last executing test programs: 1m39.851420078s ago: executing program 2 (id=104): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0xffffffff, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m39.233087785s ago: executing program 2 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r2, r3, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 1m39.205418806s ago: executing program 2 (id=115): mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0x114, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0) 1m39.025443008s ago: executing program 2 (id=116): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m38.988891228s ago: executing program 2 (id=118): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004004) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0xa2cb4c, &(0x7f0000000b40)={[{@noauto_da_alloc}, {@journal_checksum}]}, 0x2, 0x46a, &(0x7f00000006c0)="$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") bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r1}, 0x18) 1m38.639047054s ago: executing program 2 (id=125): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m38.621161223s ago: executing program 32 (id=125): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 47.270786348s ago: executing program 1 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 46.649686156s ago: executing program 1 (id=1042): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, &(0x7f0000000080)) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 46.542162457s ago: executing program 1 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3, 0x0, 0xc7ad}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x48, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x300, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 46.36818767s ago: executing program 1 (id=1050): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/173, 0xad) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 45.975331855s ago: executing program 1 (id=1057): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 45.690635258s ago: executing program 1 (id=1064): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 45.649322769s ago: executing program 33 (id=1064): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2.707525645s ago: executing program 3 (id=1952): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2.543818817s ago: executing program 4 (id=1956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 2.527310347s ago: executing program 3 (id=1957): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) creat(0x0, 0x71283578ac7c5cd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r1, 0x0, 0xffff, 0x8009) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380)=0x3c, 0xfcb5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x18}) 2.455155008s ago: executing program 4 (id=1958): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4f21, @local}, 0x42) syz_emit_ethernet(0x73, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) close(r0) 2.450130258s ago: executing program 4 (id=1959): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0xfd32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x9) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="1020", 0x2, 0x4, &(0x7f0000000940)={0x11, 0x8100, 0x0, 0x1, 0x9, 0x6, @random="ec7336c86934"}, 0x14) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 2.436677708s ago: executing program 0 (id=1960): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0xd4806, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x0, 0x70b, &(0x7f00000006c0)="$eJzs3V1vG1kZB/D/sR3bcaGqAFWrqtucpqyUiuCOnW0qKyAxjI+dAdtjzUwgkZBWhSarqE6BtkjUN21ueJGWL8Dd3nDBh1iJC672W8AVSCsQEmIFQrOaMzN+HTtxkzb78v9Fux7PPHPOM8fTORln5gyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgIwqobRkWgZXd2duVsVt112smbLKaWR6Ut4XY0cXtenUthvYAI/0OxiDei2W98bRhyNfzfKq5H766jGL4U0b909crWV3OZZP05Cb8MLFrgk2f9h/d7vf3Hp4jNYuHiLxIypwhqqo7tOXbbbCppe46sbW4ad7YbnmzYLeXteb5qS8tVGd9x5Zp1W1ZqtQ2pynvOTqdZN1sqmXnvm1XD2JTfK0QfNICyZ23brZbdaeqYcHEYc0++96MoQJltKQ8Oe/sbI/k8T2vjMKiSknxmNDgMqp60uVWjWq1UqtXK5t3a3XuGkZuaYYSEMYCpiHPfaekz5nwP4ERnkLHq/zP+IoAWiuhgB7uQqT8W6nDhoD1jeSzp/9+6o+bWO9r/J7380nDxNej+/0b07sas/n9GLhJSr5C2RMyYv9jPks5I4gmeoY+HuI8eetjH43MoW0KunLmEvBG35LnkM/OnCYUObHhwYKMNE018GTKeI1HDJjZh4B1sowEPEg3YaEHBwx48+FDhHpUPM1Uw4cOBC4k1WLgNiQpqqGEDEgpl7MHBDjpoog4T/wmC4ACHut034nxepGw1kqDKjI0oIJfsd/uoztnaWf3/j59Ha8f9v8H+/4sq2g8K0cuH82KIPgWC+Px/QSuvJhsiIiIiIiIiehWE/vZd6L/KvwkgQMNuKf3l8XISU7jQDImIiIiIiIjorASCAq5DRFfl402Iwfk/EREREREREX1OCH2PnQBQ0hf1i+HtUqf5EiD7GlIkIiIiIiIiojPSd/7fyAOBvsp/BWKh838iIiIiIiIi+gz4zcgY+7lsPMZukPxZPwNg5a8F8cE/CnCXxHF39+viyAyXmEdxzNQVAH7jmrgcD9SrX/IA9DtLXRdxbRL4d/LtQ+ijg/Sx/l8EESGEO5FAPjtawIwERFjzZi5+h/dwM1rlZjzO/IN+BnpJNKJwqWG3VNlyWlsVmObljK92/V88Ovwl4A628+Cwt1/+yU97D3Qux+Gs46Ow0Odj6WTSG2OYy1M93oK+5yJtdONlNJIqf9tpl4Su10i2PwvzKDNa0fT2PwcQ17kMRFv5K6xGn9lqEMWW+oMR9wWwogd/qJT1Rza29e6SGGZRmdzytA9ixpYXdRa3ophba7eil6RNwnIyoviNLFAtT38GY1lUR7M4oS2uXtkS/5xo//lZQBTDttgIs/hTWNBEFj/8IFp5o7ubDI9xmiym9gIiootyMOyF9CDmU2PsJ91DclA7sd8ZHOWQA+Kj3IzefVhLEPcfSe/+9PdB1ENlgVz8t4n0WpJ+BeERfU3ocvLRgO65aylHdKP8cRAE5uUiRo/o/49/zxj0safr3Y6DIJg8ov9x+AykOO2pLP4bBMFWRfckv5voVd8PV3h/Zr1eq5oNm/DO06Of6QHwQ+/uv7v/qFrd2DTeNoy7VSzpXxXilyzY9xAR0ZSTn7GjIzJzIsTbuBmVcfPB39+KpsZ6vK/ElxRod4AeHmA9eYTASnqpJRzg2/+KLkNYj85agdVS9Frqy6tXtvT4hEnsocjpJ7yszzyr031pFKsvb6gOYpPnDk2eAQ5jN17xp0BERPR6rc7oh4Gx/h/j/X9xrP9fx1oUsXYt9by7NHJJ4Xpydjw4pe9fOk6NrZyc/HfOuTGIiIi+IJT7kSj5vxaua3ffqdRqFdPfVtJ1rO9L1643lbQ7vnKtbbPTVLLrOr5jOS3ZdVGwl5UnvZ1u13F92XBc2XU8e1c/+V3Gj373VNvs+LbldVvK9JS0nI5vWr6s254luzvfbdnetnL1yl5XWXbDtkzfdjrSc3ZcS5Wl9JQaCbTrquPbDTuc7Miua7dNd0/+wGnttJWsK89y7a7vRAUmddmdhuO2dbFlBAs/6JCIiOjz6Mmz/sP7vd7+48mJ5fDUPJpzjBkx0xP5lAI5RhAREdGnzLC7XmCl4itMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIppx8S9+CE0tpNwsCgzk/vxzPwQsMbzGcKkfgrPl87P5ZD+z3MqtnFq00uSWi//DDOcHLgzlJ84/GHC9SKa4AL90+f/sScEnPQTQnd447wPT9o+e+j6VNfOsgatFZMXrh+KKJ21h6vdz5/3MIJx79YXqRCFs+CIJg/uqF8TbMn35/zgF4nD/DR/DaDkFEdEE+CQAA//+fmz7u") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.387229809s ago: executing program 4 (id=1961): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) 2.3010289s ago: executing program 3 (id=1962): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.213840001s ago: executing program 0 (id=1963): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) 2.000159494s ago: executing program 6 (id=1964): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.924081875s ago: executing program 6 (id=1965): r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="01e95fd7490000000a004204ffffffffff0100000000000000000000000000017ad50000000000000000000000000000000000000000000000000000000000000000000000000000000000a1aafc9514"], 0x90) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x51]}, 0x8, 0xc0800) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0xca, &(0x7f00000009c0)={@random="092d83efdbf5", @multicast, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@llc={0x4, {@llc={0xfc, 0xf0, "ef95", "3e8e443374ab06ecc41a323ac4b7c2632241cd32d2b6b4391e17754fc19fda68a4fa0c98176eefa14503743d87c708cd43bef6ea3e351450d802cac6a3a14596818f47d2319a4cfedfb38374540cbf8a0ac0087dd321d4b3a8f8c4bfd90f2bd80484f0c6b8f2abaffe8c394a5e9544593dc4c6bbd4b010f66d0edc1d074ed5ef5a9f8af468620d6029a390c4d903b98bd8281305c17a053b9b1bed1a223a673c2e6d6db2721cc5a655ba44235e19b456ec220720"}}}}}, &(0x7f00000003c0)={0x0, 0x4, [0xc9d, 0x44e, 0xdc5, 0x817]}) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f50401"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x111100, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.56062531s ago: executing program 4 (id=1969): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.393706502s ago: executing program 3 (id=1972): syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.286674183s ago: executing program 5 (id=1973): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 1.164565445s ago: executing program 5 (id=1974): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100072ecf001c0007800c00018008000140e00000020c00028008000140e002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 1.155597895s ago: executing program 0 (id=1975): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12141, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.099957256s ago: executing program 6 (id=1976): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x2008085, &(0x7f0000000240)=ANY=[], 0x1, 0x23e, &(0x7f0000000bc0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1ddd, &(0x7f00000000c0)={0x0, 0x45d7, 0x2, 0x0, 0x0, 0x0, r3}) 535.986103ms ago: executing program 6 (id=1977): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) sendfile(r1, r1, 0x0, 0x800000009) 535.243243ms ago: executing program 0 (id=1988): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 511.278134ms ago: executing program 3 (id=1978): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) 399.477135ms ago: executing program 0 (id=1979): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x800) sendmsg$NFT_BATCH(r3, 0x0, 0x24040880) fchown(0xffffffffffffffff, 0xee01, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0xc0, "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"}) 356.086865ms ago: executing program 5 (id=1980): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 271.004746ms ago: executing program 5 (id=1981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 261.611917ms ago: executing program 6 (id=1983): sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x1) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048080}, 0x40044) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) 234.263637ms ago: executing program 0 (id=1994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 215.245357ms ago: executing program 5 (id=1984): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB='('], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) 142.290108ms ago: executing program 4 (id=1985): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, 0x0, &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfffc, 0x8}, {0x6}}}, 0x24}}, 0x20040000) 142.117748ms ago: executing program 6 (id=1986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 141.606318ms ago: executing program 3 (id=1987): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}}, 0x0) creat(0x0, 0x0) setreuid(0xee01, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[], 0x32, 0xfffffffffffffffc) ioprio_set$uid(0x3, 0xee01, 0x2007) 0s ago: executing program 5 (id=1989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 65, nr_sectors = 8 limit=128 [ 89.908320][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.954484][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.955527][ T6863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6863 comm=syz.5.893 [ 89.975586][ T6863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6863 comm=syz.5.893 [ 89.977348][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.991104][ T6851] syz.3.887: attempt to access beyond end of device [ 89.991104][ T6851] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 90.035060][ T6851] syz.3.887: attempt to access beyond end of device [ 90.035060][ T6851] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 90.353514][ T6888] loop3: detected capacity change from 0 to 128 [ 91.364669][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 91.364687][ T29] audit: type=1400 audit(1745479782.053:1386): avc: denied { create } for pid=6921 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.440525][ T6930] loop0: detected capacity change from 0 to 512 [ 91.445044][ T29] audit: type=1326 audit(1745479782.123:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff69e969 code=0x7ffc0000 [ 91.473485][ T29] audit: type=1326 audit(1745479782.123:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff69e969 code=0x7ffc0000 [ 91.499142][ T29] audit: type=1326 audit(1745479782.123:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f25ff69d37c code=0x7ffc0000 [ 91.524435][ T29] audit: type=1326 audit(1745479782.123:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff69e969 code=0x7ffc0000 [ 91.548890][ T29] audit: type=1326 audit(1745479782.123:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25ff69d2d0 code=0x7ffc0000 [ 91.574706][ T29] audit: type=1326 audit(1745479782.123:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f25ff6a0197 code=0x7ffc0000 [ 91.599849][ T29] audit: type=1326 audit(1745479782.123:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25ff69e969 code=0x7ffc0000 [ 91.624197][ T29] audit: type=1326 audit(1745479782.123:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f25ff6a0197 code=0x7ffc0000 [ 91.649284][ T29] audit: type=1326 audit(1745479782.123:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25ff69d5ca code=0x7ffc0000 [ 91.677801][ T6930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.703359][ T6930] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.753473][ T6930] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 91.799006][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.924'. [ 91.877191][ T6955] ip6gre2: entered allmulticast mode [ 91.887740][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.936441][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.930'. [ 91.954116][ T6963] loop5: detected capacity change from 0 to 512 [ 91.961014][ T6963] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.162442][ T6973] loop1: detected capacity change from 0 to 512 [ 92.178195][ T6973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.191178][ T6973] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.223932][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.398326][ T6993] loop1: detected capacity change from 0 to 128 [ 92.487442][ T6995] net_ratelimit: 10 callbacks suppressed [ 92.487463][ T6995] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 92.587260][ T7004] loop3: detected capacity change from 0 to 256 [ 92.756065][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.950'. [ 92.913593][ T7020] loop4: detected capacity change from 0 to 512 [ 92.924305][ T7020] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 93.312111][ T7046] loop3: detected capacity change from 0 to 512 [ 93.364089][ T7046] EXT4-fs: Ignoring removed nobh option [ 93.600243][ T7046] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.960: corrupted inode contents [ 93.630438][ T7046] EXT4-fs (loop3): Remounting filesystem read-only [ 93.647134][ T7046] EXT4-fs (loop3): 1 truncate cleaned up [ 93.654607][ T7062] loop4: detected capacity change from 0 to 512 [ 93.673407][ T3826] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.685010][ T3826] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.699895][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.714059][ T7046] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.717312][ T7064] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 93.736622][ T7046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.765078][ T3826] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 93.776643][ T7062] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 93.830228][ T7062] EXT4-fs (loop4): mount failed [ 93.848874][ T7074] bond_slave_1: mtu less than device minimum [ 93.872862][ T7046] loop3: detected capacity change from 0 to 512 [ 93.913622][ T7046] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.931009][ T7080] loop1: detected capacity change from 0 to 128 [ 93.945269][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.965946][ T7080] process 'syz.1.974' launched './file0' with NULL argv: empty string added [ 93.977362][ T7046] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.991787][ T7046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.177575][ T7097] loop3: detected capacity change from 0 to 128 [ 94.288229][ T7101] loop3: detected capacity change from 0 to 2048 [ 94.335979][ T7101] loop3: p1 < > p4 [ 94.341055][ T7101] loop3: p4 size 8388608 extends beyond EOD, truncated [ 94.403001][ T7104] macvlan2: entered promiscuous mode [ 94.408527][ T7104] bridge0: entered promiscuous mode [ 94.416867][ T7104] bridge0: port 4(macvlan2) entered blocking state [ 94.423650][ T7104] bridge0: port 4(macvlan2) entered disabled state [ 94.430893][ T7104] macvlan2: entered allmulticast mode [ 94.436482][ T7104] bridge0: entered allmulticast mode [ 94.443393][ T7104] macvlan2: left allmulticast mode [ 94.448788][ T7104] bridge0: left allmulticast mode [ 94.454746][ T7104] bridge0: left promiscuous mode [ 94.474019][ T7109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.983'. [ 94.533236][ T7111] loop0: detected capacity change from 0 to 1024 [ 94.566756][ T7111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.590801][ T7111] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.984: bg 0: block 88: padding at end of block bitmap is not set [ 94.619677][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.698175][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.986'. [ 94.707706][ T7117] netlink: 28 bytes leftover after parsing attributes in process `syz.5.986'. [ 94.806683][ T7117] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.815076][ T7117] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.823288][ T7117] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.831725][ T7117] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.851206][ T7117] geneve2: entered promiscuous mode [ 94.856586][ T7117] geneve2: entered allmulticast mode [ 95.001255][ T7124] loop5: detected capacity change from 0 to 512 [ 95.021510][ T7124] EXT4-fs: Ignoring removed nobh option [ 95.067062][ T7124] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.990: corrupted inode contents [ 95.101325][ T7124] EXT4-fs (loop5): Remounting filesystem read-only [ 95.116300][ T10] IPVS: starting estimator thread 0... [ 95.116443][ T7124] EXT4-fs (loop5): 1 truncate cleaned up [ 95.139826][ T7124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.146893][ T3839] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.158716][ T7124] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.163865][ T3839] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.186733][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.238692][ T7136] loop1: detected capacity change from 0 to 512 [ 95.238728][ T3839] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 95.256317][ T7133] IPVS: using max 2448 ests per chain, 122400 per kthread [ 95.279637][ T7136] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 95.302784][ T7136] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.996: invalid indirect mapped block 2683928664 (level 1) [ 95.331488][ T7136] EXT4-fs (loop1): Remounting filesystem read-only [ 95.346183][ T7136] EXT4-fs (loop1): 1 truncate cleaned up [ 95.359028][ T7124] loop5: detected capacity change from 0 to 512 [ 95.367708][ T7136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.389381][ T7124] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.427465][ T7124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.445832][ T7124] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.463333][ T7124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.622428][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.640671][ T7160] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 95.665450][ T7162] netlink: 'syz.5.1006': attribute type 4 has an invalid length. [ 95.708393][ T7166] Cannot find del_set index 0 as target [ 95.848508][ T7178] hub 9-0:1.0: USB hub found [ 95.853402][ T7178] hub 9-0:1.0: 8 ports detected [ 95.931088][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1013'. [ 95.955446][ T7184] loop4: detected capacity change from 0 to 512 [ 95.966694][ T7184] EXT4-fs: Ignoring removed nobh option [ 95.983974][ T7182] futex_wake_op: syz.5.1013 tries to shift op by 144; fix this program [ 96.005507][ T7189] tipc: Enabling of bearer rejected, already enabled [ 96.014902][ T7184] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.1015: corrupted inode contents [ 96.043988][ T7184] EXT4-fs (loop4): Remounting filesystem read-only [ 96.054917][ T7184] EXT4-fs (loop4): 1 truncate cleaned up [ 96.067365][ T3818] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.078328][ T3818] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.090365][ T7184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.094530][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1020'. [ 96.117186][ T3818] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.128068][ T7184] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.140125][ T7184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.182950][ T7184] loop4: detected capacity change from 0 to 512 [ 96.202303][ T7184] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.228273][ T7184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.242449][ T7184] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.257347][ T7184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.371267][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 96.371281][ T29] audit: type=1400 audit(1745479787.063:1900): avc: denied { mounton } for pid=7214 comm="syz.0.1027" path="/189/file0" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 96.464740][ T7223] tipc: Enabling of bearer rejected, failed to enable media [ 96.498814][ T29] audit: type=1326 audit(1745479787.193:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.522787][ T29] audit: type=1326 audit(1745479787.193:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.582592][ T29] audit: type=1326 audit(1745479787.193:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.608203][ T29] audit: type=1326 audit(1745479787.193:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.634772][ T29] audit: type=1326 audit(1745479787.193:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.655243][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 96.658977][ T29] audit: type=1326 audit(1745479787.203:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.693838][ T29] audit: type=1326 audit(1745479787.203:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.721133][ T29] audit: type=1326 audit(1745479787.203:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.748728][ T29] audit: type=1326 audit(1745479787.203:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 96.749894][ T7231] batman_adv: batadv0: Interface deactivated: dummy0 [ 96.781337][ T7231] batman_adv: batadv0: Removing interface: dummy0 [ 96.789582][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.797797][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.810536][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.819126][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.863237][ T7237] loop0: detected capacity change from 0 to 512 [ 96.875668][ T7237] EXT4-fs: Ignoring removed nobh option [ 96.909786][ T7237] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.1035: corrupted inode contents [ 96.934922][ T7246] loop3: detected capacity change from 0 to 512 [ 96.943013][ T7237] EXT4-fs (loop0): Remounting filesystem read-only [ 96.950306][ T7237] EXT4-fs (loop0): 1 truncate cleaned up [ 96.957215][ T7246] EXT4-fs: Ignoring removed nobh option [ 96.957343][ T7237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.978340][ T7237] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.978361][ T3839] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.000845][ T3839] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.013234][ T7237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.028942][ T3839] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 97.079491][ T7237] loop0: detected capacity change from 0 to 512 [ 97.094636][ T7246] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #3: comm syz.3.1039: corrupted inode contents [ 97.109579][ T7237] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.146162][ T7246] EXT4-fs (loop3): Remounting filesystem read-only [ 97.153594][ T7237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.154520][ T7246] EXT4-fs (loop3): 1 truncate cleaned up [ 97.173060][ T7237] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.187461][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.199395][ T7237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.200974][ T7246] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.228495][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'. [ 97.277726][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.334247][ T7262] bridge0: entered promiscuous mode [ 97.343557][ T7262] macvlan2: entered promiscuous mode [ 97.351653][ T7262] bridge0: port 3(macvlan2) entered blocking state [ 97.358463][ T7262] bridge0: port 3(macvlan2) entered disabled state [ 97.366197][ T7262] macvlan2: entered allmulticast mode [ 97.371717][ T7262] bridge0: entered allmulticast mode [ 97.378249][ T7262] macvlan2: left allmulticast mode [ 97.383740][ T7262] bridge0: left allmulticast mode [ 97.397529][ T7262] bridge0: left promiscuous mode [ 97.497703][ T7276] loop1: detected capacity change from 0 to 256 [ 97.506050][ T7277] loop3: detected capacity change from 0 to 164 [ 97.520349][ T7276] FAT-fs (loop1): Directory bread(block 64) failed [ 97.537776][ T7276] FAT-fs (loop1): Directory bread(block 65) failed [ 97.538207][ T7277] bio_check_eod: 55 callbacks suppressed [ 97.538223][ T7277] syz.3.1051: attempt to access beyond end of device [ 97.538223][ T7277] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.544475][ T7276] FAT-fs (loop1): Directory bread(block 66) failed [ 97.556400][ T7277] syz.3.1051: attempt to access beyond end of device [ 97.556400][ T7277] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.586510][ T7276] FAT-fs (loop1): Directory bread(block 67) failed [ 97.593152][ T7276] FAT-fs (loop1): Directory bread(block 68) failed [ 97.601098][ T7276] FAT-fs (loop1): Directory bread(block 69) failed [ 97.607812][ T7276] FAT-fs (loop1): Directory bread(block 70) failed [ 97.614479][ T7276] FAT-fs (loop1): Directory bread(block 71) failed [ 97.621128][ T7276] FAT-fs (loop1): Directory bread(block 72) failed [ 97.639102][ T7276] FAT-fs (loop1): Directory bread(block 73) failed [ 97.788666][ T7288] loop5: detected capacity change from 0 to 164 [ 97.828412][ T7288] Unable to read rock-ridge attributes [ 97.886804][ T3304] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 97.895776][ T3304] FAT-fs (loop1): Filesystem has been set read-only [ 97.919937][ T7292] ip6_vti0: mtu greater than device maximum [ 97.953796][ T7294] usb usb9: usbfs: process 7294 (syz.5.1058) did not claim interface 9 before use [ 98.130079][ T3839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.216405][ T3839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.292072][ T3839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.390868][ T3839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.505676][ T7331] ref_ctr increment failed for inode: 0x458 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881186fbc80 [ 98.558267][ T7330] uprobe: syz.4.1072:7330 failed to unregister, leaking uprobe [ 98.600218][ T3839] bridge_slave_1: left allmulticast mode [ 98.606288][ T3839] bridge_slave_1: left promiscuous mode [ 98.612351][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.623198][ T3839] bridge_slave_0: left allmulticast mode [ 98.629362][ T3839] bridge_slave_0: left promiscuous mode [ 98.635639][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.663794][ T7337] loop5: detected capacity change from 0 to 256 [ 98.729698][ T3839] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 98.799436][ T3839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.812137][ T3839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.824878][ T3839] bond0 (unregistering): Released all slaves [ 98.841170][ T3839] bond1 (unregistering): (slave veth3): Releasing active interface [ 98.850583][ T3839] bond1 (unregistering): Released all slaves [ 98.861787][ T7348] loop3: detected capacity change from 0 to 1024 [ 98.878930][ T7348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.905601][ T3839] tipc: Left network mode [ 98.917949][ T3839] hsr_slave_0: left promiscuous mode [ 98.925312][ T3839] hsr_slave_1: left promiscuous mode [ 98.934650][ T3839] veth1_vlan: left promiscuous mode [ 98.940760][ T3839] veth0_vlan: left promiscuous mode [ 99.023627][ T3839] team0 (unregistering): Port device team_slave_1 removed [ 99.034783][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.045408][ T3839] team0 (unregistering): Port device team_slave_0 removed [ 99.091049][ T7356] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 99.091049][ T7356] program syz.3.1081 not setting count and/or reply_len properly [ 99.122818][ T7311] chnl_net:caif_netlink_parms(): no params data found [ 99.183743][ T7364] loop5: detected capacity change from 0 to 512 [ 99.212109][ T7364] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 99.229608][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.237461][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.240041][ T7364] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1083: invalid indirect mapped block 2683928664 (level 1) [ 99.252578][ T7311] bridge_slave_0: entered allmulticast mode [ 99.262477][ T7364] EXT4-fs (loop5): Remounting filesystem read-only [ 99.272245][ T7364] EXT4-fs (loop5): 1 truncate cleaned up [ 99.279056][ T7364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.283896][ T7311] bridge_slave_0: entered promiscuous mode [ 99.301815][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.310542][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.320449][ T7311] bridge_slave_1: entered allmulticast mode [ 99.327839][ T7311] bridge_slave_1: entered promiscuous mode [ 99.393083][ T3839] IPVS: stop unused estimator thread 0... [ 99.414173][ T7311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.424747][ T7311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.465605][ T7311] team0: Port device team_slave_0 added [ 99.476762][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.483715][ T7311] team0: Port device team_slave_1 added [ 99.516480][ T7339] delete_channel: no stack [ 99.570174][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.577600][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.604047][ T7311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.620718][ T7385] tipc: Enabled bearer , priority 0 [ 99.628052][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.635211][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.662250][ T7311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.674611][ T7385] tipc: Disabling bearer [ 99.714408][ T7311] hsr_slave_0: entered promiscuous mode [ 99.720961][ T7311] hsr_slave_1: entered promiscuous mode [ 99.743791][ T7387] macvlan2: entered promiscuous mode [ 99.749526][ T7387] bridge0: entered promiscuous mode [ 99.757399][ T7387] bridge0: port 4(macvlan2) entered blocking state [ 99.764083][ T7387] bridge0: port 4(macvlan2) entered disabled state [ 99.771496][ T7387] macvlan2: entered allmulticast mode [ 99.776997][ T7387] bridge0: entered allmulticast mode [ 99.783107][ T7387] macvlan2: left allmulticast mode [ 99.788393][ T7387] bridge0: left allmulticast mode [ 99.794017][ T7387] bridge0: left promiscuous mode [ 99.816592][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 99.928388][ T7311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.943908][ T7311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.958975][ T7311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.968483][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 99.980150][ T7311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.016702][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.024016][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.031455][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.038658][ T7311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.083462][ T7311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.096455][ T3826] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.106064][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.120627][ T7311] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.131266][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.138450][ T3826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.149065][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.156315][ T3826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.215154][ T7311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.338917][ T7434] loop5: detected capacity change from 0 to 512 [ 100.368044][ T7435] tipc: Started in network mode [ 100.373193][ T7435] tipc: Node identity 02281f892cfc, cluster identity 4711 [ 100.380784][ T7435] tipc: Enabled bearer , priority 0 [ 100.400373][ T7311] veth0_vlan: entered promiscuous mode [ 100.409164][ T7434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.425620][ T7434] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.440455][ T7435] tipc: Disabling bearer [ 100.461039][ T7311] veth1_vlan: entered promiscuous mode [ 100.488244][ T7311] veth0_macvtap: entered promiscuous mode [ 100.494802][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.524635][ T7311] veth1_macvtap: entered promiscuous mode [ 100.573332][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.585545][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.596507][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.607319][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.618697][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.634887][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.645574][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.655465][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.665961][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.712582][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.728586][ T7311] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.737636][ T7311] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.746412][ T7311] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.755195][ T7311] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.861780][ T7454] loop3: detected capacity change from 0 to 512 [ 100.877886][ T7452] loop6: detected capacity change from 0 to 512 [ 100.892894][ T7454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.893234][ T7456] lo speed is unknown, defaulting to 1000 [ 100.907825][ T7452] EXT4-fs: Ignoring removed nobh option [ 100.931590][ T7456] lo speed is unknown, defaulting to 1000 [ 100.938484][ T7454] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.938886][ T7454] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1113: Failed to acquire dquot type 1 [ 100.939433][ T7454] EXT4-fs (loop3): 1 truncate cleaned up [ 100.940545][ T7454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.955102][ T7446] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 100.963162][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.965891][ T7446] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.984282][ T7456] lo speed is unknown, defaulting to 1000 [ 100.984970][ T7446] vhci_hcd vhci_hcd.0: Device attached [ 101.009758][ T7452] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.1065: corrupted inode contents [ 101.053723][ T7452] EXT4-fs (loop6): Remounting filesystem read-only [ 101.060778][ T7452] EXT4-fs (loop6): 1 truncate cleaned up [ 101.069344][ T7452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.073182][ T7456] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.091319][ T3818] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.103398][ T3818] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.115780][ T7463] lo speed is unknown, defaulting to 1000 [ 101.125024][ T7452] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.137646][ T7452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.161105][ T3818] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 101.165041][ T3379] vhci_hcd: vhci_device speed not set [ 101.209382][ T7452] loop6: detected capacity change from 0 to 512 [ 101.211792][ T7456] lo speed is unknown, defaulting to 1000 [ 101.218802][ T7452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.235017][ T3379] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 101.242334][ T7456] lo speed is unknown, defaulting to 1000 [ 101.263243][ T7456] lo speed is unknown, defaulting to 1000 [ 101.272648][ T7452] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.298625][ T7456] lo speed is unknown, defaulting to 1000 [ 101.305901][ T7460] vhci_hcd: connection reset by peer [ 101.306265][ T3818] vhci_hcd: stop threads [ 101.316156][ T3818] vhci_hcd: release socket [ 101.320630][ T3818] vhci_hcd: disconnect device [ 101.331208][ T7456] lo speed is unknown, defaulting to 1000 [ 101.402862][ T7470] 9pnet: p9_errstr2errno: server reported unknown error [ 101.421083][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 101.421100][ T29] audit: type=1400 audit(1745479792.113:2106): avc: denied { allowed } for pid=7471 comm="syz.6.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.451753][ T29] audit: type=1400 audit(1745479792.113:2107): avc: denied { create } for pid=7471 comm="syz.6.1118" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.476507][ T29] audit: type=1400 audit(1745479792.113:2108): avc: denied { read append } for pid=7467 comm="syz.3.1116" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.503216][ T29] audit: type=1400 audit(1745479792.113:2109): avc: denied { open } for pid=7467 comm="syz.3.1116" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.529375][ T29] audit: type=1400 audit(1745479792.113:2110): avc: denied { ioctl } for pid=7467 comm="syz.3.1116" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.687841][ T29] audit: type=1326 audit(1745479792.383:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.3.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 101.759038][ T29] audit: type=1326 audit(1745479792.403:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.3.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 101.782864][ T29] audit: type=1326 audit(1745479792.413:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.3.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 101.808091][ T29] audit: type=1326 audit(1745479792.413:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.3.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 101.834220][ T29] audit: type=1326 audit(1745479792.453:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.3.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 101.923729][ T7488] ref_ctr increment failed for inode: 0x4ee offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881186fb180 [ 101.937466][ T7487] uprobe: syz.3.1124:7487 failed to unregister, leaking uprobe [ 102.097783][ T3297] printk: udevd: 1 output lines suppressed due to ratelimiting [ 102.124197][ T7494] lo speed is unknown, defaulting to 1000 [ 102.151927][ T7498] loop3: detected capacity change from 0 to 256 [ 102.492487][ T7510] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.010059][ T7536] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1146'. [ 103.138530][ T7545] lo speed is unknown, defaulting to 1000 [ 103.431210][ T7565] loop6: detected capacity change from 0 to 512 [ 103.469599][ T7565] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 103.478166][ T7565] EXT4-fs (loop6): orphan cleanup on readonly fs [ 103.495814][ T7565] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #16: comm syz.6.1159: casefold flag without casefold feature [ 103.516418][ T7565] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.1159: couldn't read orphan inode 16 (err -117) [ 103.572954][ T7565] EXT4-fs mount: 2 callbacks suppressed [ 103.572970][ T7565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.700471][ T7565] SELinux: failed to load policy [ 103.756274][ T7565] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 103.804252][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.900234][ T7581] loop3: detected capacity change from 0 to 128 [ 103.920624][ T7581] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 103.954093][ T7581] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.976621][ T7586] lo speed is unknown, defaulting to 1000 [ 104.131795][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.188767][ T7598] ref_ctr increment failed for inode: 0x52e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881186fbc80 [ 104.208725][ T7597] uprobe: syz.3.1169:7597 failed to unregister, leaking uprobe [ 104.339991][ T7606] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.378256][ T7606] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.467349][ T7606] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.526999][ T7606] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.620685][ T7606] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.635480][ T7606] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.657598][ T7606] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.671359][ T7606] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.807053][ T7645] program syz.0.1190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.438017][ T7674] loop6: detected capacity change from 0 to 512 [ 105.447432][ T7674] EXT4-fs (loop6): orphan cleanup on readonly fs [ 105.454737][ T7674] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1202: bg 0: block 248: padding at end of block bitmap is not set [ 105.475276][ T7674] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1202: Failed to acquire dquot type 1 [ 105.500934][ T7674] EXT4-fs (loop6): 1 truncate cleaned up [ 105.521278][ T7674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.547193][ T7674] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 105.578874][ T7674] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 105.600073][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.684481][ T7685] bond_slave_1: mtu greater than device maximum [ 105.811347][ T7692] syzkaller0: entered promiscuous mode [ 105.817119][ T7692] syzkaller0: entered allmulticast mode [ 105.845915][ T7653] delete_channel: no stack [ 105.899402][ T7695] syzkaller0: entered promiscuous mode [ 105.905049][ T7695] syzkaller0: entered allmulticast mode [ 105.911586][ T3839] syzkaller0: tun_net_xmit 48 [ 105.926690][ T7695] syzkaller0: create flow: hash 1200034038 index 1 [ 105.936436][ T7695] syzkaller0: delete flow: hash 1200034038 index 1 [ 105.961278][ T7697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1210'. [ 106.089746][ T7707] @: renamed from vlan0 [ 106.297040][ T3379] usb 11-1: enqueue for inactive port 0 [ 106.304370][ T3379] usb 11-1: enqueue for inactive port 0 [ 106.376403][ T3379] vhci_hcd: vhci_device speed not set [ 106.453161][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 106.691245][ T29] kauditd_printk_skb: 796 callbacks suppressed [ 106.691261][ T29] audit: type=1400 audit(1745479797.383:2910): avc: denied { write } for pid=7723 comm="syz.6.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.725909][ T7726] loop6: detected capacity change from 0 to 512 [ 106.733905][ T7726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.746981][ T29] audit: type=1400 audit(1745479797.443:2911): avc: denied { relabelfrom } for pid=7724 comm="syz.3.1232" name="" dev="pipefs" ino=16973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 106.747278][ T7725] SELinux: Context system_u:object_r:shadow_t:s0 is not valid (left unmapped). [ 106.785523][ T29] audit: type=1400 audit(1745479797.443:2912): avc: denied { mac_admin } for pid=7724 comm="syz.3.1232" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.786912][ T7726] EXT4-fs (loop6): orphan cleanup on readonly fs [ 106.806645][ T29] audit: type=1400 audit(1745479797.483:2913): avc: denied { relabelto } for pid=7724 comm="syz.3.1232" name="" dev="pipefs" ino=16973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:shadow_t:s0" [ 106.845374][ T7726] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 106.855227][ T7726] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 106.864725][ T7726] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1222: Failed to acquire dquot type 1 [ 106.885781][ T7726] EXT4-fs (loop6): 1 truncate cleaned up [ 106.892254][ T7726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.934272][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.963365][ T7729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1224'. [ 107.032293][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1227'. [ 107.034554][ T29] audit: type=1400 audit(1745479797.723:2914): avc: denied { create } for pid=7738 comm="syz.3.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.064982][ T29] audit: type=1400 audit(1745479797.753:2915): avc: denied { write } for pid=7738 comm="syz.3.1228" path="socket:[15857]" dev="sockfs" ino=15857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.089479][ T29] audit: type=1400 audit(1745479797.753:2916): avc: denied { nlmsg_write } for pid=7738 comm="syz.3.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 107.145607][ T29] audit: type=1400 audit(1745479797.843:2917): avc: denied { create } for pid=7745 comm="syz.6.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.242731][ T7755] rdma_op ffff888146160d80 conn xmit_rdma 0000000000000000 [ 107.253083][ T7755] loop6: detected capacity change from 0 to 256 [ 107.260573][ T7755] FAT-fs (loop6): bogus number of directory entries (4) [ 107.267589][ T7755] FAT-fs (loop6): Can't find a valid FAT filesystem [ 107.346403][ T7761] pim6reg1: entered promiscuous mode [ 107.351918][ T7761] pim6reg1: entered allmulticast mode [ 107.598087][ T7771] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.648788][ T7771] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.714200][ T7771] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.807919][ T7771] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.893203][ T7771] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.904707][ T7771] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.923359][ T7771] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.936844][ T7771] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.017670][ T7779] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.038977][ T7777] binfmt_misc: register: failed to install interpreter file ./file2 [ 108.059057][ T7776] syzkaller0: entered promiscuous mode [ 108.064589][ T7776] syzkaller0: entered allmulticast mode [ 108.081949][ T3857] syzkaller0: tun_net_xmit 48 [ 108.093779][ T7779] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.113993][ T7776] syzkaller0: create flow: hash 1200034038 index 1 [ 108.142025][ T7776] syzkaller0: delete flow: hash 1200034038 index 1 [ 108.188171][ T7779] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.266731][ T7779] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.455207][ T7785] loop7: detected capacity change from 16383 to 0 [ 108.614797][ T7788] lo speed is unknown, defaulting to 1000 [ 109.597689][ T7834] netlink: 'syz.0.1268': attribute type 4 has an invalid length. [ 109.817078][ T7853] loop4: detected capacity change from 0 to 512 [ 109.824410][ T7853] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.837446][ T7853] EXT4-fs (loop4): 1 truncate cleaned up [ 109.843657][ T7853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.857692][ T7858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1278'. [ 109.870935][ T7858] syz.3.1278: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 109.885549][ T7858] CPU: 1 UID: 0 PID: 7858 Comm: syz.3.1278 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 109.885594][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.885614][ T7858] Call Trace: [ 109.885621][ T7858] [ 109.885630][ T7858] dump_stack_lvl+0xf6/0x150 [ 109.885660][ T7858] dump_stack+0x15/0x1a [ 109.885679][ T7858] warn_alloc+0x145/0x1b0 [ 109.885710][ T7858] ? audit_log_end+0x1d0/0x1e0 [ 109.885786][ T7858] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 109.885837][ T7858] __vmalloc_node_range_noprof+0xac/0xe80 [ 109.885927][ T7858] ? slow_avc_audit+0xff/0x140 [ 109.885957][ T7858] ? should_fail_ex+0x31/0x270 [ 109.886038][ T7858] ? should_failslab+0x8f/0xb0 [ 109.886064][ T7858] vmalloc_user_noprof+0x59/0x70 [ 109.886113][ T7858] ? xskq_create+0x79/0xd0 [ 109.886153][ T7858] xskq_create+0x79/0xd0 [ 109.886176][ T7858] xsk_init_queue+0x82/0xd0 [ 109.886204][ T7858] xsk_setsockopt+0x37d/0x550 [ 109.886226][ T7858] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.886249][ T7858] __sys_setsockopt+0x187/0x200 [ 109.886380][ T7858] __x64_sys_setsockopt+0x66/0x80 [ 109.886404][ T7858] x64_sys_call+0x2a09/0x2e10 [ 109.886426][ T7858] do_syscall_64+0xc9/0x1a0 [ 109.886453][ T7858] ? clear_bhb_loop+0x25/0x80 [ 109.886476][ T7858] ? clear_bhb_loop+0x25/0x80 [ 109.886500][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.886524][ T7858] RIP: 0033:0x7fb64675e969 [ 109.886588][ T7858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.886608][ T7858] RSP: 002b:00007fb644dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.886631][ T7858] RAX: ffffffffffffffda RBX: 00007fb646985fa0 RCX: 00007fb64675e969 [ 109.886643][ T7858] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 109.886655][ T7858] RBP: 00007fb6467e0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 109.886670][ T7858] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.886685][ T7858] R13: 0000000000000000 R14: 00007fb646985fa0 R15: 00007ffef302c3c8 [ 109.886707][ T7858] [ 109.886747][ T7858] Mem-Info: [ 109.949859][ T7853] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.4.1276: corrupted xattr block 33: invalid header [ 109.950614][ T7858] active_anon:5908 inactive_anon:3 isolated_anon:0 [ 109.950614][ T7858] active_file:17363 inactive_file:2074 isolated_file:0 [ 109.950614][ T7858] unevictable:0 dirty:286 writeback:0 [ 109.950614][ T7858] slab_reclaimable:2973 slab_unreclaimable:44664 [ 109.950614][ T7858] mapped:28107 shmem:2388 pagetables:924 [ 109.950614][ T7858] sec_pagetables:0 bounce:0 [ 109.950614][ T7858] kernel_misc_reclaimable:0 [ 109.950614][ T7858] free:1862842 free_pcp:4065 free_cma:0 [ 109.950744][ T7858] Node 0 active_anon:23632kB inactive_anon:12kB active_file:69452kB inactive_file:8296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112428kB dirty:1144kB writeback:0kB shmem:9552kB writeback_tmp:0kB kernel_stack:3936kB pagetables:3696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 109.950805][ T7858] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.950876][ T7858] lowmem_reserve[]: [ 109.965463][ T7853] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.1276: corrupted xattr block 33: invalid header [ 109.969938][ T7858] 0 2882 7860 7860 [ 109.970052][ T7858] Node 0 DMA32 free:2947680kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 109.970123][ T7858] lowmem_reserve[]: 0 0 4978 4978 [ 109.970175][ T7858] Node 0 Normal free:4488328kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:23632kB inactive_anon:12kB active_file:69452kB inactive_file:8296kB unevictable:0kB writepending:1144kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:12632kB local_pcp:7748kB free_cma:0kB [ 109.998112][ T7853] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 109.999036][ T7858] lowmem_reserve[]: 0 0 0 0 [ 109.999072][ T7858] Node 0 DMA: 0*4kB 0*8kB [ 110.127031][ T7862] netlink: 'syz.5.1281': attribute type 4 has an invalid length. [ 110.166535][ T7858] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.345877][ T7858] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947680kB [ 110.362031][ T7858] Node 0 Normal: 1116*4kB (ME) 1031*8kB (UME) 794*16kB (UME) 617*32kB (UME) 489*64kB (UME) 232*128kB (UME) 127*256kB (UM) 77*512kB (UM) 101*1024kB (UM) 58*2048kB (UME) 998*4096kB (UM) = 4488104kB [ 110.382467][ T7858] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 110.392324][ T7858] 21823 total pagecache pages [ 110.397062][ T7858] 3 pages in swap cache [ 110.402456][ T7858] Free swap = 124984kB [ 110.407416][ T7858] Total swap = 124996kB [ 110.411754][ T7858] 2097051 pages RAM [ 110.415616][ T7858] 0 pages HighMem/MovableOnly [ 110.420312][ T7858] 80823 pages reserved [ 110.477922][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.539537][ T7876] loop3: detected capacity change from 0 to 1024 [ 110.548693][ T7876] EXT4-fs: Ignoring removed nobh option [ 110.554303][ T7876] EXT4-fs: Ignoring removed bh option [ 110.577497][ T7876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.604284][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.649987][ T7890] loop4: detected capacity change from 0 to 512 [ 110.657128][ T7890] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.664369][ T7890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.687663][ T7890] EXT4-fs (loop4): 1 truncate cleaned up [ 110.693734][ T7890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.722046][ T7890] netlink: 'syz.4.1292': attribute type 3 has an invalid length. [ 110.747834][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.927876][ T7908] loop5: detected capacity change from 0 to 512 [ 110.937544][ T7908] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.1300: corrupted in-inode xattr: invalid ea_ino [ 110.952346][ T7908] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1300: couldn't read orphan inode 15 (err -117) [ 110.966708][ T7908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.001663][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.196486][ T7920] dns_resolver: Unsupported server list version (0) [ 111.516121][ T7925] block device autoloading is deprecated and will be removed. [ 111.523712][ T7925] syz.0.1307: attempt to access beyond end of device [ 111.523712][ T7925] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 111.817533][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 111.817552][ T29] audit: type=1400 audit(1745479802.513:3062): avc: denied { mounton } for pid=7935 comm="syz.0.1312" path="/" dev="configfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.847407][ T29] audit: type=1400 audit(1745479802.543:3063): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 111.868009][ T29] audit: type=1400 audit(1745479802.573:3064): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.040133][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 112.068849][ T29] audit: type=1326 audit(1745479802.763:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 112.092900][ T7948] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.094134][ T29] audit: type=1326 audit(1745479802.773:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 112.126249][ T29] audit: type=1326 audit(1745479802.773:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 112.136811][ T7952] netlink: 'syz.5.1319': attribute type 4 has an invalid length. [ 112.149982][ T29] audit: type=1326 audit(1745479802.773:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 112.170557][ T7952] netlink: 'syz.5.1319': attribute type 4 has an invalid length. [ 112.181200][ T29] audit: type=1326 audit(1745479802.773:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58fb400887 code=0x7ffc0000 [ 112.212849][ T29] audit: type=1326 audit(1745479802.773:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 112.236926][ T29] audit: type=1326 audit(1745479802.773:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 112.302625][ T7961] netlink: 'syz.5.1323': attribute type 13 has an invalid length. [ 112.322718][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.331006][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.340858][ T7961] batman_adv: batadv0: Interface activated: dummy0 [ 112.347837][ T7961] batadv0: mtu less than device minimum [ 112.354076][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.364989][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.376034][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.386884][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.397813][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.409018][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.420381][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.431487][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.442334][ T7966] loop4: detected capacity change from 0 to 512 [ 112.442721][ T7961] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.449112][ T7966] EXT4-fs: Ignoring removed orlov option [ 112.498234][ T7966] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.1322: corrupted in-inode xattr: invalid ea_ino [ 112.522127][ T7966] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.1322: couldn't read orphan inode 15 (err -117) [ 112.552080][ T7966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.608791][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.723069][ T7779] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.738412][ T7779] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.760610][ T7779] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.788305][ T7779] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.807582][ T7996] lo speed is unknown, defaulting to 1000 [ 113.194931][ T8015] xt_nfacct: accounting object `syz1' does not exists [ 113.306993][ T8020] loop3: detected capacity change from 0 to 128 [ 113.350091][ T8020] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.409724][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1348'. [ 113.430098][ T8020] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.551627][ T8020] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1701996919 (only 1 groups) [ 113.599395][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.780970][ T8041] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.846911][ T8041] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.907065][ T8041] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.967025][ T8041] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.024998][ T8041] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.037425][ T8041] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.051131][ T8041] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.064041][ T8041] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.195134][ T8047] syzkaller0: entered allmulticast mode [ 114.201019][ T8049] syzkaller0: entered allmulticast mode [ 114.211430][ T8047] syzkaller0: entered promiscuous mode [ 114.221864][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 114.242494][ T8047] syzkaller0 (unregistering): left promiscuous mode [ 114.249261][ T8047] syzkaller0 (unregistering): left allmulticast mode [ 114.316361][ T8049] syzkaller0: entered promiscuous mode [ 114.356626][ T8054] syzkaller0 (unregistering): left promiscuous mode [ 114.363313][ T8054] syzkaller0 (unregistering): left allmulticast mode [ 114.446303][ T8064] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.468949][ T8065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8065 comm=syz.5.1360 [ 114.500671][ T8064] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.527546][ T8069] tipc: New replicast peer: 255.255.255.83 [ 114.533680][ T8069] tipc: Enabled bearer , priority 10 [ 114.585783][ T8064] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.639756][ T8064] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.727206][ T8064] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.745019][ T8064] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.760089][ T8064] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.773646][ T8064] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.802727][ T8082] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1370'. [ 114.945995][ T8089] usb usb1: usbfs: process 8089 (syz.0.1373) did not claim interface 63 before use [ 115.008426][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 115.441574][ T8117] lo speed is unknown, defaulting to 1000 [ 115.580320][ T8116] loop4: detected capacity change from 0 to 8192 [ 115.665345][ T2968] tipc: Node number set to 785653641 [ 115.788227][ T8130] loop4: detected capacity change from 0 to 512 [ 115.813000][ T8133] capability: warning: `syz.0.1393' uses deprecated v2 capabilities in a way that may be insecure [ 115.856218][ T8130] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.1392: corrupted in-inode xattr: invalid ea_ino [ 115.885144][ T8130] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.1392: couldn't read orphan inode 15 (err -117) [ 115.942142][ T8130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.983219][ T8126] loop3: detected capacity change from 0 to 2048 [ 116.069465][ T8141] loop5: detected capacity change from 0 to 512 [ 116.113310][ T8141] EXT4-fs (loop5): 1 orphan inode deleted [ 116.126543][ T3857] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:57: Failed to release dquot type 1 [ 116.145608][ T8141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.360759][ T8141] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.425645][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.453015][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.536198][ T8153] netlink: 'syz.5.1398': attribute type 1 has an invalid length. [ 116.561081][ T8153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.645889][ T8153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.667563][ T8153] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 116.718348][ T8153] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 116.978066][ T8167] loop4: detected capacity change from 0 to 512 [ 117.014283][ T8167] __quota_error: 165 callbacks suppressed [ 117.014299][ T8167] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 117.080661][ T8167] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.112919][ T8178] loop3: detected capacity change from 0 to 512 [ 117.119773][ T29] audit: type=1326 audit(1745479807.783:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.3.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 117.143389][ T29] audit: type=1326 audit(1745479807.783:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.3.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 117.167159][ T29] audit: type=1326 audit(1745479807.783:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.3.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 117.190759][ T29] audit: type=1326 audit(1745479807.783:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.3.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 117.215888][ T29] audit: type=1326 audit(1745479807.783:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.3.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb64675e969 code=0x7ffc0000 [ 117.234695][ T8167] EXT4-fs (loop4): mount failed [ 117.240144][ T29] audit: type=1326 audit(1745479807.783:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.3.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb64675e9a3 code=0x7ffc0000 [ 117.240180][ T29] audit: type=1326 audit(1745479807.783:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.3.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb64675d41f code=0x7ffc0000 [ 117.240210][ T29] audit: type=1400 audit(1745479807.793:3243): avc: denied { write } for pid=8174 comm="syz.5.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.240299][ T29] audit: type=1400 audit(1745479807.793:3244): avc: denied { nlmsg_write } for pid=8174 comm="syz.5.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.347534][ T8178] EXT4-fs (loop3): 1 orphan inode deleted [ 117.353979][ T8178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.367224][ T3826] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:33: Failed to release dquot type 1 [ 117.395104][ T8178] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.443948][ T8178] bridge0: entered promiscuous mode [ 117.464360][ T8178] bridge0: port 2(macvlan2) entered blocking state [ 117.471102][ T8178] bridge0: port 2(macvlan2) entered disabled state [ 117.500411][ T8178] macvlan2: entered allmulticast mode [ 117.506202][ T8178] bridge0: entered allmulticast mode [ 117.540613][ T8178] macvlan2: left allmulticast mode [ 117.545990][ T8178] bridge0: left allmulticast mode [ 117.551618][ T8178] bridge0: left promiscuous mode [ 117.589640][ T8194] syzkaller0: entered promiscuous mode [ 117.595239][ T8194] syzkaller0: entered allmulticast mode [ 117.610932][ T8199] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.625467][ T3818] syzkaller0: tun_net_xmit 48 [ 117.630655][ T8197] syzkaller0: entered allmulticast mode [ 117.638718][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.640627][ T8194] syzkaller0: create flow: hash 1200034038 index 1 [ 117.656288][ T8197] syzkaller0 (unregistering): left allmulticast mode [ 117.740472][ T8199] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.752087][ T8194] syzkaller0: delete flow: hash 1200034038 index 1 [ 117.818042][ T8199] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.871289][ T8211] veth0_to_batadv: entered promiscuous mode [ 117.877387][ T8211] veth0_to_batadv: entered allmulticast mode [ 117.901220][ T8199] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.016011][ T8199] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.029413][ T8199] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.043210][ T8199] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.108932][ T8199] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.161918][ T8224] bond_slave_0: entered promiscuous mode [ 118.168623][ T8224] bond_slave_1: entered promiscuous mode [ 118.188395][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1424'. [ 118.209938][ T8224] bond_slave_0: left promiscuous mode [ 118.215405][ T8224] bond_slave_1: left promiscuous mode [ 118.220619][ T8228] loop5: detected capacity change from 0 to 2048 [ 118.246598][ T8228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.299427][ T8235] loop4: detected capacity change from 0 to 512 [ 118.329385][ T8228] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.366355][ T8235] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.386753][ T8235] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.1426: bad orphan inode 13 [ 118.407102][ T8235] ext4_test_bit(bit=12, block=18) = 1 [ 118.412836][ T8235] is_bad_inode(inode)=0 [ 118.417308][ T8235] NEXT_ORPHAN(inode)=2130706432 [ 118.422280][ T8235] max_ino=32 [ 118.425729][ T8235] i_nlink=1 [ 118.459950][ T8235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.483765][ T8235] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 118.518301][ T8235] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1426: bg 0: block 248: padding at end of block bitmap is not set [ 118.554813][ T8235] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1426: Failed to acquire dquot type 1 [ 118.572968][ T3839] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:46: bg 0: block 345: padding at end of block bitmap is not set [ 118.606272][ T8235] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.633726][ T3839] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 306 with error 117 [ 118.648494][ T3839] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.648494][ T3839] [ 118.687919][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.693581][ T8237] bridge: RTM_NEWNEIGH with invalid ether address [ 118.726071][ T8245] pim6reg1: entered promiscuous mode [ 118.732196][ T8245] pim6reg1: entered allmulticast mode [ 118.777956][ T8250] all: renamed from lo (while UP) [ 119.517130][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 119.545086][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.552706][ T8298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.607592][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.615934][ T8298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.688226][ T8300] loop6: detected capacity change from 0 to 2048 [ 119.718096][ T8300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.747003][ T8300] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.765382][ T8300] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28 [ 119.781265][ T8300] EXT4-fs (loop6): This should not happen!! Data will be lost [ 119.781265][ T8300] [ 119.793877][ T8300] EXT4-fs (loop6): Total free blocks count 0 [ 119.801937][ T8300] EXT4-fs (loop6): Free/Dirty block details [ 119.809158][ T8300] EXT4-fs (loop6): free_blocks=2415919104 [ 119.816674][ T8300] EXT4-fs (loop6): dirty_blocks=16 [ 119.823015][ T8300] EXT4-fs (loop6): Block reservation details [ 119.830273][ T8310] syzkaller0: entered promiscuous mode [ 119.832332][ T8300] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 119.838460][ T8310] syzkaller0: entered allmulticast mode [ 119.851820][ T8312] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 119.946048][ T8317] loop6: detected capacity change from 0 to 2048 [ 119.968067][ T8317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.981306][ T8228] syz.5.1425 (8228) used greatest stack depth: 6952 bytes left [ 119.982565][ T8317] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.001148][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.316472][ T8322] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1450: bg 0: block 345: padding at end of block bitmap is not set [ 120.367463][ T8322] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 120.380025][ T8322] EXT4-fs (loop6): This should not happen!! Data will be lost [ 120.380025][ T8322] [ 120.444265][ T3839] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 120.457550][ T3839] EXT4-fs (loop6): This should not happen!! Data will be lost [ 120.457550][ T3839] [ 120.493736][ T3826] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 120.506632][ T3826] EXT4-fs (loop6): This should not happen!! Data will be lost [ 120.506632][ T3826] [ 120.516337][ T3826] EXT4-fs (loop6): Total free blocks count 0 [ 120.522410][ T3826] EXT4-fs (loop6): Free/Dirty block details [ 120.528457][ T3826] EXT4-fs (loop6): free_blocks=0 [ 120.680488][ T8361] syzkaller0: entered promiscuous mode [ 120.686158][ T8361] syzkaller0: entered allmulticast mode [ 120.757662][ T8368] loop6: detected capacity change from 0 to 1024 [ 120.784657][ T8368] EXT4-fs: Ignoring removed orlov option [ 120.790579][ T8368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.827468][ T8368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.101843][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.226787][ T8381] loop6: detected capacity change from 0 to 2048 [ 121.252913][ T8381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.501398][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.587471][ T3379] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.607185][ T3379] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.682279][ T8404] loop4: detected capacity change from 0 to 512 [ 121.696599][ T8404] EXT4-fs: Ignoring removed nobh option [ 121.713706][ T8404] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 121.743879][ T8404] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1477: attempt to clear invalid blocks 2 len 1 [ 121.808172][ T8404] EXT4-fs (loop4): Remounting filesystem read-only [ 121.848940][ T8404] EXT4-fs (loop4): 1 truncate cleaned up [ 121.875804][ T8404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.988218][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.048136][ T8416] loop4: detected capacity change from 0 to 128 [ 122.346540][ T8434] serio: Serial port ptm0 [ 122.446483][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 122.446506][ T29] audit: type=1400 audit(1745479813.143:3363): avc: denied { mount } for pid=8436 comm="syz.0.1491" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 122.528489][ T29] audit: type=1326 audit(1745479813.223:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.553275][ T29] audit: type=1326 audit(1745479813.223:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.576957][ T29] audit: type=1326 audit(1745479813.223:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.600498][ T29] audit: type=1326 audit(1745479813.223:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.625863][ T29] audit: type=1326 audit(1745479813.223:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.691908][ T29] audit: type=1326 audit(1745479813.363:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.715895][ T29] audit: type=1326 audit(1745479813.363:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.740387][ T29] audit: type=1326 audit(1745479813.373:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.764123][ T29] audit: type=1326 audit(1745479813.373:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fb3fe969 code=0x7ffc0000 [ 122.904577][ T3379] IPVS: starting estimator thread 0... [ 122.995068][ T8455] IPVS: using max 2496 ests per chain, 124800 per kthread [ 123.081182][ T8467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1503'. [ 123.267200][ T8488] loop3: detected capacity change from 0 to 512 [ 123.281451][ T8488] EXT4-fs: Ignoring removed nobh option [ 123.296391][ T8488] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1513: invalid indirect mapped block 256 (level 2) [ 123.319865][ T8488] EXT4-fs (loop3): 2 truncates cleaned up [ 123.338594][ T8488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.356275][ T8488] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1513: bg 0: block 5: invalid block bitmap [ 123.375097][ T8488] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 123.387508][ T8488] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.387508][ T8488] [ 123.397195][ T8488] EXT4-fs (loop3): Total free blocks count 0 [ 123.403203][ T8488] EXT4-fs (loop3): Free/Dirty block details [ 123.409157][ T8488] EXT4-fs (loop3): free_blocks=0 [ 123.414225][ T8488] EXT4-fs (loop3): dirty_blocks=66 [ 123.419468][ T8488] EXT4-fs (loop3): Block reservation details [ 123.425507][ T8488] EXT4-fs (loop3): i_reserved_data_blocks=66 [ 123.433577][ T3839] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28 [ 123.536997][ T8502] loop3: detected capacity change from 0 to 1024 [ 123.580973][ T8502] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1518: Failed to acquire dquot type 0 [ 123.638066][ T8502] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 123.669223][ T8514] C: renamed from team_slave_0 (while UP) [ 123.697362][ T8514] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 123.705287][ T8514] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1521'. [ 123.715119][ T8502] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.1518: corrupted inode contents [ 123.755163][ T8502] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.1518: mark_inode_dirty error [ 123.756342][ T8514] net_ratelimit: 12 callbacks suppressed [ 123.756358][ T8514] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 123.788976][ T8502] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.1518: corrupted inode contents [ 123.818761][ T8502] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.1518: mark_inode_dirty error [ 123.855241][ T8502] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.1518: corrupted inode contents [ 123.871041][ T8510] xt_hashlimit: size too large, truncated to 1048576 [ 123.879426][ T8502] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 123.896206][ T8502] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.1518: corrupted inode contents [ 123.914774][ T8502] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.1518: mark_inode_dirty error [ 123.927631][ T8502] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 123.945452][ T8502] EXT4-fs (loop3): 1 truncate cleaned up [ 123.951734][ T8502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.977035][ T8502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.021704][ T8519] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 124.129486][ T8502] loop3: detected capacity change from 0 to 1024 [ 124.168082][ T8502] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.182992][ T8502] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.250379][ T8502] JBD2: no valid journal superblock found [ 124.256241][ T8502] EXT4-fs (loop3): Could not load journal inode [ 124.427369][ T8544] loop6: detected capacity change from 0 to 2048 [ 124.458123][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1537'. [ 124.467782][ T8544] loop6: p2 < > p3 p4 < > [ 124.472241][ T8544] loop6: partition table partially beyond EOD, truncated [ 124.501460][ T8544] loop6: p2 start 4294902784 is beyond EOD, truncated [ 124.508500][ T8544] loop6: p3 start 3724543488 is beyond EOD, truncated [ 124.913370][ T8598] loop5: detected capacity change from 0 to 512 [ 124.934749][ T8598] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 124.951738][ T8598] EXT4-fs (loop5): 1 truncate cleaned up [ 124.958250][ T8598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.972219][ T8606] netlink: 24 bytes leftover after parsing attributes in process `kfree'. [ 125.002512][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.051862][ T8617] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 125.060297][ T8617] tipc: Enabled bearer , priority 10 [ 125.099006][ T8620] siw: device registration error -23 [ 125.239775][ T8643] loop6: detected capacity change from 0 to 512 [ 125.260619][ T8643] EXT4-fs (loop6): 1 orphan inode deleted [ 125.277539][ T3826] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:33: Failed to release dquot type 1 [ 125.304288][ T8643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.331444][ T8649] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 125.343928][ T8634] tipc: New replicast peer: 255.255.255.255 [ 125.350219][ T8634] tipc: Enabled bearer , priority 10 [ 125.359783][ T8643] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.435725][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.457812][ T8652] loop3: detected capacity change from 0 to 512 [ 125.479159][ T8657] loop6: detected capacity change from 0 to 512 [ 125.482189][ T8658] lo speed is unknown, defaulting to 1000 [ 125.507177][ T8657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 125.522130][ T8657] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.551472][ T8652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.567043][ T8652] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.615576][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.661355][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.029625][ T8696] bridge_slave_0: left allmulticast mode [ 126.035462][ T8696] bridge_slave_0: left promiscuous mode [ 126.041146][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.055824][ T8696] bond0: (slave bridge_slave_1): Releasing backup interface [ 126.090864][ T8696] bond0: (slave bond_slave_0): Releasing backup interface [ 126.103087][ T8696] bond0: (slave bond_slave_1): Releasing backup interface [ 126.118558][ T8696] team0: Port device team_slave_0 removed [ 126.130968][ T8696] team0: Port device team_slave_1 removed [ 126.150556][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.151055][ T8700] loop6: detected capacity change from 0 to 512 [ 126.158065][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.174976][ T3381] tipc: Node number set to 1155015719 [ 126.190563][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.198171][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.205671][ T8700] EXT4-fs (loop6): orphan cleanup on readonly fs [ 126.212735][ T8700] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1599: bg 0: block 248: padding at end of block bitmap is not set [ 126.232524][ T8700] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1599: Failed to acquire dquot type 1 [ 126.244675][ T8700] EXT4-fs (loop6): 1 truncate cleaned up [ 126.267740][ T8700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.284540][ T8700] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 126.299010][ T8700] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 126.327652][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.491668][ T8717] loop6: detected capacity change from 0 to 1024 [ 126.514686][ T8717] EXT4-fs: Ignoring removed nobh option [ 126.520856][ T8717] EXT4-fs: Ignoring removed bh option [ 126.678481][ T8719] O3ãc¤±: renamed from bridge_slave_0 (while UP) [ 126.704267][ T8717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.706147][ T3381] tipc: Node number set to 2376912982 [ 126.743501][ T8717] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1603: Allocating blocks 385-513 which overlap fs metadata [ 126.800125][ T8724] loop3: detected capacity change from 0 to 512 [ 126.815607][ T8717] EXT4-fs (loop6): pa ffff8881061154d0: logic 16, phys. 129, len 24 [ 126.823829][ T8717] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 126.836032][ T8724] ext4: Unknown parameter 'audit' [ 126.854160][ T8717] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 126.866530][ T8717] EXT4-fs (loop6): This should not happen!! Data will be lost [ 126.866530][ T8717] [ 126.876268][ T8717] EXT4-fs (loop6): Total free blocks count 0 [ 126.882298][ T8717] EXT4-fs (loop6): Free/Dirty block details [ 126.888343][ T8717] EXT4-fs (loop6): free_blocks=128 [ 126.893492][ T8717] EXT4-fs (loop6): dirty_blocks=0 [ 126.898568][ T8717] EXT4-fs (loop6): Block reservation details [ 126.904635][ T8717] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 126.924753][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 126.932622][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 126.956916][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 126.964688][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 126.972438][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 126.980224][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 126.987991][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 126.992668][ T8733] loop3: detected capacity change from 0 to 512 [ 126.995785][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.009790][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.018412][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.026200][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.033875][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.041605][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.049308][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.056997][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.064820][ T36] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 127.073931][ T8733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.075303][ T36] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 127.096969][ T8733] EXT4-fs (loop3): 1 truncate cleaned up [ 127.119625][ T8733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.283763][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.380429][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1620'. [ 127.411439][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1620'. [ 127.510904][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 127.510923][ T29] audit: type=1400 audit(1745479818.203:3578): avc: denied { ioctl } for pid=8762 comm="syz.5.1624" path="socket:[20934]" dev="sockfs" ino=20934 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.602972][ T29] audit: type=1326 audit(1745479818.263:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06782f5927 code=0x7ffc0000 [ 127.626410][ T29] audit: type=1326 audit(1745479818.263:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067829ab39 code=0x7ffc0000 [ 127.649941][ T29] audit: type=1326 audit(1745479818.263:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06782f5927 code=0x7ffc0000 [ 127.656956][ T8773] loop5: detected capacity change from 0 to 512 [ 127.673608][ T29] audit: type=1326 audit(1745479818.263:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067829ab39 code=0x7ffc0000 [ 127.703232][ T29] audit: type=1326 audit(1745479818.263:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06782fe969 code=0x7ffc0000 [ 127.727121][ T29] audit: type=1326 audit(1745479818.263:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06782fe969 code=0x7ffc0000 [ 127.750819][ T29] audit: type=1326 audit(1745479818.263:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06782fe969 code=0x7ffc0000 [ 127.774375][ T29] audit: type=1326 audit(1745479818.263:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06782fe969 code=0x7ffc0000 [ 127.797909][ T29] audit: type=1326 audit(1745479818.263:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06782fe969 code=0x7ffc0000 [ 127.825019][ T8773] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.066495][ T8773] EXT4-fs (loop5): 1 truncate cleaned up [ 128.073035][ T8773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.253348][ T8780] pim6reg1: entered promiscuous mode [ 128.258742][ T8780] pim6reg1: entered allmulticast mode [ 128.300888][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.421082][ T8785] loop3: detected capacity change from 0 to 128 [ 128.579946][ T8798] xt_hashlimit: size too large, truncated to 1048576 [ 128.586934][ T8798] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 128.623187][ T8799] lo speed is unknown, defaulting to 1000 [ 128.703604][ T8804] wg2: entered promiscuous mode [ 128.708699][ T8804] wg2: entered allmulticast mode [ 129.363299][ T8840] lo speed is unknown, defaulting to 1000 [ 129.606458][ T8857] lo speed is unknown, defaulting to 1000 [ 129.664338][ T8860] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.730911][ T8866] syzkaller0: entered allmulticast mode [ 129.738906][ T8866] syzkaller0: entered promiscuous mode [ 129.746378][ T8866] syzkaller0 (unregistering): left promiscuous mode [ 129.753146][ T8866] syzkaller0 (unregistering): left allmulticast mode [ 129.936772][ T8887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8887 comm=syz.6.1672 [ 129.949927][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1672'. [ 129.985033][ T8884] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 129.993193][ T8884] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 130.400151][ T8934] loop5: detected capacity change from 0 to 1024 [ 130.417127][ T8934] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 130.428110][ T8934] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 130.445859][ T8934] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.456036][ T8934] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 130.649649][ T8946] lo speed is unknown, defaulting to 1000 [ 130.667215][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1702'. [ 130.928589][ T8966] loop6: detected capacity change from 0 to 1024 [ 130.945521][ T8966] EXT4-fs: Ignoring removed bh option [ 130.972819][ T8966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.122106][ T8966] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1711: Allocating blocks 497-513 which overlap fs metadata [ 131.160658][ T8966] EXT4-fs (loop6): Remounting filesystem read-only [ 131.180702][ T8985] loop3: detected capacity change from 0 to 512 [ 131.200082][ T8966] EXT4-fs (loop6): pa ffff8881061155b0: logic 48, phys. 177, len 21 [ 131.219000][ T8989] syzkaller0: entered allmulticast mode [ 131.227359][ T8985] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.230817][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.236453][ T8985] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 131.245733][ T8989] syzkaller0: entered promiscuous mode [ 131.275843][ T8985] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 131.293720][ T8991] lo speed is unknown, defaulting to 1000 [ 131.296102][ T8985] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 131.315012][ T8985] System zones: 0-2, 18-18, 34-34 [ 131.318389][ T8989] syzkaller0 (unregistering): left promiscuous mode [ 131.327066][ T8989] syzkaller0 (unregistering): left allmulticast mode [ 131.334202][ T8985] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 131.358157][ T8994] netlink: 'syz.6.1722': attribute type 10 has an invalid length. [ 131.376427][ T8985] EXT4-fs (loop3): 1 truncate cleaned up [ 131.385780][ T8985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.466918][ T8994] hsr_slave_0: left promiscuous mode [ 131.483795][ T8994] hsr_slave_1: left promiscuous mode [ 131.526104][ T8998] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.586135][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.597677][ T8998] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.658224][ T9004] loop3: detected capacity change from 0 to 2048 [ 131.666181][ T8998] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.710619][ T9004] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 131.748025][ T8998] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.846283][ T8998] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.877011][ T8998] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.894811][ T8998] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.914753][ T8998] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.983171][ T9016] loop5: detected capacity change from 0 to 2048 [ 132.057322][ T9016] Alternate GPT is invalid, using primary GPT. [ 132.063622][ T9016] loop5: p1 p2 p3 [ 132.288696][ T9036] IPVS: stopping master sync thread 9037 ... [ 132.503926][ T9055] loop3: detected capacity change from 0 to 2048 [ 132.547467][ T9055] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.607621][ T9068] netlink: 'syz.3.1749': attribute type 4 has an invalid length. [ 132.622711][ T9068] netlink: 'syz.3.1749': attribute type 4 has an invalid length. [ 132.737011][ T9081] netlink: 'syz.6.1756': attribute type 12 has an invalid length. [ 132.787781][ T9087] loop3: detected capacity change from 0 to 164 [ 132.797590][ T9087] Unable to read rock-ridge attributes [ 132.807247][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1760'. [ 132.819899][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 132.819916][ T29] audit: type=1400 audit(1745479823.513:3933): avc: denied { mount } for pid=9086 comm="syz.3.1759" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 132.851042][ T9087] Unable to read rock-ridge attributes [ 132.857140][ T9087] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 132.950047][ T29] audit: type=1400 audit(1745479823.643:3934): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 132.980801][ T9100] loop3: detected capacity change from 0 to 256 [ 132.991492][ T9100] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.038108][ T9107] lo speed is unknown, defaulting to 1000 [ 133.368795][ T9120] lo speed is unknown, defaulting to 1000 [ 133.498089][ T9126] loop6: detected capacity change from 0 to 512 [ 133.511581][ T9126] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 133.527276][ T9131] loop3: detected capacity change from 0 to 512 [ 133.535220][ T9131] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.544522][ T9131] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 133.554571][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1775'. [ 133.564714][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1775'. [ 133.574645][ T9126] EXT4-fs (loop6): 1 truncate cleaned up [ 133.580958][ T9131] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 133.581087][ T9126] EXT4-fs mount: 2 callbacks suppressed [ 133.581104][ T9126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.628514][ T9131] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 133.636697][ T9131] System zones: 0-2, 18-18, 34-34 [ 133.675189][ T9131] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 133.700398][ T9131] EXT4-fs (loop3): 1 truncate cleaned up [ 133.707473][ T9131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.804093][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.901267][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.218148][ T9155] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.246190][ T29] audit: type=1400 audit(1745479824.943:3935): avc: denied { read } for pid=9161 comm="syz.3.1786" path="socket:[22652]" dev="sockfs" ino=22652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.332669][ T9166] pim6reg1: entered promiscuous mode [ 134.338106][ T9166] pim6reg1: entered allmulticast mode [ 134.705441][ T29] audit: type=1326 audit(1745479825.403:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 134.729210][ T29] audit: type=1326 audit(1745479825.403:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 134.805438][ T29] audit: type=1326 audit(1745479825.443:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 134.828940][ T29] audit: type=1326 audit(1745479825.443:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 134.852453][ T29] audit: type=1326 audit(1745479825.443:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 134.875890][ T29] audit: type=1326 audit(1745479825.453:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 134.899609][ T29] audit: type=1326 audit(1745479825.453:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.6.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 134.983022][ T9193] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.092481][ T9193] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.127585][ T9193] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.162908][ T9207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1804'. [ 135.184501][ T9193] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.196510][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1805'. [ 135.209240][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1805'. [ 135.273254][ T9193] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.287319][ T9193] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.300346][ T9193] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.310058][ T9217] loop5: detected capacity change from 0 to 2048 [ 135.321336][ T9193] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.365766][ T9217] loop5: p1 < > p4 [ 135.370615][ T9217] loop5: p4 size 8388608 extends beyond EOD, truncated [ 135.467507][ T9228] loop3: detected capacity change from 0 to 512 [ 135.475873][ T9228] EXT4-fs: Ignoring removed oldalloc option [ 135.494240][ T9228] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1813: Parent and EA inode have the same ino 15 [ 135.508227][ T9228] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1813: Parent and EA inode have the same ino 15 [ 135.520011][ T9232] hub 2-0:1.0: USB hub found [ 135.528515][ T9232] hub 2-0:1.0: 8 ports detected [ 135.530829][ T9228] EXT4-fs (loop3): 1 orphan inode deleted [ 135.555989][ T9228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.608467][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.686141][ T9242] vhci_hcd: invalid port number 96 [ 135.691708][ T9242] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 135.933269][ T9275] loop6: detected capacity change from 0 to 512 [ 135.951147][ T9275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.973075][ T9275] ext4 filesystem being mounted at /117/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.013920][ T9275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.065514][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1833'. [ 136.246858][ T9288] loop6: detected capacity change from 0 to 128 [ 136.260793][ T9288] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 136.268803][ T9288] FAT-fs (loop6): Filesystem has been set read-only [ 136.295231][ T9288] syz.6.1835: attempt to access beyond end of device [ 136.295231][ T9288] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 136.322083][ T9288] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 136.329993][ T9288] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 136.353999][ T9290] lo speed is unknown, defaulting to 1000 [ 136.360705][ T9288] syz.6.1835: attempt to access beyond end of device [ 136.360705][ T9288] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.374230][ T9288] syz.6.1835: attempt to access beyond end of device [ 136.374230][ T9288] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.388797][ T9288] syz.6.1835: attempt to access beyond end of device [ 136.388797][ T9288] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.403036][ T9288] syz.6.1835: attempt to access beyond end of device [ 136.403036][ T9288] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.539188][ T9305] loop3: detected capacity change from 0 to 2048 [ 136.568903][ T9305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.586418][ T9308] loop6: detected capacity change from 0 to 512 [ 136.598539][ T9308] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.608444][ T9308] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 136.632153][ T9308] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 136.650586][ T9308] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 136.667350][ T9308] System zones: 0-2, 18-18, 34-34 [ 136.674900][ T9308] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 136.690337][ T9308] EXT4-fs (loop6): 1 truncate cleaned up [ 136.697744][ T9308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.838238][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.953020][ T9330] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1852'. [ 137.082019][ T9305] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.173847][ T9305] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 982 with error 28 [ 137.186436][ T9305] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.186436][ T9305] [ 137.196101][ T9305] EXT4-fs (loop3): Total free blocks count 0 [ 137.202205][ T9305] EXT4-fs (loop3): Free/Dirty block details [ 137.208152][ T9305] EXT4-fs (loop3): free_blocks=2415919104 [ 137.213892][ T9305] EXT4-fs (loop3): dirty_blocks=992 [ 137.219143][ T9305] EXT4-fs (loop3): Block reservation details [ 137.225155][ T9305] EXT4-fs (loop3): i_reserved_data_blocks=62 [ 137.288356][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1856'. [ 137.373062][ T9342] lo speed is unknown, defaulting to 1000 [ 137.579348][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.610006][ T9364] loop3: detected capacity change from 0 to 256 [ 137.711511][ T9374] ref_ctr increment failed for inode: 0x746 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812ecbd800 [ 137.731807][ T9373] uprobe: syz.5.1868:9373 failed to unregister, leaking uprobe [ 137.766678][ T9378] loop6: detected capacity change from 0 to 164 [ 137.780982][ T9378] isofs_fill_super: get root inode failed [ 137.787633][ T9381] all: renamed from lo (while UP) [ 137.792531][ T9378] loop6: detected capacity change from 0 to 512 [ 137.816723][ T9378] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.831905][ T9378] EXT4-fs (loop6): mount failed [ 137.841741][ T9378] loop6: detected capacity change from 0 to 128 [ 137.850310][ T9378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 137.864452][ T9378] System zones: 1-3, 19-19, 35-36 [ 137.870255][ T9378] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.885103][ T9378] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.966977][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 137.966994][ T29] audit: type=1400 audit(1745479828.663:4246): avc: denied { connect } for pid=9397 comm="syz.0.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.016233][ T7311] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.017788][ T29] audit: type=1400 audit(1745479828.663:4247): avc: denied { bind } for pid=9397 comm="syz.0.1878" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.045520][ T29] audit: type=1400 audit(1745479828.663:4248): avc: denied { name_bind } for pid=9397 comm="syz.0.1878" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 138.066202][ T29] audit: type=1400 audit(1745479828.663:4249): avc: denied { node_bind } for pid=9397 comm="syz.0.1878" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 138.091565][ T9401] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 138.133779][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 138.170427][ T9409] netlink: 'syz.0.1883': attribute type 2 has an invalid length. [ 138.178443][ T9409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1883'. [ 138.265181][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 138.732609][ T9426] lo speed is unknown, defaulting to 1000 [ 139.006314][ T29] audit: type=1400 audit(1745479829.693:4250): avc: denied { ioctl } for pid=9433 comm="syz.3.1894" path="socket:[22284]" dev="sockfs" ino=22284 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.137655][ T9436] tipc: New replicast peer: 255.255.255.255 [ 139.143842][ T9436] tipc: Enabled bearer , priority 10 [ 139.194992][ T29] audit: type=1326 audit(1745479829.873:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 139.218639][ T29] audit: type=1326 audit(1745479829.873:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 139.242002][ T29] audit: type=1326 audit(1745479829.873:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 139.265656][ T29] audit: type=1326 audit(1745479829.873:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 139.289238][ T29] audit: type=1326 audit(1745479829.873:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d98b2e969 code=0x7ffc0000 [ 139.428891][ T9446] SELinux: failed to load policy [ 139.628022][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1906'. [ 139.709463][ T9470] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1908'. [ 139.816401][ T9481] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 139.915004][ T9487] loop5: detected capacity change from 0 to 512 [ 139.921633][ T9487] EXT4-fs: Ignoring removed orlov option [ 139.946557][ T9487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.974703][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1919'. [ 139.991360][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 140.013828][ T9487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.026555][ T9487] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.066953][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.150710][ T9510] loop5: detected capacity change from 0 to 512 [ 140.168410][ T9510] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 140.182883][ T9510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 140.191082][ T9510] EXT4-fs (loop5): orphan cleanup on readonly fs [ 140.198742][ T9510] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.1924: attempt to clear invalid blocks 1024 len 1 [ 140.212114][ T9510] EXT4-fs (loop5): Remounting filesystem read-only [ 140.220081][ T9510] EXT4-fs (loop5): 1 truncate cleaned up [ 140.226813][ T9510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 140.256353][ T3871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 140.275294][ T9525] loop5: detected capacity change from 0 to 164 [ 140.284240][ T9525] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 140.298143][ T9525] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 140.341516][ T9534] loop3: detected capacity change from 0 to 256 [ 140.407168][ T9539] ref_ctr increment failed for inode: 0x832 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881186f9080 [ 140.418922][ T9538] uprobe: syz.3.1933:9538 failed to unregister, leaking uprobe [ 140.503818][ T9546] loop5: detected capacity change from 0 to 2048 [ 140.530647][ T9546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.544792][ T9548] syzkaller0: entered promiscuous mode [ 140.550375][ T9548] syzkaller0: entered allmulticast mode [ 140.725061][ T9560] vlan0: entered allmulticast mode [ 140.739661][ T9546] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.755760][ T9546] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 140.768335][ T9546] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.768335][ T9546] [ 140.778048][ T9546] EXT4-fs (loop5): Total free blocks count 0 [ 140.784313][ T9546] EXT4-fs (loop5): Free/Dirty block details [ 140.790312][ T9546] EXT4-fs (loop5): free_blocks=2415919104 [ 140.796090][ T9546] EXT4-fs (loop5): dirty_blocks=3248 [ 140.801434][ T9546] EXT4-fs (loop5): Block reservation details [ 140.807511][ T9546] EXT4-fs (loop5): i_reserved_data_blocks=203 [ 140.870428][ T9565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9565 comm=syz.0.1943 [ 140.909872][ T9567] netlink: 'syz.0.1944': attribute type 13 has an invalid length. [ 141.081047][ T3816] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1188 with error 28 [ 141.275537][ T9580] lo speed is unknown, defaulting to 1000 [ 141.321820][ T9595] loop3: detected capacity change from 0 to 512 [ 141.359591][ T9595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.375693][ T9595] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.414502][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.430869][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.443751][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.456330][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.468830][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.481307][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.493874][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.506396][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.518979][ T9605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9605 comm=syz.4.1961 [ 141.557413][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.877542][ T9616] loop6: detected capacity change from 0 to 128 [ 141.897590][ T9616] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.912342][ T9616] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.319091][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1971'. [ 142.478803][ T9635] loop3: detected capacity change from 0 to 2048 [ 142.536215][ T9635] Alternate GPT is invalid, using primary GPT. [ 142.542746][ T9635] loop3: p1 p2 p3 [ 142.727011][ T7311] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.820342][ T9646] loop6: detected capacity change from 0 to 256 [ 143.281207][ T9650] loop6: detected capacity change from 0 to 128 [ 143.296724][ T9641] Set syz1 is full, maxelem 65536 reached [ 143.327662][ T9650] syz.6.1977: attempt to access beyond end of device [ 143.327662][ T9650] loop6: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 143.394294][ T9650] syz.6.1977: attempt to access beyond end of device [ 143.394294][ T9650] loop6: rw=0, sector=97, nr_sectors = 32 limit=128 [ 143.458348][ T9650] syz.6.1977: attempt to access beyond end of device [ 143.458348][ T9650] loop6: rw=0, sector=145, nr_sectors = 88 limit=128 [ 143.577952][ T3816] kworker/u8:25: attempt to access beyond end of device [ 143.577952][ T3816] loop6: rw=1, sector=233, nr_sectors = 808 limit=128 [ 143.579086][ T9665] netlink: 'syz.3.1978': attribute type 15 has an invalid length. [ 143.707060][ T9678] loop6: detected capacity change from 0 to 1024 [ 143.716382][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 143.716461][ T9680] lo speed is unknown, defaulting to 1000 [ 143.738100][ T9678] EXT4-fs: Ignoring removed orlov option [ 143.752291][ T9678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.887635][ T9678] ================================================================== [ 143.896338][ T9678] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 143.904362][ T9678] [ 143.906716][ T9678] write to 0xffff88810617b6f8 of 4 bytes by task 9686 on cpu 0: [ 143.914358][ T9678] writeback_single_inode+0x14f/0x3f0 [ 143.920095][ T9678] sync_inode_metadata+0x60/0x90 [ 143.925063][ T9678] generic_buffers_fsync_noflush+0xd8/0x120 [ 143.930997][ T9678] ext4_sync_file+0x1c3/0x6c0 [ 143.935717][ T9678] vfs_fsync_range+0x116/0x130 [ 143.940488][ T9678] ext4_buffered_write_iter+0x358/0x3c0 [ 143.946046][ T9678] ext4_file_write_iter+0x3b2/0xf80 [ 143.951609][ T9678] iter_file_splice_write+0x5f2/0x980 [ 143.957009][ T9678] direct_splice_actor+0x160/0x2c0 [ 143.962360][ T9678] splice_direct_to_actor+0x305/0x680 [ 143.967888][ T9678] do_splice_direct+0xd9/0x150 [ 143.973592][ T9678] do_sendfile+0x40a/0x690 [ 143.978572][ T9678] __x64_sys_sendfile64+0x113/0x160 [ 143.984033][ T9678] x64_sys_call+0xfc3/0x2e10 [ 143.988674][ T9678] do_syscall_64+0xc9/0x1a0 [ 143.993205][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.999112][ T9678] [ 144.001439][ T9678] read to 0xffff88810617b6f8 of 4 bytes by task 9678 on cpu 1: [ 144.008990][ T9678] vfs_fsync_range+0x9a/0x130 [ 144.013879][ T9678] ext4_buffered_write_iter+0x358/0x3c0 [ 144.019448][ T9678] ext4_file_write_iter+0x3b2/0xf80 [ 144.024700][ T9678] iter_file_splice_write+0x5f2/0x980 [ 144.030110][ T9678] direct_splice_actor+0x160/0x2c0 [ 144.035244][ T9678] splice_direct_to_actor+0x305/0x680 [ 144.040633][ T9678] do_splice_direct+0xd9/0x150 [ 144.045416][ T9678] do_sendfile+0x40a/0x690 [ 144.049846][ T9678] __x64_sys_sendfile64+0x113/0x160 [ 144.055074][ T9678] x64_sys_call+0xfc3/0x2e10 [ 144.059701][ T9678] do_syscall_64+0xc9/0x1a0 [ 144.064230][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.070222][ T9678] [ 144.072549][ T9678] value changed: 0x00000038 -> 0x00000002 [ 144.078295][ T9678] [ 144.080729][ T9678] Reported by Kernel Concurrency Sanitizer on: [ 144.086983][ T9678] CPU: 1 UID: 0 PID: 9678 Comm: syz.6.1986 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 144.100308][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.110997][ T9678] ================================================================== [ 144.243625][ T9678] ================================================================== [ 144.251767][ T9678] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark [ 144.259192][ T9678] [ 144.261530][ T9678] write to 0xffff88810617b7e4 of 4 bytes by task 9686 on cpu 0: [ 144.269640][ T9678] xas_set_mark+0x13d/0x150 [ 144.274178][ T9678] __folio_start_writeback+0x1ea/0x440 [ 144.279700][ T9678] ext4_bio_write_folio+0x591/0x9d0 [ 144.285142][ T9678] mpage_process_page_bufs+0x488/0x5d0 [ 144.290739][ T9678] mpage_prepare_extent_to_map+0x791/0xb80 [ 144.296586][ T9678] ext4_do_writepages+0xa3b/0x21d0 [ 144.301718][ T9678] ext4_writepages+0x183/0x320 [ 144.306510][ T9678] do_writepages+0x1d8/0x480 [ 144.311148][ T9678] file_write_and_wait_range+0x16e/0x2f0 [ 144.316821][ T9678] generic_buffers_fsync_noflush+0x46/0x120 [ 144.323476][ T9678] ext4_sync_file+0x1c3/0x6c0 [ 144.328285][ T9678] vfs_fsync_range+0x116/0x130 [ 144.333073][ T9678] ext4_buffered_write_iter+0x358/0x3c0 [ 144.338656][ T9678] ext4_file_write_iter+0x3b2/0xf80 [ 144.343884][ T9678] iter_file_splice_write+0x5f2/0x980 [ 144.349298][ T9678] direct_splice_actor+0x160/0x2c0 [ 144.354440][ T9678] splice_direct_to_actor+0x305/0x680 [ 144.359851][ T9678] do_splice_direct+0xd9/0x150 [ 144.364745][ T9678] do_sendfile+0x40a/0x690 [ 144.370716][ T9678] __x64_sys_sendfile64+0x113/0x160 [ 144.376007][ T9678] x64_sys_call+0xfc3/0x2e10 [ 144.380637][ T9678] do_syscall_64+0xc9/0x1a0 [ 144.385265][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.391178][ T9678] [ 144.393512][ T9678] read to 0xffff88810617b7e4 of 4 bytes by task 9678 on cpu 1: [ 144.401091][ T9678] ext4_do_writepages+0xf4/0x21d0 [ 144.406166][ T9678] ext4_writepages+0x183/0x320 [ 144.410958][ T9678] do_writepages+0x1d8/0x480 [ 144.415588][ T9678] file_write_and_wait_range+0x16e/0x2f0 [ 144.421330][ T9678] generic_buffers_fsync_noflush+0x46/0x120 [ 144.427286][ T9678] ext4_sync_file+0x1c3/0x6c0 [ 144.433044][ T9678] vfs_fsync_range+0x116/0x130 [ 144.438016][ T9678] ext4_buffered_write_iter+0x358/0x3c0 [ 144.444733][ T9678] ext4_file_write_iter+0x3b2/0xf80 [ 144.449971][ T9678] iter_file_splice_write+0x5f2/0x980 [ 144.457752][ T9678] direct_splice_actor+0x160/0x2c0 [ 144.462927][ T9678] splice_direct_to_actor+0x305/0x680 [ 144.468345][ T9678] do_splice_direct+0xd9/0x150 [ 144.473145][ T9678] do_sendfile+0x40a/0x690 [ 144.477606][ T9678] __x64_sys_sendfile64+0x113/0x160 [ 144.482840][ T9678] x64_sys_call+0xfc3/0x2e10 [ 144.487489][ T9678] do_syscall_64+0xc9/0x1a0 [ 144.492245][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.498185][ T9678] [ 144.500524][ T9678] value changed: 0x0a000021 -> 0x04000021 [ 144.506262][ T9678] [ 144.508720][ T9678] Reported by Kernel Concurrency Sanitizer on: [ 144.516028][ T9678] CPU: 1 UID: 0 PID: 9678 Comm: syz.6.1986 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 144.530482][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.542520][ T9678] ================================================================== [ 144.596517][ T7311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.