577][ T4180] RDX: 0000200000000000 RSI: 00007fc3d865e6aa RDI: 0000200000000000 [ 48.554592][ T4180] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 48.554680][ T4180] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 48.554695][ T4180] R13: 00007fc3d6c3eeb0 R14: 0000200000000000 R15: 0000000000000000 [ 48.554716][ T4180] [ 48.554725][ T4180] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 48.577474][ T4183] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 48.740179][ T4183] netlink: 'syz.1.227': attribute type 8 has an invalid length. [ 48.808781][ T4190] __nla_validate_parse: 5 callbacks suppressed [ 48.808799][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 48.943329][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 48.965624][ T4194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.000760][ T4200] loop4: detected capacity change from 0 to 1024 [ 49.007507][ T4200] EXT4-fs: Ignoring removed bh option [ 49.050660][ T4200] EXT4-fs: inline encryption not supported [ 49.056555][ T4200] EXT4-fs: Ignoring removed i_version option [ 49.079110][ T4200] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.106600][ T4204] loop3: detected capacity change from 0 to 1024 [ 49.115508][ T4198] loop2: detected capacity change from 0 to 1024 [ 49.120142][ T4200] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.237: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.122876][ T4204] EXT4-fs: Ignoring removed bh option [ 49.141415][ T4204] EXT4-fs: inline encryption not supported [ 49.147363][ T4204] EXT4-fs: Ignoring removed i_version option [ 49.154311][ T4198] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.165316][ T4198] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.175360][ T4198] JBD2: no valid journal superblock found [ 49.181143][ T4198] EXT4-fs (loop2): Could not load journal inode [ 49.187555][ T4204] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.197999][ T4200] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.237: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.220853][ T4200] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.237: Failed to acquire dquot type 0 [ 49.229926][ T4198] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 49.309415][ T4204] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 2: comm syz.3.238: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.323611][ T4200] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 49.341401][ T4200] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.237: mark_inode_dirty error [ 49.361277][ T4204] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 48: comm syz.3.238: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.398478][ T4212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'. [ 49.399319][ T4200] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 49.421681][ T4204] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.238: Failed to acquire dquot type 0 [ 49.431061][ T4214] loop1: detected capacity change from 0 to 256 [ 49.449498][ T4217] syzkaller0: entered allmulticast mode [ 49.450278][ T4204] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 49.468941][ T4200] EXT4-fs (loop4): 1 orphan inode deleted [ 49.469837][ T4214] msdos: Bad value for 'gid' [ 49.479443][ T4214] msdos: Bad value for 'gid' [ 49.484749][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.497225][ T3405] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.497281][ T4216] syzkaller0: left allmulticast mode [ 49.518975][ T4204] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.238: mark_inode_dirty error [ 49.530228][ T3405] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 49.543338][ T4200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.552719][ T4204] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 49.568227][ T4200] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz.4.237: Invalid inode table block 1 in block_group 0 [ 49.580943][ T4204] EXT4-fs (loop3): 1 orphan inode deleted [ 49.587107][ T4204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.599422][ T4200] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 49.599756][ T4221] FAULT_INJECTION: forcing a failure. [ 49.599756][ T4221] name failslab, interval 1, probability 0, space 0, times 0 [ 49.609996][ T4200] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.237: mark_inode_dirty error [ 49.621473][ T4221] CPU: 1 UID: 0 PID: 4221 Comm: syz.0.244 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 49.621507][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.621523][ T4221] Call Trace: [ 49.621532][ T4221] [ 49.621592][ T4221] dump_stack_lvl+0xf6/0x150 [ 49.621621][ T4221] dump_stack+0x15/0x1a [ 49.621643][ T4221] should_fail_ex+0x261/0x270 [ 49.621750][ T4221] should_failslab+0x8f/0xb0 [ 49.621789][ T4221] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 49.621818][ T4221] ? __alloc_skb+0x10d/0x320 [ 49.621849][ T4221] __alloc_skb+0x10d/0x320 [ 49.622009][ T4221] pfkey_sendmsg+0x10f/0x950 [ 49.622035][ T4221] ? avc_has_perm+0xd6/0x150 [ 49.622086][ T4221] ? selinux_socket_sendmsg+0x18a/0x1c0 [ 49.622130][ T4221] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 49.622227][ T4221] __sock_sendmsg+0x140/0x180 [ 49.622363][ T4221] ____sys_sendmsg+0x350/0x4e0 [ 49.622402][ T4221] __sys_sendmsg+0x1a0/0x240 [ 49.622453][ T4221] __x64_sys_sendmsg+0x46/0x50 [ 49.622559][ T4221] x64_sys_call+0x26f3/0x2e10 [ 49.622593][ T4221] do_syscall_64+0xc9/0x1c0 [ 49.622630][ T4221] ? clear_bhb_loop+0x25/0x80 [ 49.622656][ T4221] ? clear_bhb_loop+0x25/0x80 [ 49.622714][ T4221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.622740][ T4221] RIP: 0033:0x7f570bf8d169 [ 49.622780][ T4221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.622802][ T4221] RSP: 002b:00007f570a5ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.622824][ T4221] RAX: ffffffffffffffda RBX: 00007f570c1a5fa0 RCX: 00007f570bf8d169 [ 49.622915][ T4221] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 49.622930][ T4221] RBP: 00007f570a5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 49.622945][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.622961][ T4221] R13: 0000000000000000 R14: 00007f570c1a5fa0 R15: 00007ffc5534a838 [ 49.622984][ T4221] [ 49.623078][ T31] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.858163][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 49.889749][ T4204] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.899381][ T4204] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz.3.238: Invalid inode table block 1 in block_group 0 [ 49.918349][ T4200] loop4: detected capacity change from 0 to 512 [ 49.918379][ T4204] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 49.935883][ T4204] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz.3.238: mark_inode_dirty error [ 49.976039][ T3004] ================================================================== [ 49.984158][ T3004] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 49.992507][ T3004] [ 49.994835][ T3004] write to 0xffff8881191b3538 of 8 bytes by task 3472 on cpu 0: [ 50.002471][ T3004] inode_set_ctime_current+0x527/0x7a0 [ 50.007947][ T3004] shmem_unlink+0x114/0x170 [ 50.012463][ T3004] vfs_unlink+0x275/0x430 [ 50.016809][ T3004] do_unlinkat+0x21b/0x4b0 [ 50.021243][ T3004] __x64_sys_unlink+0x2e/0x40 [ 50.025934][ T3004] x64_sys_call+0x2358/0x2e10 [ 50.030620][ T3004] do_syscall_64+0xc9/0x1c0 [ 50.035138][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.041042][ T3004] [ 50.043373][ T3004] read to 0xffff8881191b3538 of 8 bytes by task 3004 on cpu 1: [ 50.050916][ T3004] atime_needs_update+0x2ed/0x3e0 [ 50.055947][ T3004] touch_atime+0x4a/0x350 [ 50.060292][ T3004] do_readlinkat+0x12d/0x210 [ 50.064890][ T3004] __x64_sys_readlink+0x47/0x60 [ 50.069748][ T3004] x64_sys_call+0x2a81/0x2e10 [ 50.074436][ T3004] do_syscall_64+0xc9/0x1c0 [ 50.078955][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.084858][ T3004] [ 50.087178][ T3004] value changed: 0x0000000067f9be7b -> 0x0000000067f9be7c [ 50.094283][ T3004] [ 50.096603][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 50.102765][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 50.114753][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.124813][ T3004] ================================================================== [ 50.133222][ T4200] loop4: detected capacity change from 0 to 2048 [ 50.157144][ T4204] loop3: detected capacity change from 0 to 512 [ 50.201902][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.215344][ T4200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.