last executing test programs: 42.892575299s ago: executing program 3 (id=393): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)) r2 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x5, 0x1, 0x40, 0x80, r5, 0xfdc2, '\x00', 0x0, r5, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) 41.909832243s ago: executing program 3 (id=405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) 41.828950834s ago: executing program 3 (id=408): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setpriority(0x0, 0xffffffffffffffff, 0x0) 41.776814864s ago: executing program 3 (id=410): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) 41.681155844s ago: executing program 3 (id=412): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) removexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 41.468243815s ago: executing program 3 (id=424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) 41.447534345s ago: executing program 32 (id=424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) 12.671226814s ago: executing program 0 (id=1131): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) 12.541283535s ago: executing program 0 (id=1134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 12.500070035s ago: executing program 0 (id=1138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42000, 0x8) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r1, 0x0) 11.646888078s ago: executing program 0 (id=1150): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[], 0xfc, 0x2dd, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=<r1=>0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x88) write$selinux_attr(r0, &(0x7f0000000280)='system_u:object_r:smartcard_device_t:s0\x00', 0x28) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000, 0x1000000}]) 11.41335476s ago: executing program 0 (id=1157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x51b5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2dc}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 11.189764101s ago: executing program 0 (id=1164): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x7fffffff}, 0x18) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 11.138638711s ago: executing program 33 (id=1164): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x7fffffff}, 0x18) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.434967879s ago: executing program 5 (id=1332): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000026"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.24854617s ago: executing program 5 (id=1334): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 1.509040354s ago: executing program 6 (id=1349): syz_mount_image$tmpfs(0x0, &(0x7f0000002340)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.508809634s ago: executing program 2 (id=1350): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)) r2 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x5, 0x1, 0x40, 0x80, r5, 0xfdc2, '\x00', 0x0, r5, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.456898354s ago: executing program 6 (id=1353): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700", @ANYRES32], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 1.421984984s ago: executing program 1 (id=1355): mlockall(0x2) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) brk(0x20ffc004) 1.357984695s ago: executing program 6 (id=1356): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x5522, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='afs_file_error\x00', r3}, 0x18) fcntl$notify(r7, 0x402, 0x8000003d) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1.357776225s ago: executing program 1 (id=1357): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)) r2 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x5, 0x1, 0x40, 0x80, r5, 0xfdc2, '\x00', 0x0, r5, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.112310476s ago: executing program 4 (id=1363): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"]) 966.491947ms ago: executing program 2 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0xfffffffffffffffb}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7903009875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 944.260996ms ago: executing program 2 (id=1365): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/75, 0x4b}, {0x0, 0x30}], 0x2, 0x61cac479, 0x7, 0x8) 943.966886ms ago: executing program 4 (id=1366): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463d280202080000000000000002000300000000006f02000038000062e0000000000100000200200003"], 0x87) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 796.172247ms ago: executing program 4 (id=1367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="08a503576a7f"}, 0x0, {0x2, 0x0, @loopback}, 'syz_tun\x00'}) 409.281928ms ago: executing program 2 (id=1368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 408.733539ms ago: executing program 6 (id=1369): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @dev, @remote}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r3=>0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 386.176719ms ago: executing program 1 (id=1370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a010300000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000260140001800c000100"], 0xe4}}, 0x0) 385.819668ms ago: executing program 5 (id=1371): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4000000000000}, 0x18) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r2, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 340.554889ms ago: executing program 6 (id=1372): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$eJzs3c9vHFcdAPDvjH+sm6ZxAj1ABSRAIaAou/Gmjape2lxAqKqEqDggDqmxN5bJbjZk16U2kXD/hiKBxAn+BA5IHJB64sCNIxIHhFQOSAEsUIwE0qKZHf+ovcaLd73bej8faTLz5s3M973Ys+/t2/W8ACbWlYjYjIjZiHgzIuaL/UmxxKvdJTvuydajpe2tR0tJdDpv/C3J87N9+QmlvWs+XVxzLiK+8dWI7ySH47bWN+4t1uu1h0W60m48qLTWN66vNhZXaiu1+9XqrYVbN166+WJ1aHW93PjF46+svvbNX//q0+//bvPLP8iKdb7I263HkHWrPrMbJzMdEa+dRrAxmCrWs2MuByeTRsTHIuJz+f0/H1P5bycAcJZ1OvPRmd+fBgDOujQfA0vSckSkadEJKHfH8J6Nc2m92Wpfu9tcu7/cHSu7GDPp3dV67cal0h++lx88k2TphTwvz8/T1QPpmxFxKSJ+VHoqT5eXmvXl8XR5AGDiPb2//Y+If5bStFzu69Qen+oBAB8Zc+MuAAAwctp/AJg82n8AmDx9tP/Fh/2bp14WAGA0/r/3/xdOrRwAwOgY/weAyaP9B4CJ8vXXX8+Wznbx/Ovlt9bX7jXfur5ca90rN9aWykvNhw/KK83mSv7MnsZx16s3mw8WXoi1tyvtWqtdaa1v3Gk01+637+TP9b5TmxlJrQCA/+XS5fd+n0TE5stP5Uvsm8tBWw1nWzruAgBjMzXIyToI8JFmti+YXH014Xkn4benXhZgPHo+zHuu5+YH/aS7erefIL5nBB8qVz/Z//i/OZ7hbDH+D5PrZOP/rwy9HMDoGf+HydXpJAfn/J/dzQIAzqQBvsLX+eGwOiHAWB03mfdxn/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJDofEd+NJC3nc4Gn2b9puRzxTERcjJnk7mq9diMiLsTliJgpZemFcRcaABhQ+pekmP/r6vzz5w/mzib/KuXriPj+T9/48duL7fbDhWz/33f3l3amD6vunTfAvIIAwJDl7Xe1WO97I/9k69HSzjLK8jy+Hf8ppiJe2t56lC/dnOnIdkbM5X2Jc/9IYro4Zy4inouIqSHE33wnIj7Rq/5JPjZysZj5dH/8KGI/M9L46Qfip3led511vj4+hLLApHnvdkS82uv+S+NKvu59/8/lr1CDe3y7e7Gd177tffGni0hTPeJn9/yVfmO88JuvHdrZme/mvRPx3HSv+Mlu/OSI+M/3Gf+Pn/rMu68ckdf5WcTV6B1/f6xKu/Gg0lrfuL7aWFyprdTuV6u3Fm7deOnmi9VKPkZd2RmpPuyvL1+7cFTZsvqfOyL+XM/6z+6e+4U+6//zf7/57c/uJUsH43/p871//s/2jN+VtYlf7DP+4rlfHjl9dxZ/+Yj6H/fzv9Zn/Pf/vLHc56EAwAi01jfuLdbrtYcDbWTvQodxnUMbWRH7O3inuzhY0D/FadTihBszp/W/euob07t9xeFe+VvZFXtkpX3+kpxkIx16LQbaeDKqWON7TQJGY++mH3dJAAAAAAAAAAAAAACAo4ziT5fGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrv8GAAD//xxkzKw=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 326.392349ms ago: executing program 5 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 266.5087ms ago: executing program 5 (id=1374): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x8000, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 265.782299ms ago: executing program 1 (id=1375): creat(0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES8, @ANYRES8, @ANYRES64=r1, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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") setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000440)={0x16, 0x4, 0x1, 0xe2, 0x0, [@local, @loopback]}, 0x28) r2 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x100000}], 0x2, 0x1400, 0x0, 0x3) 265.19469ms ago: executing program 2 (id=1376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 0x9}, {0xfffffd7e, 0x139, 0x8, 0x6, 0xa, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xed}}]}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 209.22132ms ago: executing program 4 (id=1377): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x200000}}}}}}, 0x0) 171.97674ms ago: executing program 2 (id=1378): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000012c0)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 171.5465ms ago: executing program 4 (id=1379): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2dbf, 0x0, 0x0, 0x0, 0x0) 112.35814ms ago: executing program 5 (id=1380): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)) r2 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x5, 0x1, 0x40, 0x80, r5, 0xfdc2, '\x00', 0x0, r5, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) 65.36131ms ago: executing program 1 (id=1381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) 64.95553ms ago: executing program 4 (id=1382): pipe(&(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000001100)="d4", 0x1) tee(r0, r4, 0xaf5, 0x0) write$binfmt_script(r4, &(0x7f0000000540)={'#! ', './file0'}, 0xb) write(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 922.171µs ago: executing program 1 (id=1383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "6d8f8169a2297dca", "d205d2c331c9f7124937943beb55c60e326e01eaf021ec6a8e5143c69d5a5fc6", "041c3986", "e84e1b110c0072e8"}, 0x38) close(r2) 0s ago: executing program 6 (id=1384): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): code=0x7ffc0000 [ 42.442599][ T29] audit: type=1326 audit(1732624325.180:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 42.466504][ T29] audit: type=1326 audit(1732624325.180:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 42.489889][ T29] audit: type=1326 audit(1732624325.180:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 42.513328][ T29] audit: type=1326 audit(1732624325.180:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 42.537334][ T29] audit: type=1326 audit(1732624325.180:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 42.560700][ T29] audit: type=1326 audit(1732624325.180:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 42.584672][ T29] audit: type=1326 audit(1732624325.180:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 42.607902][ T29] audit: type=1326 audit(1732624325.180:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 42.699319][ T4402] syz.3.370[4402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.699408][ T4402] syz.3.370[4402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.758938][ T4406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'. [ 42.758982][ T4402] syz.3.370[4402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.862359][ T4413] loop3: detected capacity change from 0 to 512 [ 42.915602][ T4413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.939782][ T4426] vxcan1: tx address claim with different name [ 42.947906][ T4413] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.030454][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.124115][ T4451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.384'. [ 43.133070][ T4451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.384'. [ 43.261422][ T4469] loop2: detected capacity change from 0 to 512 [ 43.291141][ T4469] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.305059][ T4469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.376558][ T4469] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.410319][ T4485] loop1: detected capacity change from 0 to 2048 [ 43.435412][ T4469] EXT4-fs (loop2): 1 truncate cleaned up [ 43.455291][ T4469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.485126][ T4485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.509236][ T4485] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.391: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 43.581230][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.599538][ T4515] netlink: 3 bytes leftover after parsing attributes in process `syz.0.396'. [ 43.623197][ T4515] 0�X���: renamed from caif0 [ 43.634772][ T4515] 0�X���: entered allmulticast mode [ 43.640016][ T4515] A link change request failed with some changes committed already. Interface 60�X��� may have been left with an inconsistent configuration, please check. [ 43.687457][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.877237][ T4600] ------------[ cut here ]------------ [ 43.882812][ T4600] WARNING: CPU: 0 PID: 4600 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x63/0x290 [ 43.892255][ T4600] Modules linked in: [ 43.896186][ T4600] CPU: 0 UID: 0 PID: 4600 Comm: syz.0.401 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 43.906518][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.917066][ T4600] RIP: 0010:sk_skb_reason_drop+0x63/0x290 [ 43.922887][ T4600] Code: e8 32 30 18 fd 83 fd 01 75 25 8d ab 00 00 fc ff bf 01 00 fc ff 89 ee e8 1b 30 18 fd 81 fd 00 00 fc ff 77 22 e8 ce 2b 18 fd 90 <0f> 0b 90 eb 3e bf 01 00 00 00 89 ee e8 fc 2f 18 fd 85 ed 7e 58 e8 [ 43.942587][ T4600] RSP: 0018:ffffc9001632b740 EFLAGS: 00010287 [ 43.948796][ T4600] RAX: ffffffff84185ad2 RBX: 00000000ffffffea RCX: 0000000000080000 [ 43.956879][ T4600] RDX: ffffc900021a5000 RSI: 0000000000002ae1 RDI: 0000000000002ae2 [ 43.964891][ T4600] RBP: 00000000fffbffea R08: ffffffff84185ac5 R09: ffffc9001632b708 [ 43.972922][ T4600] R10: ffffc9001632b708 R11: ffff88810310c200 R12: ffff88811c82c600 [ 43.980947][ T4600] R13: ffff88811c82c658 R14: ffff88811c82c600 R15: 0000000000000000 [ 43.988952][ T4600] FS: 00007f69c21516c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 43.997919][ T4600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.004538][ T4600] CR2: 0000000000000000 CR3: 000000011c93c000 CR4: 00000000003506f0 [ 44.012607][ T4600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.020704][ T4600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.028714][ T4600] Call Trace: [ 44.032006][ T4600] <TASK> [ 44.035031][ T4600] ? __warn+0x141/0x350 [ 44.039253][ T4600] ? report_bug+0x315/0x420 [ 44.043817][ T4600] ? sk_skb_reason_drop+0x63/0x290 [ 44.049008][ T4600] ? handle_bug+0x60/0x90 [ 44.053395][ T4600] ? exc_invalid_op+0x1a/0x50 [ 44.058250][ T4600] ? asm_exc_invalid_op+0x1a/0x20 [ 44.063411][ T4600] ? sk_skb_reason_drop+0x55/0x290 [ 44.068589][ T4600] ? sk_skb_reason_drop+0x62/0x290 [ 44.073719][ T4600] ? sk_skb_reason_drop+0x63/0x290 [ 44.078897][ T4600] ip_rcv_finish_core+0x5b0/0xb30 [ 44.083961][ T4600] ip_sublist_rcv+0x1f1/0x640 [ 44.088712][ T4600] ? __pfx_ip_rcv_finish+0x10/0x10 [ 44.093881][ T4600] ip_list_rcv+0x25e/0x290 [ 44.098374][ T4600] ? __pfx_ip_list_rcv+0x10/0x10 [ 44.103344][ T4600] __netif_receive_skb_list_core+0x4f0/0x520 [ 44.109386][ T4600] netif_receive_skb_list_internal+0x4e4/0x660 [ 44.115590][ T4600] netif_receive_skb_list+0x31/0x230 [ 44.120892][ T4600] bpf_test_run_xdp_live+0xe0d/0x1040 [ 44.126308][ T4600] ? bpf_dispatcher_xdp_func+0x20/0x30 [ 44.131826][ T4600] ? cpus_read_unlock+0x7b/0xc0 [ 44.136787][ T4600] ? __static_call_update+0x362/0x3a0 [ 44.142195][ T4600] ? bpf_dispatcher_change_prog+0x747/0x840 [ 44.148179][ T4600] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 44.154086][ T4600] ? bpf_test_run_xdp_live+0x2b1/0x1040 [ 44.159732][ T4600] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 44.165061][ T4600] ? __rcu_read_unlock+0x4e/0x70 [ 44.170025][ T4600] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.175945][ T4600] bpf_prog_test_run+0x20f/0x3a0 [ 44.180911][ T4600] __sys_bpf+0x400/0x7a0 [ 44.185209][ T4600] __x64_sys_bpf+0x43/0x50 [ 44.189646][ T4600] x64_sys_call+0x2914/0x2dc0 [ 44.194378][ T4600] do_syscall_64+0xc9/0x1c0 [ 44.199022][ T4600] ? clear_bhb_loop+0x55/0xb0 [ 44.203726][ T4600] ? clear_bhb_loop+0x55/0xb0 [ 44.208515][ T4600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.214476][ T4600] RIP: 0033:0x7f69c3ade919 [ 44.219024][ T4600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.238775][ T4600] RSP: 002b:00007f69c2151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.247226][ T4600] RAX: ffffffffffffffda RBX: 00007f69c3c95fa0 RCX: 00007f69c3ade919 [ 44.255254][ T4600] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 44.263302][ T4600] RBP: 00007f69c3b5197e R08: 0000000000000000 R09: 0000000000000000 [ 44.271366][ T4600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.279417][ T4600] R13: 0000000000000000 R14: 00007f69c3c95fa0 R15: 00007ffd996aa958 [ 44.287458][ T4600] </TASK> [ 44.290503][ T4600] ---[ end trace 0000000000000000 ]--- [ 44.592972][ T4624] loop1: detected capacity change from 0 to 164 [ 44.619180][ T4624] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 44.836761][ T4640] netlink: 'syz.4.418': attribute type 25 has an invalid length. [ 44.844573][ T4640] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 44.852266][ T4640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.037589][ T4571] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.080663][ T4671] IPVS: Error connecting to the multicast addr [ 45.096735][ T4571] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.123354][ T4677] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 45.156135][ T4571] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.207506][ T4571] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.275587][ T4690] sctp: [Deprecated]: syz.2.438 (pid 4690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 45.275587][ T4690] Use struct sctp_sack_info instead [ 45.415769][ T4571] bridge_slave_1: left allmulticast mode [ 45.421444][ T4571] bridge_slave_1: left promiscuous mode [ 45.427171][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.446743][ T4571] bridge_slave_0: left allmulticast mode [ 45.452430][ T4571] bridge_slave_0: left promiscuous mode [ 45.458364][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.658242][ T4571] (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.682017][ T4571] (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.702460][ T4571] (unregistering): Released all slaves [ 45.876387][ T4571] hsr_slave_0: left promiscuous mode [ 45.882214][ T4571] hsr_slave_1: left promiscuous mode [ 45.888895][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.897527][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.906835][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.914258][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.929672][ T4571] veth1_macvtap: left promiscuous mode [ 45.935226][ T4571] veth0_macvtap: left promiscuous mode [ 45.940743][ T4571] veth1_vlan: left promiscuous mode [ 45.946715][ T4571] veth0_vlan: left promiscuous mode [ 46.030380][ T4732] syz.2.449[4732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.030516][ T4732] syz.2.449[4732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.042745][ T4732] syz.2.449[4732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.055846][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 46.119413][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 46.203592][ T4744] loop1: detected capacity change from 0 to 128 [ 46.237468][ T4744] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.254331][ T4744] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.310383][ T4663] chnl_net:caif_netlink_parms(): no params data found [ 46.348605][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.770693][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.777899][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.820120][ T4663] bridge_slave_0: entered allmulticast mode [ 46.837460][ T4663] bridge_slave_0: entered promiscuous mode [ 46.882067][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.889880][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.918983][ T4663] bridge_slave_1: entered allmulticast mode [ 46.933307][ T4663] bridge_slave_1: entered promiscuous mode [ 47.217804][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.237398][ T4826] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 47.251542][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.299405][ T4834] loop0: detected capacity change from 0 to 128 [ 47.309187][ T4663] team0: Port device team_slave_0 added [ 47.312222][ T4834] EXT4-fs: Ignoring removed nobh option [ 47.330654][ T4663] team0: Port device team_slave_1 added [ 47.364670][ T4834] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.409776][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.416847][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.442770][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.460265][ T4834] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.470784][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 47.470799][ T29] audit: type=1400 audit(1732624330.240:836): avc: denied { mount } for pid=4832 comm="syz.0.479" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.499146][ T29] audit: type=1400 audit(1732624330.260:837): avc: denied { write } for pid=4832 comm="syz.0.479" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.520652][ T29] audit: type=1400 audit(1732624330.260:838): avc: denied { add_name } for pid=4832 comm="syz.0.479" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.542147][ T29] audit: type=1400 audit(1732624330.260:839): avc: denied { create } for pid=4832 comm="syz.0.479" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.562504][ T29] audit: type=1400 audit(1732624330.260:840): avc: denied { read append open } for pid=4832 comm="syz.0.479" path="/89/mnt/cpu.stat" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.578256][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.586744][ T29] audit: type=1400 audit(1732624330.260:841): avc: denied { ioctl } for pid=4832 comm="syz.0.479" path="/89/mnt/cpu.stat" dev="loop0" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.593042][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.617640][ T29] audit: type=1400 audit(1732624330.330:842): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.643043][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.680176][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.716961][ T4854] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 47.723508][ T4854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.731212][ T4854] vhci_hcd vhci_hcd.0: Device attached [ 47.769838][ T4864] loop0: detected capacity change from 0 to 512 [ 47.776263][ T4856] vhci_hcd: connection closed [ 47.777089][ T4577] vhci_hcd: stop threads [ 47.786707][ T4577] vhci_hcd: release socket [ 47.791129][ T4577] vhci_hcd: disconnect device [ 47.792899][ T4864] EXT4-fs: inline encryption not supported [ 47.805883][ T4663] hsr_slave_0: entered promiscuous mode [ 47.813631][ T4663] hsr_slave_1: entered promiscuous mode [ 47.820364][ T4663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.829641][ T4663] Cannot create hsr debugfs directory [ 47.830249][ T4864] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.847255][ T4864] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 47.857371][ T4864] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.483: Corrupt directory, running e2fsck is recommended [ 47.885219][ T4864] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 47.893759][ T4864] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.483: corrupted in-inode xattr: invalid ea_ino [ 47.908504][ T4864] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.483: couldn't read orphan inode 15 (err -117) [ 47.909513][ T29] audit: type=1400 audit(1732624330.690:843): avc: denied { module_request } for pid=4663 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.921098][ T4864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.088425][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.100539][ T4663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.125246][ T4663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.142322][ T4663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.154708][ T29] audit: type=1400 audit(1732624330.920:844): avc: denied { read write } for pid=4886 comm="syz.0.484" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.162520][ T4663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.178038][ T29] audit: type=1400 audit(1732624330.920:845): avc: denied { open } for pid=4886 comm="syz.0.484" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.307456][ T4900] loop1: detected capacity change from 0 to 512 [ 48.320300][ T4900] EXT4-fs: Ignoring removed orlov option [ 48.350338][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.364269][ T4900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.371979][ T4663] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.395969][ T4900] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.411208][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.418059][ T4900] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.487: bg 0: block 248: padding at end of block bitmap is not set [ 48.418339][ T4571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.459901][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.467007][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.491526][ T4900] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.487: Failed to acquire dquot type 1 [ 48.516467][ T4900] EXT4-fs (loop1): 1 truncate cleaned up [ 48.521168][ T4663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.538545][ T4921] netlink: 'syz.4.490': attribute type 4 has an invalid length. [ 48.553887][ T4900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.595444][ T4900] EXT4-fs: Ignoring removed orlov option [ 48.620386][ T4900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.658753][ T4900] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 48.685927][ T4900] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.487: Abort forced by user [ 48.717082][ T4900] EXT4-fs (loop1): Remounting filesystem read-only [ 48.723638][ T4900] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 48.727539][ T4663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.765635][ T4900] ext4 filesystem being remounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.844029][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.991344][ T4971] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.006383][ T4663] veth0_vlan: entered promiscuous mode [ 49.019479][ T4663] veth1_vlan: entered promiscuous mode [ 49.057226][ T4663] veth0_macvtap: entered promiscuous mode [ 49.081409][ T4663] veth1_macvtap: entered promiscuous mode [ 49.139423][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.149969][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.159862][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.170929][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.180852][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.191430][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.201998][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.212514][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.232610][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.243554][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.254052][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.264603][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.275057][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.284938][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.295981][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.305884][ T4663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.316320][ T4663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.327902][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.359478][ T4663] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.368333][ T4663] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.377142][ T4663] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.386546][ T4663] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.801951][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 49.887601][ T5020] loop0: detected capacity change from 0 to 512 [ 49.914859][ T5020] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.932278][ T5020] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 49.954402][ T5020] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 49.971990][ T5020] System zones: 1-12 [ 49.981647][ T5020] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.508: corrupted in-inode xattr: e_value size too large [ 50.010653][ T5037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 50.023879][ T5020] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.508: couldn't read orphan inode 15 (err -117) [ 50.039826][ T5037] bond0: option all_slaves_active: invalid value (17) [ 50.048516][ T5020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.117370][ T5039] netlink: 'syz.2.517': attribute type 4 has an invalid length. [ 50.142615][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.168990][ T5051] capability: warning: `syz.5.522' uses deprecated v2 capabilities in a way that may be insecure [ 50.460198][ T5068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.528'. [ 50.591875][ T5080] hub 9-0:1.0: USB hub found [ 50.596708][ T5080] hub 9-0:1.0: 8 ports detected [ 50.731108][ T5095] loop0: detected capacity change from 0 to 512 [ 50.804188][ T5095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.821991][ T5095] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.845548][ T5108] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.546'. [ 50.858337][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.883764][ T5110] syz.5.548[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.883818][ T5110] syz.5.548[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.896319][ T5110] syz.5.548[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.526308][ T5161] loop1: detected capacity change from 0 to 1024 [ 51.601978][ T5161] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.568: Failed to acquire dquot type 0 [ 51.618108][ T5161] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 51.632919][ T5161] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.568: corrupted inode contents [ 51.646197][ T5161] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.568: mark_inode_dirty error [ 51.661377][ T5161] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.568: corrupted inode contents [ 51.692372][ T5161] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.568: mark_inode_dirty error [ 51.721539][ T5161] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.568: corrupted inode contents [ 51.750728][ T5161] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 51.768436][ T5161] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.568: corrupted inode contents [ 51.790331][ T5161] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.568: mark_inode_dirty error [ 51.818294][ T5161] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 51.858981][ T5161] EXT4-fs (loop1): 1 truncate cleaned up [ 51.869207][ T5161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.901950][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.172156][ T5182] loop4: detected capacity change from 0 to 1024 [ 52.234296][ T5182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.297930][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'. [ 52.343671][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.424230][ T5200] loop1: detected capacity change from 0 to 512 [ 52.428305][ T5208] loop5: detected capacity change from 0 to 2048 [ 52.487081][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.500673][ T5208] loop5: p3 < > p4 < > [ 52.504950][ T5208] loop5: partition table partially beyond EOD, truncated [ 52.522371][ T5208] loop5: p3 start 4284289 is beyond EOD, truncated [ 52.541270][ T5200] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.560871][ T5217] netlink: 436 bytes leftover after parsing attributes in process `syz.2.589'. [ 52.577308][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 52.577323][ T29] audit: type=1326 audit(1732624335.360:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff74d9dd12a code=0x7ffc0000 [ 52.606779][ T29] audit: type=1326 audit(1732624335.360:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff74d9dd12a code=0x7ffc0000 [ 52.630078][ T29] audit: type=1326 audit(1732624335.360:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff74d9dd12a code=0x7ffc0000 [ 52.653346][ T29] audit: type=1326 audit(1732624335.360:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff74d9dd12a code=0x7ffc0000 [ 52.676566][ T29] audit: type=1326 audit(1732624335.360:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7ff74d9dde97 code=0x7ffc0000 [ 52.699785][ T29] audit: type=1326 audit(1732624335.360:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff74d9dd12a code=0x7ffc0000 [ 52.723248][ T29] audit: type=1326 audit(1732624335.360:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff74d9dd12a code=0x7ffc0000 [ 52.746487][ T29] audit: type=1326 audit(1732624335.360:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff74d9dd12a code=0x7ffc0000 [ 52.769961][ T29] audit: type=1326 audit(1732624335.360:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff74d9dd5aa code=0x7ffc0000 [ 52.793121][ T29] audit: type=1326 audit(1732624335.360:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74d9de919 code=0x7ffc0000 [ 52.822981][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.999255][ T5246] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 53.144362][ T5261] netlink: 'syz.2.609': attribute type 4 has an invalid length. [ 53.231692][ T5264] netlink: 68 bytes leftover after parsing attributes in process `syz.1.610'. [ 53.311840][ T5268] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.513618][ T5281] loop1: detected capacity change from 0 to 512 [ 53.548370][ T5281] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.549030][ T5283] IPVS: Error connecting to the multicast addr [ 53.573786][ T5281] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 53.586936][ T5281] EXT4-fs error (device loop1): ext4_orphan_get:1389: comm syz.1.616: inode #15: comm syz.1.616: iget: illegal inode # [ 53.592568][ T5286] netlink: 112865 bytes leftover after parsing attributes in process `+}[@'. [ 53.611688][ T5281] EXT4-fs (loop1): Remounting filesystem read-only [ 53.626373][ T5281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.635529][ T5288] loop0: detected capacity change from 0 to 512 [ 53.641418][ T5281] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 53.652421][ T5281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.676574][ T5288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.721046][ T5288] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.796153][ T5281] bond1: entered promiscuous mode [ 53.801241][ T5281] bond1: entered allmulticast mode [ 53.806719][ T5281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.838138][ T5281] bond1 (unregistering): Released all slaves [ 53.892168][ T5294] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #19: comm syz.0.619: corrupted inode contents [ 53.928532][ T5294] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #19: comm syz.0.619: mark_inode_dirty error [ 53.965512][ T5294] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #19: comm syz.0.619: corrupted inode contents [ 54.010989][ T5294] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.619: mark_inode_dirty error [ 54.047051][ T5294] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.619: mark inode dirty (error -117) [ 54.066581][ T5294] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 54.133234][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.271588][ T5322] loop1: detected capacity change from 0 to 512 [ 54.292290][ T5322] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.325621][ T5322] EXT4-fs error (device loop1): ext4_quota_enable:7112: inode #3: comm syz.1.628: iget: special inode unallocated [ 54.347676][ T5322] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.628: Bad quota inode: 3, type: 0 [ 54.383907][ T5322] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 54.438091][ T5336] netlink: 'syz.5.630': attribute type 4 has an invalid length. [ 54.545561][ T3314] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 54.745469][ T5353] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.049854][ T5370] syz.0.639[5370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.049959][ T5370] syz.0.639[5370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.092795][ T5370] syz.0.639[5370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.345472][ T5383] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.644'. [ 55.410628][ T5386] loop5: detected capacity change from 0 to 512 [ 55.419996][ T5386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.431952][ T5386] EXT4-fs (loop5): orphan cleanup on readonly fs [ 55.446795][ T5386] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.646: bg 0: block 248: padding at end of block bitmap is not set [ 55.462366][ T5386] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.646: Failed to acquire dquot type 1 [ 55.479578][ T5386] EXT4-fs (loop5): 1 truncate cleaned up [ 55.486864][ T5386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.508956][ T5386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.560853][ T5386] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 55.582219][ T5392] loop2: detected capacity change from 0 to 512 [ 55.599280][ T5394] tap0: tun_chr_ioctl cmd 1074025675 [ 55.604675][ T5394] tap0: persist enabled [ 55.609257][ T5394] tap0: tun_chr_ioctl cmd 1074025675 [ 55.614677][ T5394] tap0: persist enabled [ 55.620063][ T5386] EXT4-fs error (device loop5): __ext4_remount:6749: comm syz.5.646: Abort forced by user [ 55.640954][ T5386] EXT4-fs (loop5): Remounting filesystem read-only [ 55.647629][ T5386] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 55.660410][ T5386] ext4 filesystem being remounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.682454][ T5392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.695268][ T5392] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.700881][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.821876][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.992184][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 56.123344][ T5429] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.139259][ T5431] netlink: 'syz.2.661': attribute type 4 has an invalid length. [ 56.588850][ T5444] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 56.595397][ T5444] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.602904][ T5444] vhci_hcd vhci_hcd.0: Device attached [ 56.620455][ T5449] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.635766][ T5449] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.646444][ T5444] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.673277][ T5444] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 56.679990][ T5444] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.688109][ T5444] vhci_hcd vhci_hcd.0: Device attached [ 56.703693][ T5447] vhci_hcd: connection closed [ 56.703827][ T5451] vhci_hcd: connection closed [ 56.703890][ T4581] vhci_hcd: stop threads [ 56.718279][ T4581] vhci_hcd: release socket [ 56.722964][ T4581] vhci_hcd: disconnect device [ 56.740425][ T4581] vhci_hcd: stop threads [ 56.745327][ T4581] vhci_hcd: release socket [ 56.749795][ T4581] vhci_hcd: disconnect device [ 56.890097][ T5456] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 56.917189][ T5456] SELinux: failed to load policy [ 57.036047][ T5465] loop0: detected capacity change from 0 to 512 [ 57.052164][ T5469] loop5: detected capacity change from 0 to 512 [ 57.059013][ T5465] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.073519][ T5465] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 57.084471][ T5465] EXT4-fs error (device loop0): ext4_orphan_get:1389: comm syz.0.671: inode #15: comm syz.0.671: iget: illegal inode # [ 57.098658][ T5465] EXT4-fs (loop0): Remounting filesystem read-only [ 57.105894][ T5465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.119290][ T5465] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 57.120119][ T5469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.139439][ T5465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.150073][ T5469] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.189566][ T5465] bond1: entered promiscuous mode [ 57.194687][ T5465] bond1: entered allmulticast mode [ 57.200100][ T5465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.218932][ T5465] bond1 (unregistering): Released all slaves [ 57.258989][ T5469] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #19: comm syz.5.673: corrupted inode contents [ 57.294797][ T5481] netlink: 'syz.2.676': attribute type 4 has an invalid length. [ 57.302580][ T5469] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #19: comm syz.5.673: mark_inode_dirty error [ 57.337414][ T5469] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #19: comm syz.5.673: corrupted inode contents [ 57.353831][ T5469] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #19: comm syz.5.673: mark_inode_dirty error [ 57.393390][ T5469] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #19: comm syz.5.673: mark inode dirty (error -117) [ 57.433983][ T5469] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 57.473026][ T5491] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.473675][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.600588][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 57.600604][ T29] audit: type=1400 audit(1732624340.380:1110): avc: denied { attach_queue } for pid=5497 comm="syz.5.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.981477][ T5510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.002653][ T29] audit: type=1400 audit(1732624340.780:1111): avc: denied { validate_trans } for pid=5511 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.002693][ T5510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.078940][ T29] audit: type=1326 audit(1732624340.860:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3efbe919 code=0x7ffc0000 [ 58.134538][ T29] audit: type=1326 audit(1732624340.860:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3d3efbe919 code=0x7ffc0000 [ 58.157821][ T29] audit: type=1326 audit(1732624340.870:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d3eff0a05 code=0x7ffc0000 [ 58.181293][ T29] audit: type=1326 audit(1732624340.870:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3efbe919 code=0x7ffc0000 [ 58.204701][ T29] audit: type=1326 audit(1732624340.870:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3efbe919 code=0x7ffc0000 [ 58.228021][ T29] audit: type=1326 audit(1732624340.880:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3d3efbe919 code=0x7ffc0000 [ 58.251501][ T29] audit: type=1326 audit(1732624340.880:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3efbe919 code=0x7ffc0000 [ 58.274976][ T29] audit: type=1326 audit(1732624340.880:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3efbe919 code=0x7ffc0000 [ 58.333673][ T5524] netlink: 'syz.0.692': attribute type 4 has an invalid length. [ 58.362890][ T5526] loop2: detected capacity change from 0 to 512 [ 58.399157][ T5526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.435331][ T5526] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.496915][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.826716][ T5562] loop0: detected capacity change from 0 to 512 [ 58.844053][ T5562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.871517][ T5562] EXT4-fs (loop0): 1 truncate cleaned up [ 58.890871][ T5562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.154300][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.202167][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 59.203910][ T5571] loop0: detected capacity change from 0 to 2048 [ 59.223922][ T5571] journal_path: Non-blockdev passed as './file0' [ 59.230377][ T5571] EXT4-fs: error: could not find journal device path [ 59.272557][ T5575] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.296433][ T5575] smc: net device bond0 erased user defined pnetid SYZ0 [ 59.322752][ T5579] loop0: detected capacity change from 0 to 2048 [ 59.326651][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.354409][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.388502][ T5581] loop4: detected capacity change from 0 to 512 [ 59.388938][ T5579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.421417][ T5581] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.714: bg 0: block 16: invalid block bitmap [ 59.430953][ T5579] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 59.448338][ T5579] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 3 with error 28 [ 59.449798][ T5586] syz.5.715[5586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.460650][ T5579] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.460650][ T5579] [ 59.463339][ T5581] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.475475][ T5579] EXT4-fs (loop0): Total free blocks count 0 [ 59.499329][ T5579] EXT4-fs (loop0): Free/Dirty block details [ 59.505998][ T5579] EXT4-fs (loop0): free_blocks=66060288 [ 59.511565][ T5579] EXT4-fs (loop0): dirty_blocks=16 [ 59.514942][ T5586] syz.5.715[5586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.516735][ T5579] EXT4-fs (loop0): Block reservation details [ 59.516748][ T5579] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 59.544586][ T5586] syz.5.715[5586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.553607][ T5581] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.714: invalid indirect mapped block 5 (level 0) [ 59.582559][ T5581] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.714: invalid indirect mapped block 4294967295 (level 1) [ 59.605931][ T5581] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.714: invalid indirect mapped block 4294967295 (level 2) [ 59.623854][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.634340][ T5581] EXT4-fs (loop4): 1 truncate cleaned up [ 59.640776][ T5581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.669202][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.679293][ T5604] netlink: 3 bytes leftover after parsing attributes in process `syz.0.718'. [ 59.689503][ T5604] 1�X���: renamed from 60�X��� [ 59.712441][ T5604] A link change request failed with some changes committed already. Interface 61�X��� may have been left with an inconsistent configuration, please check. [ 59.791256][ T5623] loop0: detected capacity change from 0 to 2048 [ 59.835745][ T5623] loop0: p1 < > p4 [ 59.841641][ T5623] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.879033][ T3020] loop0: p1 < > p4 [ 59.883477][ T3020] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.945451][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 59.948932][ T3579] udevd[3579]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 60.026659][ T5656] loop2: detected capacity change from 0 to 164 [ 60.064180][ T5656] Unsupported NM flag settings (8) [ 60.159254][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 60.552729][ T5710] loop1: detected capacity change from 0 to 512 [ 60.593663][ T5710] EXT4-fs: Ignoring removed oldalloc option [ 60.617003][ T5710] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.735: Parent and EA inode have the same ino 15 [ 60.664617][ T5710] EXT4-fs (loop1): Remounting filesystem read-only [ 60.671190][ T5710] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 60.701084][ T5710] EXT4-fs (loop1): 1 orphan inode deleted [ 60.714418][ T5710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.726554][ T5710] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 60.757665][ T5710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.797807][ T5730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.831529][ T5730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.906261][ T5752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'. [ 61.300567][ T5797] netem: unknown loss type 5 [ 61.391825][ T5806] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.457925][ T5814] loop5: detected capacity change from 0 to 128 [ 61.521617][ T5824] netlink: 44 bytes leftover after parsing attributes in process `syz.1.767'. [ 61.557551][ T5828] netlink: 72 bytes leftover after parsing attributes in process `syz.5.768'. [ 61.735962][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.5.773'. [ 61.778688][ T5845] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 61.882047][ T5856] loop4: detected capacity change from 0 to 164 [ 61.890654][ T5856] rock: directory entry would overflow storage [ 61.896899][ T5856] rock: sig=0x4f50, size=4, remaining=3 [ 61.902510][ T5856] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 61.927785][ T5859] tmpfs: Unknown parameter 'mp' [ 61.949236][ T5862] SELinux: Context � is not valid (left unmapped). [ 61.984393][ T5866] netlink: 'syz.4.784': attribute type 4 has an invalid length. [ 62.247995][ T5879] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.788' sets config #1 [ 62.270391][ T5881] loop2: detected capacity change from 0 to 512 [ 62.279004][ T5881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.308439][ T5881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.326844][ T5881] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.364364][ T5891] loop4: detected capacity change from 0 to 736 [ 62.400849][ T5891] rock: directory entry would overflow storage [ 62.407253][ T5891] rock: sig=0x3b10, size=4, remaining=3 [ 62.416606][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.452141][ T5894] loop4: detected capacity change from 0 to 512 [ 62.468085][ T5894] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 62.476397][ T5894] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 62.499317][ T5894] tmpfs: Bad value for 'mpol' [ 62.587729][ T5911] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.617877][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 62.617893][ T29] audit: type=1400 audit(1732624345.400:1312): avc: denied { map } for pid=5915 comm="syz.2.803" path="socket:[12500]" dev="sockfs" ino=12500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 62.647523][ T29] audit: type=1400 audit(1732624345.410:1313): avc: denied { name_bind } for pid=5915 comm="syz.2.803" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.649111][ T5918] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 62.669147][ T29] audit: type=1400 audit(1732624345.410:1314): avc: denied { node_bind } for pid=5915 comm="syz.2.803" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 62.697435][ T5921] loop2: detected capacity change from 0 to 512 [ 62.701415][ T5918] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 62.711942][ T29] audit: type=1400 audit(1732624345.490:1315): avc: denied { watch watch_reads } for pid=5901 comm="syz.0.797" path="/157" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.748321][ T5921] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.805: corrupted in-inode xattr: invalid ea_ino [ 62.767503][ T5928] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 62.787268][ T5921] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.805: couldn't read orphan inode 15 (err -117) [ 62.791026][ T29] audit: type=1400 audit(1732624345.530:1316): avc: denied { module_request } for pid=5922 comm="syz.5.806" kmod="crypto-ccm(sm4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.817417][ T5921] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.821191][ T29] audit: type=1400 audit(1732624345.550:1317): avc: denied { mac_admin } for pid=5927 comm="syz.4.807" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.854184][ T29] audit: type=1400 audit(1732624345.560:1318): avc: denied { relabelto } for pid=5927 comm="syz.4.807" name="pids.max" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 62.880908][ T29] audit: type=1400 audit(1732624345.560:1319): avc: denied { associate } for pid=5927 comm="syz.4.807" name="pids.max" dev="cgroup2" ino=70 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_log_t:s0" [ 62.908819][ T29] audit: type=1400 audit(1732624345.620:1320): avc: denied { mount } for pid=5920 comm="syz.2.805" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.930492][ T29] audit: type=1400 audit(1732624345.650:1321): avc: denied { open } for pid=5939 comm="syz.4.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.950857][ T5921] EXT4-fs (loop2): re-mounted 00000007-0000-0000-0000-000000000000 ro. Quota mode: none. [ 62.972217][ T3321] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 62.983595][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 62.991118][ T3392] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 63.001975][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.009502][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x6 [ 63.016941][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0xd [ 63.026884][ T3392] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0 [ 63.062958][ T5950] tmpfs: Bad value for 'nr_blocks' [ 63.153317][ T5965] loop5: detected capacity change from 0 to 512 [ 63.160335][ T5965] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.171602][ T5965] EXT4-fs (loop5): 1 truncate cleaned up [ 63.178951][ T5965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.206114][ T5970] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.210856][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.225508][ T5972] netlink: 'syz.4.823': attribute type 4 has an invalid length. [ 63.458628][ T5990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.830'. [ 63.495170][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.5.831'. [ 63.527490][ T5999] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 63.561914][ T6001] netlink: 'syz.5.836': attribute type 6 has an invalid length. [ 63.621757][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.839'. [ 63.690485][ T6017] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.758334][ T6025] hub 9-0:1.0: USB hub found [ 63.763107][ T6025] hub 9-0:1.0: 8 ports detected [ 63.798164][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.936755][ T6047] loop0: detected capacity change from 0 to 2048 [ 63.997430][ T6055] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in; [ 63.997430][ T6055] program syz.0.857 not setting count and/or reply_len properly [ 64.104351][ T6061] loop4: detected capacity change from 0 to 8192 [ 64.152928][ T6077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.868'. [ 64.201536][ T6082] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.535606][ T6097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.877'. [ 64.544680][ T6097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.877'. [ 64.678936][ T6110] loop1: detected capacity change from 0 to 164 [ 64.818643][ T6122] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.905219][ T6131] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1109 [ 65.105524][ T6152] netlink: 'syz.4.897': attribute type 4 has an invalid length. [ 65.302454][ T6176] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.596806][ T6201] loop5: detected capacity change from 0 to 512 [ 65.693675][ T6201] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 65.697256][ T6219] netlink: 'syz.4.924': attribute type 4 has an invalid length. [ 65.701756][ T6201] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 65.711709][ T6218] Illegal XDP return value 4294967274 on prog (id 565) dev N/A, expect packet loss! [ 65.717800][ T6201] System zones: 0-1, 15-15, 18-18, 34-34 [ 65.733479][ T6201] EXT4-fs (loop5): orphan cleanup on readonly fs [ 65.740318][ T6201] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 65.754904][ T6201] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 65.766362][ T6201] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.919: bad orphan inode 16 [ 65.779478][ T6201] ext4_test_bit(bit=15, block=18) = 1 [ 65.785590][ T6201] is_bad_inode(inode)=0 [ 65.789784][ T6201] NEXT_ORPHAN(inode)=0 [ 65.793856][ T6201] max_ino=32 [ 65.797135][ T6201] i_nlink=2 [ 65.802605][ T6201] EXT4-fs mount: 2 callbacks suppressed [ 65.802662][ T6201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.841839][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.042720][ T6236] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.076863][ T6239] __nla_validate_parse: 13 callbacks suppressed [ 66.076878][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'. [ 66.173600][ T6245] IPVS: Error joining to the multicast group [ 66.230801][ T6250] loop2: detected capacity change from 0 to 2048 [ 66.258532][ T6250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.287048][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.367208][ T6260] loop2: detected capacity change from 0 to 128 [ 66.390732][ T6260] syz.2.938: attempt to access beyond end of device [ 66.390732][ T6260] loop2: rw=2049, sector=153, nr_sectors = 5 limit=128 [ 66.408515][ T6262] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 66.434681][ T6264] x_tables: unsorted underflow at hook 1 [ 66.520605][ T6269] netlink: 'syz.2.942': attribute type 4 has an invalid length. [ 66.705100][ T6275] loop1: detected capacity change from 0 to 8192 [ 66.804481][ T6283] loop1: detected capacity change from 0 to 2048 [ 66.864458][ T6286] loop0: detected capacity change from 0 to 256 [ 66.870164][ T6283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.886436][ T6283] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.948: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 66.907115][ T6283] EXT4-fs (loop1): Remounting filesystem read-only [ 66.924195][ T6289] x_tables: unsorted underflow at hook 1 [ 66.931197][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.966720][ T6295] loop4: detected capacity change from 0 to 512 [ 66.973452][ T6295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.017064][ T6295] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.037903][ T6295] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.953: bg 0: block 248: padding at end of block bitmap is not set [ 67.063129][ T6295] EXT4-fs (loop4): Remounting filesystem read-only [ 67.069905][ T6295] EXT4-fs (loop4): 1 truncate cleaned up [ 67.085088][ T6295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.097571][ T6295] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 67.104340][ T6295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.160032][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 67.169548][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 67.179824][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 67.212280][ T6312] loop4: detected capacity change from 0 to 512 [ 67.219591][ T6312] EXT4-fs: Ignoring removed orlov option [ 67.226767][ T6312] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.239356][ T6312] EXT4-fs (loop4): 1 orphan inode deleted [ 67.245170][ T6312] EXT4-fs (loop4): 1 truncate cleaned up [ 67.256557][ T6312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.270548][ T6312] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 67.312929][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.379159][ T6327] loop4: detected capacity change from 0 to 512 [ 67.403427][ T6327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.417179][ T6330] loop5: detected capacity change from 0 to 512 [ 67.432775][ T6330] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.444760][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.476494][ T6327] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.511484][ T6330] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 67.545979][ T6337] loop1: detected capacity change from 0 to 512 [ 67.556684][ T6330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0082] [ 67.564843][ T6330] System zones: 1-12 [ 67.567854][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.570825][ T6330] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.966: corrupted in-inode xattr: e_value size too large [ 67.594521][ T6330] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.966: couldn't read orphan inode 15 (err -117) [ 67.611396][ T6330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.637024][ T6340] hub 9-0:1.0: USB hub found [ 67.643923][ T6340] hub 9-0:1.0: 8 ports detected [ 67.689741][ T6344] loop4: detected capacity change from 0 to 128 [ 67.698341][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 67.698355][ T29] audit: type=1326 audit(1732624350.460:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 67.728617][ T29] audit: type=1326 audit(1732624350.470:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 67.752689][ T29] audit: type=1326 audit(1732624350.470:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 67.776756][ T29] audit: type=1326 audit(1732624350.470:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 67.800101][ T29] audit: type=1326 audit(1732624350.470:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 67.824107][ T29] audit: type=1326 audit(1732624350.470:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 67.848069][ T29] audit: type=1326 audit(1732624350.470:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 67.857455][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.871420][ T29] audit: type=1326 audit(1732624350.470:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 67.893016][ T6337] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.908453][ T29] audit: type=1326 audit(1732624350.470:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51c6d1e953 code=0x7ffc0000 [ 67.908481][ T29] audit: type=1326 audit(1732624350.470:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f51c6d1d3ff code=0x7ffc0000 [ 67.912591][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.925240][ T6344] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.012808][ T6344] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.100423][ T6352] loop5: detected capacity change from 0 to 8192 [ 68.133689][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 68.143304][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 68.143635][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.153429][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 68.194198][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 68.203772][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 68.221738][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 68.248503][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.292192][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.299436][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.320530][ T6369] bridge0: entered allmulticast mode [ 68.328727][ T6371] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 68.337001][ T6371] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 68.388395][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.395512][ T6369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.402899][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.410113][ T6369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.419590][ T6369] bridge0: entered promiscuous mode [ 68.451787][ T6379] loop2: detected capacity change from 0 to 512 [ 68.483900][ T6379] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.521855][ T6379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.546168][ T6379] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.985: corrupted inode contents [ 68.559912][ T6396] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.569630][ T6379] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.985: mark_inode_dirty error [ 68.596530][ T6379] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.985: corrupted inode contents [ 68.670612][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.748744][ T6419] loop2: detected capacity change from 0 to 1024 [ 68.756054][ T6419] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 68.794333][ T6422] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.812487][ T6426] bond_slave_0: entered promiscuous mode [ 68.818463][ T6426] bond_slave_1: entered promiscuous mode [ 68.826393][ T6426] macvlan3: entered allmulticast mode [ 68.831798][ T6426] bond0: entered allmulticast mode [ 68.837624][ T6426] bond_slave_0: entered allmulticast mode [ 68.843397][ T6426] bond_slave_1: entered allmulticast mode [ 68.850219][ T6426] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 68.859575][ T6426] bond0: left allmulticast mode [ 68.864467][ T6426] bond_slave_0: left allmulticast mode [ 68.870727][ T6426] bond_slave_1: left allmulticast mode [ 68.876282][ T6426] bond_slave_0: left promiscuous mode [ 68.881672][ T6426] bond_slave_1: left promiscuous mode [ 68.898294][ T6433] loop2: detected capacity change from 0 to 512 [ 68.916127][ T6433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.928889][ T6433] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.970036][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.117037][ T6457] loop2: detected capacity change from 0 to 512 [ 69.125263][ T6457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.137560][ T6457] EXT4-fs (loop2): 1 truncate cleaned up [ 69.143918][ T6457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.159614][ T6461] loop0: detected capacity change from 0 to 512 [ 69.166862][ T6461] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 69.181012][ T6457] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.1013: inode #1073372648: comm syz.2.1013: iget: illegal inode # [ 69.190217][ T6461] EXT4-fs: error: could not find journal device path [ 69.211866][ T6457] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.1013: error while reading EA inode 1073372648 err=-117 [ 69.232188][ T6457] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.1013: corrupted xattr block 33: invalid header [ 69.252482][ T6457] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 69.284406][ T6467] loop0: detected capacity change from 0 to 128 [ 69.296740][ T6467] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.309718][ T6467] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.343495][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.373825][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.447279][ T6478] loop0: detected capacity change from 0 to 2048 [ 69.476436][ T6478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.493666][ T6478] EXT4-fs: Ignoring removed orlov option [ 69.502642][ T6478] EXT4-fs (loop0): can't enable nombcache during remount [ 69.522208][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.596108][ T6489] loop4: detected capacity change from 0 to 512 [ 69.635073][ T6489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.654241][ T6495] loop1: detected capacity change from 0 to 512 [ 69.657887][ T6489] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.720366][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.731247][ T6497] loop0: detected capacity change from 0 to 8192 [ 69.774221][ T6495] EXT4-fs (loop1): too many log groups per flexible block group [ 69.781959][ T6495] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 69.804951][ T6504] syz.4.1030[6504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.805009][ T6504] syz.4.1030[6504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.824699][ T6495] EXT4-fs (loop1): mount failed [ 69.845322][ T6504] syz.4.1030[6504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.849228][ T6504] loop4: detected capacity change from 0 to 512 [ 69.906097][ T6504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.930028][ T6514] loop0: detected capacity change from 0 to 512 [ 69.941469][ T6504] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.969710][ T6504] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.1030: corrupted inode contents [ 69.982944][ T6504] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #18: comm syz.4.1030: mark_inode_dirty error [ 69.996261][ T6504] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.1030: corrupted inode contents [ 70.009434][ T6514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.038649][ T6514] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.089748][ T6504] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.1030: mark_inode_dirty error [ 70.129764][ T6504] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.1030: mark inode dirty (error -117) [ 70.134705][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.155395][ T6504] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 70.189427][ T6532] SELinux: syz.5.1043 (6532) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 70.207243][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.709511][ T6565] netlink: 'syz.5.1056': attribute type 4 has an invalid length. [ 70.789977][ T6571] loop1: detected capacity change from 0 to 512 [ 70.831691][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.833658][ T6576] loop0: detected capacity change from 0 to 1024 [ 70.856356][ T6571] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.873644][ T6576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.919496][ T6584] loop2: detected capacity change from 0 to 128 [ 71.019080][ T6591] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.030921][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.043986][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.149510][ T6603] syzkaller1: entered promiscuous mode [ 71.149994][ T6604] loop2: detected capacity change from 0 to 512 [ 71.155070][ T6603] syzkaller1: entered allmulticast mode [ 71.177788][ T6604] EXT4-fs: Ignoring removed orlov option [ 71.183965][ T6604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.204354][ T6604] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.212101][ T6604] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1072: bg 0: block 248: padding at end of block bitmap is not set [ 71.227652][ T6604] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1072: Failed to acquire dquot type 1 [ 71.246951][ T6604] EXT4-fs (loop2): 1 truncate cleaned up [ 71.253172][ T6604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.295715][ T6604] EXT4-fs: Ignoring removed orlov option [ 71.301475][ T6604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.316410][ T6604] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 71.365734][ T6604] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.1072: Abort forced by user [ 71.376182][ T6604] EXT4-fs (loop2): Remounting filesystem read-only [ 71.382829][ T6604] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 71.396190][ T6604] ext4 filesystem being remounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.418645][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.629340][ T6636] netlink: 'syz.0.1084': attribute type 4 has an invalid length. [ 71.665957][ T6638] loop5: detected capacity change from 0 to 1024 [ 71.673497][ T6638] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.684455][ T6638] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 71.693442][ T6638] EXT4-fs (loop5): orphan cleanup on readonly fs [ 71.701222][ T6638] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 71.711699][ T6638] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #3: comm syz.5.1083: mark_inode_dirty error [ 71.723509][ T6638] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1083: Invalid block bitmap block 3 in block_group 0 [ 71.739693][ T6638] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1083: Invalid block bitmap block 3 in block_group 0 [ 71.753786][ T6638] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1083: Invalid block bitmap block 3 in block_group 0 [ 71.768359][ T6638] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 71.778020][ T6638] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #3: comm syz.5.1083: mark_inode_dirty error [ 71.790554][ T6638] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 1: comm syz.5.1083: lblock 6 mapped to illegal pblock 1 (length 1) [ 71.804906][ T6638] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 48: comm syz.5.1083: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.821588][ T6638] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1083: Failed to acquire dquot type 0 [ 71.833255][ T6638] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 49: comm syz.5.1083: lblock 1 mapped to illegal pblock 49 (length 1) [ 71.849722][ T6638] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1083: Failed to acquire dquot type 0 [ 71.861472][ T6638] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 71.872399][ T6638] EXT4-fs error (device loop5): ext4_evict_inode:256: inode #15: comm syz.5.1083: mark_inode_dirty error [ 71.884172][ T6638] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 71.895385][ T6638] EXT4-fs (loop5): 1 orphan inode deleted [ 71.901695][ T6638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.947559][ T6638] syz.5.1083 (6638) used greatest stack depth: 8952 bytes left [ 71.966984][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.220469][ T6662] __nla_validate_parse: 4 callbacks suppressed [ 72.220486][ T6662] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1093'. [ 72.259511][ T6668] loop4: detected capacity change from 0 to 512 [ 72.267019][ T6668] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.281645][ T6668] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1095: invalid indirect mapped block 4294967295 (level 0) [ 72.297557][ T6668] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1095: invalid indirect mapped block 4294967295 (level 1) [ 72.300425][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.313913][ T6668] EXT4-fs (loop4): 1 orphan inode deleted [ 72.321342][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.326578][ T6668] EXT4-fs (loop4): 1 truncate cleaned up [ 72.340123][ T6668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.366303][ T6668] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.1095: iget: bad extra_isize 46 (inode size 256) [ 72.410400][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.433887][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1098'. [ 72.443001][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1098'. [ 72.458556][ T6682] loop2: detected capacity change from 0 to 128 [ 72.476567][ T6682] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.490543][ T6682] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.526695][ T6682] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none. [ 72.555732][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.583609][ T6691] loop2: detected capacity change from 0 to 512 [ 72.593263][ T6691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.619987][ T6691] EXT4-fs (loop2): 1 truncate cleaned up [ 72.627293][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.679357][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.818140][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 72.818155][ T29] audit: type=1400 audit(1732624355.600:1616): avc: denied { mounton } for pid=6708 comm="syz.1.1113" path="/proc/494/cgroup" dev="proc" ino=14058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 72.849122][ T29] audit: type=1400 audit(1732624355.630:1617): avc: denied { unmount } for pid=6708 comm="syz.1.1113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 72.896736][ T6713] loop5: detected capacity change from 0 to 1024 [ 72.903580][ T6713] EXT4-fs: Ignoring removed nobh option [ 72.909253][ T6713] EXT4-fs: Ignoring removed orlov option [ 72.949485][ T29] audit: type=1326 audit(1732624355.730:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfab7e919 code=0x7ffc0000 [ 72.992290][ T29] audit: type=1326 audit(1732624355.730:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcfab7e919 code=0x7ffc0000 [ 73.015764][ T29] audit: type=1326 audit(1732624355.730:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfab7e919 code=0x7ffc0000 [ 73.039166][ T29] audit: type=1326 audit(1732624355.730:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdcfab7e919 code=0x7ffc0000 [ 73.079024][ T29] audit: type=1326 audit(1732624355.780:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfab7e919 code=0x7ffc0000 [ 73.103032][ T29] audit: type=1326 audit(1732624355.780:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfab7e919 code=0x7ffc0000 [ 73.128417][ T6713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.151231][ T6726] loop0: detected capacity change from 0 to 1024 [ 73.159051][ T29] audit: type=1400 audit(1732624355.940:1624): avc: denied { read } for pid=6712 comm="syz.5.1114" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.175497][ T6724] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.183477][ T6726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.260361][ T6726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.271514][ T4663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.319643][ T6732] loop4: detected capacity change from 0 to 2048 [ 73.357820][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.399126][ T6732] loop4: p1 < > p4 [ 73.405560][ T6732] loop4: p4 size 8388608 extends beyond EOD, truncated [ 73.543011][ T6745] loop4: detected capacity change from 0 to 164 [ 73.558685][ T6749] loop1: detected capacity change from 0 to 512 [ 73.565237][ T6745] rock: directory entry would overflow storage [ 73.571550][ T6745] rock: sig=0x66, size=4, remaining=3 [ 73.581645][ T6743] loop0: detected capacity change from 0 to 1764 [ 73.589405][ T6745] rock: directory entry would overflow storage [ 73.595664][ T6745] rock: sig=0x66, size=4, remaining=3 [ 73.595953][ T29] audit: type=1326 audit(1732624356.370:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6746 comm="syz.2.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3efbe919 code=0x7ffc0000 [ 73.624870][ T6745] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 73.628488][ T6749] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.679112][ T6749] EXT4-fs (loop1): 1 truncate cleaned up [ 73.712480][ T6749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.728994][ T6756] loop4: detected capacity change from 0 to 164 [ 73.729567][ T6760] loop2: detected capacity change from 0 to 128 [ 73.749638][ T6756] rock: directory entry would overflow storage [ 73.756753][ T6756] rock: sig=0x66, size=4, remaining=3 [ 73.788216][ T6756] rock: directory entry would overflow storage [ 73.794412][ T6756] rock: sig=0x66, size=4, remaining=3 [ 73.825022][ T6756] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 73.846535][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.870406][ T6767] loop0: detected capacity change from 0 to 164 [ 73.881778][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.881778][ T6767] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 73.902156][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.902156][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.915700][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.915700][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.929281][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.929281][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.942856][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.942856][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.956359][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.956359][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.970374][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.970374][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.984042][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.984042][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.997747][ T6767] syz.0.1138: attempt to access beyond end of device [ 73.997747][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.011353][ T6767] syz.0.1138: attempt to access beyond end of device [ 74.011353][ T6767] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.088847][ T6776] loop1: detected capacity change from 0 to 512 [ 74.274451][ T6788] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.331996][ T6776] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1136: corrupted in-inode xattr: invalid ea_ino [ 74.373593][ T6776] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1136: couldn't read orphan inode 15 (err -117) [ 74.441347][ T6776] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.571099][ T3314] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 74.662436][ T6798] loop5: detected capacity change from 0 to 2048 [ 74.715853][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 74.727139][ T6798] loop5: p1 < > p4 [ 74.736656][ T6804] loop0: detected capacity change from 0 to 256 [ 74.744237][ T6798] loop5: p4 size 8388608 extends beyond EOD, truncated [ 74.805436][ T6804] loop0: detected capacity change from 256 to 11 [ 74.813035][ T6804] FAT-fs (loop0): unable to read inode block for updating (i_pos 202) [ 74.826673][ T6804] FAT-fs (loop0): unable to read inode block for updating (i_pos 202) [ 74.856779][ T3579] udevd[3579]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 74.928876][ T6817] program syz.5.1156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.933758][ T3316] FAT-fs (loop0): Directory bread(block 3) failed [ 74.955823][ T4591] Buffer I/O error on dev loop0, logical block 21, lost async page write [ 74.968850][ T4591] FAT-fs (loop0): unable to read inode block for updating (i_pos 202) [ 75.052436][ T6825] loop1: detected capacity change from 0 to 1024 [ 75.096739][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.124757][ T6825] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.139904][ T6825] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1161: bg 0: block 393: padding at end of block bitmap is not set [ 75.174359][ T6825] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 75.191005][ T6825] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.191005][ T6825] [ 75.259858][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.367918][ T6853] loop4: detected capacity change from 0 to 512 [ 75.396260][ T6853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.415873][ T6853] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.445627][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.646615][ T6875] syz.4.1174[6875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.646679][ T6875] syz.4.1174[6875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.658190][ T6875] syz.4.1174[6875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.671994][ T6876] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.697299][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1174'. [ 75.837989][ T6883] No such timeout policy "syz0" [ 75.838475][ T6885] loop2: detected capacity change from 0 to 128 [ 75.861717][ T6885] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.880052][ T6885] ext4 filesystem being mounted at /244/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.923037][ T6891] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1179'. [ 75.933699][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.070543][ T6903] serio: Serial port ptm0 [ 76.076107][ T6904] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.108675][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 76.146519][ T6909] SELinux: syz.2.1185 (6909) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 76.197850][ T6911] loop2: detected capacity change from 0 to 512 [ 76.239062][ T6911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.260575][ T6911] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.304444][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.312221][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.321492][ T6845] bridge_slave_0: entered allmulticast mode [ 76.328271][ T6845] bridge_slave_0: entered promiscuous mode [ 76.328438][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.335139][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.350225][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.364835][ T6845] bridge_slave_1: entered allmulticast mode [ 76.371890][ T6845] bridge_slave_1: entered promiscuous mode [ 76.437066][ T6928] loop2: detected capacity change from 0 to 4096 [ 76.459709][ T6931] loop5: detected capacity change from 0 to 512 [ 76.467797][ T6931] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.480579][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.491541][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.511216][ T6931] EXT4-fs (loop5): 1 truncate cleaned up [ 76.562657][ T6936] loop2: detected capacity change from 0 to 128 [ 76.569441][ T6936] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.583976][ T6936] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.623377][ T6845] team0: Port device team_slave_0 added [ 76.636600][ T6845] team0: Port device team_slave_1 added [ 76.696022][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.703076][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.729300][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.774451][ T4575] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.784665][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.791636][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.817585][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.999539][ T6845] hsr_slave_0: entered promiscuous mode [ 77.012463][ T6845] hsr_slave_1: entered promiscuous mode [ 77.022801][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.023201][ T6961] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.034104][ T6845] Cannot create hsr debugfs directory [ 77.310518][ T6845] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 77.319854][ T6845] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 77.332369][ T6845] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 77.341556][ T6845] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.390008][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.407289][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.417608][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.424716][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.461156][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.468342][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.569031][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.803172][ T6845] veth0_vlan: entered promiscuous mode [ 77.823710][ T6845] veth1_vlan: entered promiscuous mode [ 77.841087][ T6845] veth0_macvtap: entered promiscuous mode [ 77.859744][ T6845] veth1_macvtap: entered promiscuous mode [ 77.878648][ T7007] loop5: detected capacity change from 0 to 512 [ 77.887455][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.897966][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.907807][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.919264][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.929145][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.933952][ T7007] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.939628][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.939640][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.939655][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.966291][ T7007] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1210: invalid indirect mapped block 4294967295 (level 0) [ 77.970495][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.982218][ T7007] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1210: invalid indirect mapped block 4294967295 (level 1) [ 77.994690][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.995943][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.007571][ T7007] EXT4-fs (loop5): 1 orphan inode deleted [ 78.042707][ T7007] EXT4-fs (loop5): 1 truncate cleaned up [ 78.050895][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.061487][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.071360][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.082036][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.091953][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.102411][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.111560][ T7015] program syz.4.1213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.112324][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.131934][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.135319][ T7007] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.1210: iget: bad extra_isize 46 (inode size 256) [ 78.141772][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.164730][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.175685][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.185067][ T6845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.193781][ T6845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.202764][ T6845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.211625][ T6845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.273212][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 78.273224][ T29] audit: type=1400 audit(1732624361.050:1690): avc: denied { mounton } for pid=6845 comm="syz-executor" path="/root/syzkaller.xiUOxK/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.334019][ T29] audit: type=1400 audit(1732624361.090:1691): avc: denied { mounton } for pid=6845 comm="syz-executor" path="/root/syzkaller.xiUOxK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.360872][ T29] audit: type=1400 audit(1732624361.090:1692): avc: denied { mounton } for pid=6845 comm="syz-executor" path="/root/syzkaller.xiUOxK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.388899][ T29] audit: type=1400 audit(1732624361.100:1693): avc: denied { mounton } for pid=6845 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.599626][ T7035] loop2: detected capacity change from 0 to 128 [ 78.620682][ T7035] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.663779][ T7039] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.827144][ T7047] loop5: detected capacity change from 0 to 512 [ 78.838624][ T7047] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.874216][ T7047] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.1221: corrupted inode contents [ 78.910328][ T7047] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.1221: mark_inode_dirty error [ 78.921973][ T7047] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.1221: corrupted inode contents [ 78.973043][ T7052] netlink: 'syz.5.1222': attribute type 4 has an invalid length. [ 79.233718][ T7059] loop1: detected capacity change from 0 to 512 [ 79.246425][ T7059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.258067][ T7061] pim6reg1: entered promiscuous mode [ 79.263397][ T7061] pim6reg1: entered allmulticast mode [ 79.308395][ T7059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1225: invalid indirect mapped block 4294967295 (level 0) [ 79.330781][ T7059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1225: invalid indirect mapped block 4294967295 (level 1) [ 79.350441][ T7059] EXT4-fs (loop1): 1 orphan inode deleted [ 79.356274][ T7059] EXT4-fs (loop1): 1 truncate cleaned up [ 79.366680][ T7059] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.1225: iget: bad extra_isize 46 (inode size 256) [ 79.437268][ T29] audit: type=1326 audit(1732624362.220:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 79.460955][ T29] audit: type=1326 audit(1732624362.220:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 79.484410][ T29] audit: type=1326 audit(1732624362.220:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 79.507994][ T29] audit: type=1326 audit(1732624362.220:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 79.531406][ T29] audit: type=1326 audit(1732624362.220:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 79.554819][ T29] audit: type=1326 audit(1732624362.220:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c6d1e919 code=0x7ffc0000 [ 79.730301][ T7081] serio: Serial port ptm0 [ 79.857472][ T7086] loop1: detected capacity change from 0 to 1024 [ 79.867500][ T7089] loop5: detected capacity change from 0 to 128 [ 79.913815][ T7086] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.959488][ T7086] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 79.971906][ T7086] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.971906][ T7086] [ 79.981662][ T7086] EXT4-fs (loop1): Total free blocks count 0 [ 79.987672][ T7086] EXT4-fs (loop1): Free/Dirty block details [ 79.993567][ T7086] EXT4-fs (loop1): free_blocks=0 [ 79.998595][ T7086] EXT4-fs (loop1): dirty_blocks=0 [ 80.003662][ T7086] EXT4-fs (loop1): Block reservation details [ 80.009675][ T7086] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 80.232558][ T7103] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.296522][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.306895][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.423961][ T7112] loop5: detected capacity change from 0 to 512 [ 80.438813][ T7112] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.5.1241: corrupted xattr block 95: invalid header [ 80.452909][ T7112] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1241: bg 0: block 7: invalid block bitmap [ 80.467838][ T7112] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 80.476729][ T7112] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #11: comm syz.5.1241: corrupted xattr block 95: invalid header [ 80.491486][ T7112] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 80.500690][ T7112] EXT4-fs (loop5): 1 orphan inode deleted [ 80.861969][ T7137] loop4: detected capacity change from 0 to 512 [ 80.891292][ T7137] EXT4-fs (loop4): too many log groups per flexible block group [ 80.899110][ T7137] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 80.922347][ T7137] EXT4-fs (loop4): mount failed [ 81.174184][ T7164] loop6: detected capacity change from 0 to 1024 [ 81.181162][ T7164] EXT4-fs: Ignoring removed nobh option [ 81.187395][ T7164] EXT4-fs: Ignoring removed orlov option [ 81.258447][ T7164] EXT4-fs error (device loop6): __ext4_remount:6749: comm syz.6.1261: Abort forced by user [ 81.289194][ T7164] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 81.396011][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.406290][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.443619][ T7176] loop6: detected capacity change from 0 to 512 [ 81.454262][ T7176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.484324][ T7176] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.566167][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'. [ 81.580095][ T7190] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.596799][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'. [ 82.098741][ T7217] program syz.4.1280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.110498][ T7219] loop5: detected capacity change from 0 to 512 [ 82.138383][ T7219] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.1279: invalid block [ 82.154063][ T7219] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1279: invalid indirect mapped block 1024 (level 0) [ 82.176736][ T7219] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1279: bg 0: block 35: padding at end of block bitmap is not set [ 82.210938][ T7219] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 82.232848][ T7219] EXT4-fs (loop5): 1 truncate cleaned up [ 82.253330][ T7219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7219 comm=syz.5.1279 [ 82.411940][ T7254] hub 9-0:1.0: USB hub found [ 82.416845][ T7254] hub 9-0:1.0: 8 ports detected [ 82.587876][ T7276] smc: net device bond0 applied user defined pnetid SYZ0 [ 82.601864][ T7276] smc: net device bond0 erased user defined pnetid SYZ0 [ 82.650207][ T7279] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 82.652522][ T7284] loop1: detected capacity change from 0 to 1024 [ 82.677501][ T7286] netlink: 'syz.6.1299': attribute type 4 has an invalid length. [ 82.695666][ T7284] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.796154][ T7296] hub 9-0:1.0: USB hub found [ 82.807563][ T7296] hub 9-0:1.0: 8 ports detected [ 83.231395][ T7335] hub 9-0:1.0: USB hub found [ 83.243050][ T7335] hub 9-0:1.0: 8 ports detected [ 83.321477][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 83.321492][ T29] audit: type=1400 audit(1732624366.100:1839): avc: denied { relabelfrom } for pid=7336 comm="syz.6.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.348779][ T29] audit: type=1400 audit(1732624366.100:1840): avc: denied { relabelto } for pid=7336 comm="syz.6.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.412066][ T7340] loop2: detected capacity change from 0 to 256 [ 83.616972][ T7354] ref_ctr increment failed for inode: 0x75 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811ca0ca80 [ 83.629382][ T7357] netlink: 'syz.5.1325': attribute type 4 has an invalid length. [ 83.635394][ T7353] uprobe: syz.6.1324:7353 failed to unregister, leaking uprobe [ 83.813082][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 83.824391][ T7364] loop6: detected capacity change from 0 to 128 [ 83.832658][ T7364] ext4: Unknown parameter 'obj_role' [ 83.890716][ T7370] syz.4.1331[7370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.890889][ T7370] syz.4.1331[7370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.902482][ T7370] syz.4.1331[7370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.078389][ T29] audit: type=1400 audit(1732624366.860:1841): avc: denied { bind } for pid=7376 comm="syz.5.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.288731][ T29] audit: type=1326 audit(1732624367.070:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7563e919 code=0x7ffc0000 [ 84.351782][ T29] audit: type=1326 audit(1732624367.070:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7563e919 code=0x7ffc0000 [ 84.376177][ T29] audit: type=1326 audit(1732624367.070:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7563e919 code=0x7ffc0000 [ 84.399637][ T29] audit: type=1326 audit(1732624367.070:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7563e919 code=0x7ffc0000 [ 84.423728][ T29] audit: type=1326 audit(1732624367.070:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee7563e919 code=0x7ffc0000 [ 84.447839][ T29] audit: type=1326 audit(1732624367.100:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7563e919 code=0x7ffc0000 [ 84.471405][ T29] audit: type=1326 audit(1732624367.110:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7563e919 code=0x7ffc0000 [ 84.840852][ T7415] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 85.088214][ T7430] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.328396][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811813ce00: rx timeout, send abort [ 85.337346][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811813ce00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 85.352087][ C1] ------------[ cut here ]------------ [ 85.357887][ C1] refcount_t: underflow; use-after-free. [ 85.365160][ C1] WARNING: CPU: 1 PID: 7432 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 85.374887][ C1] Modules linked in: [ 85.379110][ C1] CPU: 1 UID: 0 PID: 7432 Comm: syz.1.1357 Tainted: G W 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 85.391427][ C1] Tainted: [W]=WARN [ 85.395517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.400784][ T7456] loop4: detected capacity change from 0 to 256 [ 85.405803][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 85.405910][ C1] Code: 72 ff ff ff e8 6b 3c 70 ff 48 c7 c7 e9 fc b2 86 e8 ef 88 89 ff c6 05 a1 b2 f2 04 01 90 48 c7 c7 ce 55 1c 86 e8 6b ce 51 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 3c 3c 70 ff 48 c7 c7 e6 fc b2 86 e8 [ 85.405957][ C1] RSP: 0018:ffffc900000e4b40 EFLAGS: 00010246 [ 85.406006][ C1] RAX: 9600295a371d8d00 RBX: ffff8881292e06e4 RCX: ffff8881021cd280 [ 85.406036][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.406074][ C1] RBP: 0000000000000003 R08: ffffffff81121a27 R09: 0000000000000000 [ 85.406117][ C1] R10: 0001ffffffffffff R11: 0001c900000e4977 R12: ffff88811813ce68 [ 85.406156][ C1] R13: 0000000000000000 R14: ffff8881292e06e4 R15: 0000000000000000 [ 85.406190][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 85.406224][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.406257][ C1] CR2: 00007f0c030b99e2 CR3: 00000001136da000 CR4: 00000000003506f0 [ 85.406847][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.426836][ T7458] loop2: detected capacity change from 0 to 512 [ 85.438803][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.438848][ C1] Call Trace: [ 85.438866][ C1] <IRQ> [ 85.438887][ C1] ? __warn+0x141/0x350 [ 85.438977][ C1] ? report_bug+0x315/0x420 [ 85.439013][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 85.439087][ C1] ? handle_bug+0x60/0x90 [ 85.439127][ C1] ? exc_invalid_op+0x1a/0x50 [ 85.439155][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 85.439237][ C1] ? __warn_printk+0x167/0x1b0 [ 85.439297][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 85.439347][ C1] sk_skb_reason_drop+0xe9/0x290 [ 85.439378][ C1] j1939_session_put+0x157/0x2a0 [ 85.439447][ C1] j1939_xtp_rx_abort_one+0x9d/0x410 [ 85.454022][ T7458] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.461910][ C1] j1939_tp_recv+0x71e/0xa80 [ 85.602848][ C1] j1939_can_recv+0x45f/0x550 [ 85.607574][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 85.612805][ C1] can_rcv_filter+0x225/0x4c0 [ 85.617526][ C1] can_receive+0x182/0x1f0 [ 85.621977][ C1] ? can_rcv+0xdc/0x180 [ 85.626174][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 85.630726][ C1] can_rcv+0xe7/0x180 [ 85.634728][ C1] ? __pfx_can_rcv+0x10/0x10 [ 85.639336][ C1] __netif_receive_skb+0x123/0x280 [ 85.644467][ C1] process_backlog+0x22e/0x440 [ 85.649276][ C1] __napi_poll+0x63/0x3c0 [ 85.653604][ C1] ? net_rx_action+0x376/0x7f0 [ 85.658381][ C1] net_rx_action+0x3a1/0x7f0 [ 85.662984][ C1] handle_softirqs+0xbf/0x280 [ 85.667675][ C1] __irq_exit_rcu+0x3a/0xc0 [ 85.672186][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 85.677862][ C1] </IRQ> [ 85.680793][ C1] <TASK> [ 85.683712][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.689718][ C1] RIP: 0010:kcsan_setup_watchpoint+0x404/0x410 [ 85.695901][ C1] Code: 49 c7 01 00 00 00 00 f0 48 ff 0d 97 74 75 07 0f b6 5c 24 07 4c 8b 4c 24 30 84 db 75 0a 41 81 e1 00 02 00 00 74 01 fb ff 4d 04 <e9> 9c fc ff ff 31 db e9 0a ff ff ff 90 90 90 90 90 90 90 90 90 90 [ 85.715531][ C1] RSP: 0018:ffffc90001f17578 EFLAGS: 00000246 [ 85.721603][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8151a2db [ 85.729619][ C1] RDX: 0009c90001f176b8 RSI: 0000000000000001 RDI: 0000000000000000 [ 85.737614][ C1] RBP: ffff8881021cdcf8 R08: 0000000000000001 R09: 0000000000000200 [ 85.745620][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 85.753597][ C1] R13: 0000000000000286 R14: ffffc90001f176b8 R15: 0000000000000000 [ 85.761866][ C1] ? folios_put_refs+0x9b/0x2b0 [ 85.766794][ C1] ? kcsan_setup_watchpoint+0x252/0x410 [ 85.772341][ C1] ? folios_put_refs+0x9b/0x2b0 [ 85.777255][ C1] folios_put_refs+0x9b/0x2b0 [ 85.781939][ C1] free_pages_and_swap_cache+0x291/0x410 [ 85.787637][ C1] tlb_flush_mmu+0x2cf/0x440 [ 85.792243][ C1] ? _raw_spin_unlock+0x14/0x50 [ 85.797121][ C1] unmap_page_range+0x1fc8/0x2380 [ 85.802164][ C1] unmap_single_vma+0x142/0x1d0 [ 85.807070][ C1] unmap_vmas+0x18d/0x2b0 [ 85.811424][ C1] exit_mmap+0x18a/0x680 [ 85.815742][ C1] __mmput+0x28/0x1b0 [ 85.819742][ C1] mmput+0x4c/0x60 [ 85.823500][ C1] exit_mm+0xe4/0x190 [ 85.827525][ C1] do_exit+0x55e/0x17f0 [ 85.831716][ C1] do_group_exit+0x102/0x150 [ 85.836357][ C1] ? get_signal+0xeb1/0x1000 [ 85.840956][ C1] get_signal+0xeb9/0x1000 [ 85.845407][ C1] arch_do_signal_or_restart+0x95/0x4b0 [ 85.850977][ C1] syscall_exit_to_user_mode+0x62/0x120 [ 85.856574][ C1] do_syscall_64+0xd6/0x1c0 [ 85.861106][ C1] ? clear_bhb_loop+0x55/0xb0 [ 85.865854][ C1] ? clear_bhb_loop+0x55/0xb0 [ 85.870569][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.876487][ C1] RIP: 0033:0x7fdcfab7e919 [ 85.880916][ C1] Code: Unable to access opcode bytes at 0x7fdcfab7e8ef. [ 85.887939][ C1] RSP: 002b:00007fdcf91f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 85.896388][ C1] RAX: fffffffffffffe00 RBX: 00007fdcfad35fa8 RCX: 00007fdcfab7e919 [ 85.904361][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdcfad35fa8 [ 85.912384][ C1] RBP: 00007fdcfad35fa0 R08: 0000000000000000 R09: 0000000000000000 [ 85.920413][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdcfad35fac [ 85.928405][ C1] R13: 0000000000000000 R14: 00007ffce43d1960 R15: 00007ffce43d1a48 [ 85.936402][ C1] </TASK> [ 85.939438][ C1] ---[ end trace 0000000000000000 ]--- [ 85.996785][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 86.006634][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 86.032982][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1370'. [ 86.041992][ T7473] loop6: detected capacity change from 0 to 512 [ 86.049147][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 86.061573][ T7473] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.148008][ T7479] loop1: detected capacity change from 0 to 8192 [ 86.156888][ T7479] vfat: Unknown parameter '����00000000000000000004' [ 86.188488][ T7473] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1372: corrupted inode contents [ 86.201603][ T7488] random: crng reseeded on system resumption [ 86.201686][ T7473] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.1372: mark_inode_dirty error [ 86.255369][ T7473] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1372: corrupted inode contents [ 86.377833][ T7504] loop6: detected capacity change from 0 to 512 [ 86.384603][ T7504] EXT4-fs: Ignoring removed orlov option [ 86.391993][ T3579] ================================================================== [ 86.400109][ T3579] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 86.407502][ T3579] [ 86.409815][ T3579] write to 0xffff8881006310ae of 1 bytes by task 7504 on cpu 0: [ 86.417442][ T3579] set_blocksize+0x215/0x270 [ 86.422038][ T3579] sb_set_blocksize+0x2c/0xb0 [ 86.426711][ T3579] ext4_fill_super+0xdca/0x3a10 [ 86.431568][ T3579] get_tree_bdev_flags+0x29f/0x310 [ 86.436688][ T3579] get_tree_bdev+0x1f/0x30 [ 86.441098][ T3579] ext4_get_tree+0x1c/0x30 [ 86.445507][ T3579] vfs_get_tree+0x56/0x1e0 [ 86.449914][ T3579] do_new_mount+0x227/0x690 [ 86.454415][ T3579] path_mount+0x49b/0xb30 [ 86.458740][ T3579] __se_sys_mount+0x27c/0x2d0 [ 86.463411][ T3579] __x64_sys_mount+0x67/0x80 [ 86.467993][ T3579] x64_sys_call+0x2c84/0x2dc0 [ 86.472667][ T3579] do_syscall_64+0xc9/0x1c0 [ 86.477168][ T3579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.483061][ T3579] [ 86.485376][ T3579] read to 0xffff8881006310ae of 1 bytes by task 3579 on cpu 1: [ 86.492909][ T3579] do_mpage_readpage+0x55/0xcb0 [ 86.497760][ T3579] mpage_readahead+0x1ad/0x2d0 [ 86.502517][ T3579] blkdev_readahead+0x1c/0x30 [ 86.507192][ T3579] read_pages+0xa0/0x540 [ 86.511429][ T3579] page_cache_ra_unbounded+0x2b8/0x310 [ 86.516884][ T3579] page_cache_sync_ra+0x252/0x670 [ 86.521907][ T3579] filemap_get_pages+0x2c1/0x10e0 [ 86.526928][ T3579] filemap_read+0x221/0x6a0 [ 86.531432][ T3579] blkdev_read_iter+0x20e/0x2c0 [ 86.536282][ T3579] vfs_read+0x5dc/0x700 [ 86.540437][ T3579] ksys_read+0xe8/0x1b0 [ 86.544595][ T3579] __x64_sys_read+0x42/0x50 [ 86.549108][ T3579] x64_sys_call+0x2874/0x2dc0 [ 86.553781][ T3579] do_syscall_64+0xc9/0x1c0 [ 86.558297][ T3579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.564196][ T3579] [ 86.566508][ T3579] value changed: 0x0a -> 0x0c [ 86.571171][ T3579] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 86.573481][ T3579] Reported by Kernel Concurrency Sanitizer on: [ 86.579620][ T3579] CPU: 1 UID: 0 PID: 3579 Comm: udevd Tainted: G W 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 86.590985][ T3579] Tainted: [W]=WARN [ 86.594775][ T3579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.604828][ T3579] ================================================================== [ 86.616836][ T7504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.668449][ T7504] EXT4-fs (loop6): orphan cleanup on readonly fs [ 86.675537][ T7504] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1384: bg 0: block 248: padding at end of block bitmap is not set [ 86.690426][ T7504] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1384: Failed to acquire dquot type 1 [ 86.727556][ T7504] EXT4-fs (loop6): 1 truncate cleaned up [ 87.119112][ T4577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.166672][ T4577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.226573][ T4577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.276599][ T4577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.352902][ T4577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.399773][ T4577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.447508][ T4577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.496819][ T4577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.576341][ T4577] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.647504][ T4577] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.687362][ T4577] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.757188][ T4577] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.833283][ T4577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.877935][ T4577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.927927][ T4577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.987919][ T4577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.065669][ T4577] team0: left allmulticast mode [ 88.070592][ T4577] team_slave_0: left allmulticast mode [ 88.076123][ T4577] team_slave_1: left allmulticast mode [ 88.081798][ T4577] bridge0: port 3(team0) entered disabled state [ 88.089210][ T4577] bridge_slave_1: left allmulticast mode [ 88.094915][ T4577] bridge_slave_1: left promiscuous mode [ 88.100642][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.109016][ T4577] bridge_slave_0: left allmulticast mode [ 88.114722][ T4577] bridge_slave_0: left promiscuous mode [ 88.120404][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.129933][ T4577] bridge_slave_1: left allmulticast mode [ 88.135680][ T4577] bridge_slave_1: left promiscuous mode [ 88.141444][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.149591][ T4577] bridge_slave_0: left allmulticast mode [ 88.155357][ T4577] bridge_slave_0: left promiscuous mode [ 88.161169][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.169212][ T4577] bridge_slave_1: left allmulticast mode [ 88.174874][ T4577] bridge_slave_1: left promiscuous mode [ 88.180484][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.188191][ T4577] bridge_slave_0: left allmulticast mode [ 88.193813][ T4577] bridge_slave_0: left promiscuous mode [ 88.199482][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.207374][ T4577] bridge_slave_1: left allmulticast mode [ 88.213010][ T4577] bridge_slave_1: left promiscuous mode [ 88.218723][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.228351][ T4577] bridge_slave_0: left allmulticast mode [ 88.233982][ T4577] bridge_slave_0: left promiscuous mode [ 88.239715][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.359645][ T4577] gretap0 (unregistering): left allmulticast mode [ 88.566479][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.576158][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.586202][ T4577] bond0 (unregistering): Released all slaves [ 88.594555][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.604068][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.613595][ T4577] bond0 (unregistering): Released all slaves [ 88.623013][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.633172][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.642835][ T4577] bond0 (unregistering): Released all slaves [ 88.651519][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.661348][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.670732][ T4577] bond0 (unregistering): Released all slaves [ 88.722359][ T4577] hsr_slave_0: left promiscuous mode [ 88.729262][ T4577] hsr_slave_1: left promiscuous mode [ 88.736002][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.743425][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.752089][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.759598][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.770239][ T4577] hsr_slave_0: left promiscuous mode [ 88.776006][ T4577] hsr_slave_1: left promiscuous mode [ 88.781625][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.789116][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.796725][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.804153][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.813327][ T4577] hsr_slave_0: left promiscuous mode [ 88.819220][ T4577] hsr_slave_1: left promiscuous mode [ 88.825322][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.832693][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.840319][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.847823][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.857240][ T4577] hsr_slave_0: left promiscuous mode [ 88.862815][ T4577] hsr_slave_1: left promiscuous mode [ 88.868725][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.876364][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.883894][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.891870][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.905027][ T4577] veth1_macvtap: left promiscuous mode [ 88.910550][ T4577] veth0_macvtap: left promiscuous mode [ 88.916577][ T4577] veth1_vlan: left promiscuous mode [ 88.921779][ T4577] veth0_vlan: left promiscuous mode [ 88.927392][ T4577] veth1_macvtap: left promiscuous mode [ 88.932919][ T4577] veth0_macvtap: left promiscuous mode [ 88.938560][ T4577] veth1_vlan: left promiscuous mode [ 88.943780][ T4577] veth0_vlan: left promiscuous mode [ 88.949612][ T4577] veth1_macvtap: left promiscuous mode [ 88.955120][ T4577] veth0_macvtap: left promiscuous mode [ 88.960596][ T4577] veth1_vlan: left promiscuous mode [ 88.965889][ T4577] veth0_vlan: left promiscuous mode [ 88.971457][ T4577] veth1_macvtap: left promiscuous mode [ 88.977370][ T4577] veth0_macvtap: left promiscuous mode [ 88.982929][ T4577] veth1_vlan: left promiscuous mode [ 88.988158][ T4577] veth0_vlan: left promiscuous mode [ 89.121151][ T4577] team_slave_1 (unregistering): left promiscuous mode [ 89.128794][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 89.137887][ T4577] team_slave_0 (unregistering): left promiscuous mode [ 89.145119][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 89.188249][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 89.197774][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 89.241681][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 89.251689][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 89.296783][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 89.306363][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 89.338330][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 89.338345][ T29] audit: type=1400 audit(1732624372.120:1866): avc: denied { sys_chroot } for pid=7625 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 89.367476][ T29] audit: type=1400 audit(1732624372.120:1867): avc: denied { setgid } for pid=7625 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 89.388357][ T29] audit: type=1400 audit(1732624372.120:1868): avc: denied { setuid } for pid=7625 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 89.409257][ T29] audit: type=1400 audit(1732624372.120:1869): avc: denied { setrlimit } for pid=7625 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1