last executing test programs: 1m19.249138676s ago: executing program 32 (id=147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 59.641434346s ago: executing program 2 (id=1032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 59.586003217s ago: executing program 2 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000006403000000000000000000ffffffffff45"], 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 59.452521569s ago: executing program 2 (id=1041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) 59.313772281s ago: executing program 2 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x479, &(0x7f0000000000)={0x0, 0x2281, 0x1000, 0x1, 0x31}) pause() close_range(r1, 0xffffffffffffffff, 0x0) 59.185200363s ago: executing program 1 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001"], 0x118}}, 0x0) 58.894917828s ago: executing program 1 (id=1057): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0xfffd, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 58.857951228s ago: executing program 3 (id=1058): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 58.857566488s ago: executing program 3 (id=1060): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x1) 58.826864798s ago: executing program 1 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 58.826188578s ago: executing program 3 (id=1063): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) 58.807197279s ago: executing program 1 (id=1065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 58.802527889s ago: executing program 3 (id=1066): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000001180)={0x5, 0x6}, &(0x7f000009de80), 0x0) 58.614373342s ago: executing program 1 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) 58.613676362s ago: executing program 3 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 58.505524663s ago: executing program 2 (id=1076): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c00024000"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) 58.372151206s ago: executing program 3 (id=1077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 58.323797547s ago: executing program 33 (id=1078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x70bd26, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 58.323674796s ago: executing program 1 (id=1080): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) 58.323568207s ago: executing program 34 (id=1077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 58.319657627s ago: executing program 35 (id=1080): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) 58.273551927s ago: executing program 2 (id=1083): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101301) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/188, 0xbc}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 58.273389847s ago: executing program 36 (id=1083): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101301) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/188, 0xbc}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 19.705212648s ago: executing program 8 (id=2692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) r1 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 19.661673008s ago: executing program 8 (id=2694): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 19.661015959s ago: executing program 8 (id=2696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='.\x00', r2}, 0x18) 19.648570299s ago: executing program 8 (id=2697): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 19.55451082s ago: executing program 8 (id=2700): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000000, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 19.332029143s ago: executing program 8 (id=2704): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000002c0)={[{@bsdgroups}, {@grpjquota}, {@dioread_lock}]}, 0x81, 0x7d2, &(0x7f0000000fc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) truncate(0x0, 0x6) 19.331754603s ago: executing program 37 (id=2704): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000002c0)={[{@bsdgroups}, {@grpjquota}, {@dioread_lock}]}, 0x81, 0x7d2, &(0x7f0000000fc0)="$eJzs3ctrXNcZAPDvjh4jyW6lQqG1V4JCKzAeVa5qt9CFSxelUIOhXdcWo7FwNdIYzchYQmB5Ueim0JYuCsnG6zycRSDbPLbJPxGyCDYmkUWcVZhwr2b0nJElSzMS6PeDq3vOfZ3z6Z577pHuZSaAM2s0/ZGLuBAR/04ihhvLk4joy1K9Edc3tnu5tlJMpyTq9b98lWTbvH9u61hJY36ukflpRHz8j4hLub3lVpeWZ6fK5dJCIz9em7s3Xl1avnx3bmqmNFOavzoxOXnl2q+vXd3aZ/CIsX7z2fL5Z//54y/evd4bP3nyr0+SuB7nG+vW11aKRzz8HqMx2vid9KW/wh3+cNyFnbDkpCvAa0kvzZ6NqzwuxHD0ZKk2jnoBAgCnwsOIqAMAZ0zi/g8AZ0zz/wDrayvF5nSy/5Horue/j4iBjfibzzc31vQ2ntkNZM9Bh9aTHU9GkogYOYbyRyPizQ/+9nY6RYeeQwK0svooIm6PjK6v5Xf1/0na//Uf5di/3G9lPZ/NRnct1v9B93yYjn9+s3f8d3HzhZ6B7Oeu8c9AvsW1+zpeff3nnrbZ9Uh9U1M6/vvdtnfbtsZ/my+tjfQ0cj/Ixnx9yZ275VLat/0wIsaiL5/mJ7JNW78FNfbiuxftyt8+/vv6v39/Ky0/nW9tkXvam4/68LZ9pqdqU8cQeub5o4iLva3iTzbHv0mb8e/NA5bxp9/+841269L403ib0974O6v+OOLnLc//1rlM9n0/cTxrDuPNRtHCe1/8f6hd+VvnP5/N0/Kbfwt0Q3r+h/aPfyTZ/r5m9fBlfPp4+KN267a3/9bxZ+1/h7T99yd/zdLNTuDBVK22MBHRn/x57/IrW/s2883t0/jHftb6+m/X/nONd2Nvb+b21/us/53GoVrGn1ltF39npfFPH+r875OoN/bZterJy9meduUf7PxPZqmxxpKD9H+vqOkRWjMAAAAAAAAAAAAAAAAAAAAAAAAAHF4uIs5HkitspnO5QmHjO7x/HEO5cqVau3Snsjg/Hdl3ZY9EX675UZfD2z4PdaLxefjN/JVd+V9FxI8i4n/5wSxfKFbK0ycdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0nNv5/f8P01mhsLHuy/xJ1w4A6JiBk64AANB17v8AcPYc7v4/2LF6AADdc+i//+tJZyoCAHTNge//tztbDwCgezz/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMNu3riRTvVv11aKaX76/tLibOX+5elSdbYwt1gsFCsL9wozlcpMuVQoVubaHmh1Y1auVO5Nxvzig/FaqVobry4t35qrLM7Xbt2dm5op3Sr1dS0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi46tLy7FS5XFqQ2CcxWBo8DdU4RYneOBXV2JNY/bwva9enpT5HTfTvs01ynGUN7l6yvZcYPKnuCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODU+z4AAP//3zAeLQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) truncate(0x0, 0x6) 18.968049929s ago: executing program 7 (id=2720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 18.076090533s ago: executing program 7 (id=2729): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) statfs(0x0, 0x0) 18.039533923s ago: executing program 7 (id=2730): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) 17.972064064s ago: executing program 7 (id=2731): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 17.957438494s ago: executing program 7 (id=2732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17.862491976s ago: executing program 7 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) unshare(0x22020600) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) fcntl$dupfd(r1, 0x0, r0) 17.822860416s ago: executing program 38 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) unshare(0x22020600) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) fcntl$dupfd(r1, 0x0, r0) 848.706596ms ago: executing program 9 (id=3590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) 630.40799ms ago: executing program 5 (id=3596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 552.64219ms ago: executing program 4 (id=3599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 551.742551ms ago: executing program 5 (id=3609): unshare(0x22020400) r0 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 474.172852ms ago: executing program 4 (id=3600): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) 375.728704ms ago: executing program 5 (id=3605): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000e80)}], 0x3}}], 0x1, 0xc0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 356.516064ms ago: executing program 4 (id=3606): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 307.353095ms ago: executing program 0 (id=3610): io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) 300.342755ms ago: executing program 9 (id=3611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 299.977645ms ago: executing program 4 (id=3612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000004850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 272.873905ms ago: executing program 9 (id=3614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = gettid() select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) tkill(r0, 0x7) 267.010185ms ago: executing program 6 (id=3615): unshare(0x20040600) r0 = socket$kcm(0x10, 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xc0000016}) 252.448876ms ago: executing program 5 (id=3616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 241.176196ms ago: executing program 4 (id=3617): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 239.316236ms ago: executing program 6 (id=3618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000500)={0x7, 0x9dc5, 0x105, 0x0, 0x6}) 209.769356ms ago: executing program 0 (id=3619): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 209.255436ms ago: executing program 0 (id=3620): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) 196.415817ms ago: executing program 6 (id=3621): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x66eb, &(0x7f0000000080)=0x0) r2 = eventfd(0x5a21) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3899, r0, 0x0, 0x0, 0x4, 0x0, 0x3, r2}]) 185.085797ms ago: executing program 9 (id=3622): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 182.473267ms ago: executing program 5 (id=3623): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3}, 0x50) 140.991757ms ago: executing program 5 (id=3624): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x10, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 138.840077ms ago: executing program 9 (id=3625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 119.622938ms ago: executing program 0 (id=3626): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 108.281128ms ago: executing program 9 (id=3627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0x3, 0xb}]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x3a) 101.074368ms ago: executing program 0 (id=3628): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x68f}, 0x18) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 81.421748ms ago: executing program 6 (id=3629): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) 37.041629ms ago: executing program 0 (id=3630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 36.569269ms ago: executing program 4 (id=3631): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) inotify_init1(0x800) r0 = io_uring_setup(0x6f2f, &(0x7f00000002c0)={0x0, 0x23dc, 0x0, 0x800002, 0x3ca}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 584.64µs ago: executing program 6 (id=3632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) process_vm_readv(0x0, &(0x7f00000027c0), 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=3633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53a, &(0x7f0000000e00)="$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") readlink(&(0x7f0000000000)='./file2\x00', &(0x7f00000008c0)=""/191, 0xbf) kernel console output (not intermixed with test programs): ing attributes in process `syz.6.1418'. [ 65.136720][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1415'. [ 65.145749][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1415'. [ 65.154921][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1415'. [ 65.197637][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1415'. [ 65.317500][ T7094] loop6: detected capacity change from 0 to 1024 [ 65.318296][ T7085] infiniband syz!: set active [ 65.328683][ T7085] infiniband syz!: added team_slave_0 [ 65.340349][ T7094] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.351287][ T7094] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.361462][ T7085] RDS/IB: syz!: added [ 65.365562][ T7085] smc: adding ib device syz! with port count 1 [ 65.371903][ T7085] smc: ib device syz! port 1 has pnetid [ 65.382579][ T7094] JBD2: no valid journal superblock found [ 65.388597][ T7094] EXT4-fs (loop6): Could not load journal inode [ 65.401491][ T7094] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 65.437841][ T7102] loop9: detected capacity change from 0 to 2048 [ 65.458004][ T7102] EXT4-fs: Ignoring removed orlov option [ 65.549022][ T7122] loop5: detected capacity change from 0 to 8192 [ 65.677465][ T7134] loop9: detected capacity change from 0 to 1024 [ 65.688165][ T7134] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.699087][ T7134] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.715730][ T7134] JBD2: no valid journal superblock found [ 65.721730][ T7134] EXT4-fs (loop9): Could not load journal inode [ 65.738206][ T7134] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 65.929664][ T7167] loop7: detected capacity change from 0 to 2048 [ 65.982748][ T7167] GPT:first_usable_lbas don't match. [ 65.988113][ T7167] GPT:34 != 290 [ 65.991594][ T7167] GPT: Use GNU Parted to correct GPT errors. [ 65.997878][ T7167] loop7: p1 p2 p3 [ 66.070028][ T7194] netlink: 'syz.9.1477': attribute type 10 has an invalid length. [ 66.079789][ T7194] batadv0: entered promiscuous mode [ 66.085094][ T7194] batadv0: entered allmulticast mode [ 66.093595][ T7194] bridge0: port 3(batadv0) entered blocking state [ 66.100151][ T7194] bridge0: port 3(batadv0) entered disabled state [ 66.110356][ T7194] bridge0: port 3(batadv0) entered blocking state [ 66.110947][ T7196] loop7: detected capacity change from 0 to 256 [ 66.116822][ T7194] bridge0: port 3(batadv0) entered forwarding state [ 66.132000][ T5319] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 66.142039][ T5319] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 66.170240][ T7201] loop9: detected capacity change from 0 to 1024 [ 66.194919][ T7201] EXT4-fs mount: 54 callbacks suppressed [ 66.194933][ T7201] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.215531][ T7201] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 66.226957][ T7201] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 66.248047][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.442798][ T7230] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 66.442798][ T7230] program syz.5.1491 not setting count and/or reply_len properly [ 66.470693][ T7234] loop9: detected capacity change from 0 to 512 [ 66.486722][ T7234] EXT4-fs (loop9): orphan cleanup on readonly fs [ 66.493823][ T7234] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.1493: bad orphan inode 13 [ 66.516672][ T7234] ext4_test_bit(bit=12, block=18) = 1 [ 66.522130][ T7234] is_bad_inode(inode)=0 [ 66.526326][ T7234] NEXT_ORPHAN(inode)=2130706432 [ 66.531260][ T7234] max_ino=32 [ 66.534510][ T7234] i_nlink=1 [ 66.534627][ T7239] loop5: detected capacity change from 0 to 1024 [ 66.547215][ T7234] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.564915][ T7239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.611229][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.612278][ T7239] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 66.632519][ T7239] EXT4-fs (loop5): This should not happen!! Data will be lost [ 66.632519][ T7239] [ 66.639769][ T7251] loop6: detected capacity change from 0 to 512 [ 66.642197][ T7239] EXT4-fs (loop5): Total free blocks count 0 [ 66.642214][ T7239] EXT4-fs (loop5): Free/Dirty block details [ 66.642225][ T7239] EXT4-fs (loop5): free_blocks=0 [ 66.659624][ T7251] EXT4-fs: Ignoring removed oldalloc option [ 66.660433][ T7239] EXT4-fs (loop5): dirty_blocks=0 [ 66.660447][ T7239] EXT4-fs (loop5): Block reservation details [ 66.682407][ T7239] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 66.689749][ T7251] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.1499: Parent and EA inode have the same ino 15 [ 66.704410][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.712081][ T7250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.720365][ T7251] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.1499: Parent and EA inode have the same ino 15 [ 66.735587][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.743167][ T7250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.750537][ T7251] EXT4-fs (loop6): 1 orphan inode deleted [ 66.756849][ T7251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.790579][ T6171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.803974][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.821847][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 66.828569][ T29] audit: type=1400 audit(1751063919.621:1838): avc: denied { create } for pid=7262 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.851068][ T29] audit: type=1400 audit(1751063919.651:1839): avc: denied { write } for pid=7262 comm="syz.6.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.896662][ T29] audit: type=1400 audit(1751063919.701:1840): avc: denied { name_bind } for pid=7268 comm="syz.6.1508" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 66.918478][ T29] audit: type=1400 audit(1751063919.701:1841): avc: denied { node_bind } for pid=7268 comm="syz.6.1508" saddr=172.20.20.56 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 66.992047][ T29] audit: type=1400 audit(1751063919.791:1842): avc: denied { create } for pid=7280 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.037416][ T29] audit: type=1400 audit(1751063919.841:1843): avc: denied { bind } for pid=7280 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.057416][ T29] audit: type=1400 audit(1751063919.841:1844): avc: denied { listen } for pid=7280 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.129800][ T7291] bridge0: entered promiscuous mode [ 67.139258][ T7291] hsr1: entered allmulticast mode [ 67.144426][ T7291] bridge0: entered allmulticast mode [ 67.179853][ T7293] loop8: detected capacity change from 0 to 512 [ 67.189415][ T7295] loop9: detected capacity change from 0 to 512 [ 67.196825][ T7293] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.214807][ T7293] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 67.227968][ T7293] EXT4-fs (loop8): 1 truncate cleaned up [ 67.235348][ T7293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.250184][ T7295] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.269799][ T7293] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.290388][ T7295] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.301733][ T29] audit: type=1326 audit(1751063920.111:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 67.325441][ T29] audit: type=1326 audit(1751063920.111:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 67.349128][ T29] audit: type=1326 audit(1751063920.111:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.5.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 67.409014][ T7306] loop8: detected capacity change from 0 to 512 [ 67.427013][ T7306] EXT4-fs (loop8): orphan cleanup on readonly fs [ 67.435149][ T7306] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.1525: bad orphan inode 13 [ 67.460284][ T7306] ext4_test_bit(bit=12, block=18) = 1 [ 67.465823][ T7306] is_bad_inode(inode)=0 [ 67.469998][ T7306] NEXT_ORPHAN(inode)=2130706432 [ 67.474905][ T7306] max_ino=32 [ 67.478106][ T7306] i_nlink=1 [ 67.488436][ T7306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.507602][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.557870][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.606850][ T7325] 9pnet_fd: Insufficient options for proto=fd [ 67.647001][ T7328] loop9: detected capacity change from 0 to 4096 [ 67.660810][ T7328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.745049][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.754309][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.788461][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.284098][ T7352] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 68.343617][ T7365] program syz.5.1550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.353708][ T7366] loop8: detected capacity change from 0 to 256 [ 68.370767][ T7368] netlink: 'syz.7.1551': attribute type 1 has an invalid length. [ 68.371212][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.392089][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.517562][ T7376] loop7: detected capacity change from 0 to 8192 [ 68.654685][ T7401] loop7: detected capacity change from 0 to 1024 [ 68.675336][ T7401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.692375][ T7401] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.732810][ T7414] loop6: detected capacity change from 0 to 1024 [ 68.747734][ T7401] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 68.764227][ T7414] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.775161][ T7414] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.792357][ T7401] EXT4-fs (loop7): Remounting filesystem read-only [ 68.806932][ T7414] JBD2: no valid journal superblock found [ 68.812969][ T7414] EXT4-fs (loop6): Could not load journal inode [ 68.828252][ T6215] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.844153][ T7414] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 69.080371][ T7460] loop6: detected capacity change from 0 to 256 [ 69.114068][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.124180][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.156521][ T7474] 9pnet_fd: Insufficient options for proto=fd [ 69.200195][ T7478] loop9: detected capacity change from 0 to 2048 [ 69.210642][ T7476] loop7: detected capacity change from 0 to 4096 [ 69.224023][ T7476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.239822][ T7486]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.249151][ T7478] GPT:first_usable_lbas don't match. [ 69.254618][ T7478] GPT:34 != 290 [ 69.258081][ T7478] GPT: Use GNU Parted to correct GPT errors. [ 69.264262][ T7478] loop9: p1 p2 p3 [ 69.269491][ T7486]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.294752][ T7486]  (unregistering): Released all slaves [ 69.303162][ T7490] netlink: 'syz.5.1609': attribute type 6 has an invalid length. [ 69.383429][ T6215] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.547099][ T7524] loop5: detected capacity change from 0 to 2048 [ 69.553742][ T7518] loop7: detected capacity change from 0 to 8192 [ 69.592737][ T7524] loop5: p2 p3 p7 [ 69.613192][ T7532] __nla_validate_parse: 29 callbacks suppressed [ 69.613230][ T7532] netlink: 268 bytes leftover after parsing attributes in process `syz.9.1629'. [ 69.628733][ T7532] unsupported nla_type 65024 [ 69.636375][ T7534] netlink: 'syz.7.1631': attribute type 3 has an invalid length. [ 69.705395][ T9] IPVS: starting estimator thread 0... [ 69.730884][ T7540] sctp: [Deprecated]: syz.7.1634 (pid 7540) Use of int in max_burst socket option. [ 69.730884][ T7540] Use struct sctp_assoc_value instead [ 69.796675][ T7558] netlink: 'syz.6.1641': attribute type 1 has an invalid length. [ 69.804595][ T7558] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1641'. [ 69.814010][ T7546] IPVS: using max 2688 ests per chain, 134400 per kthread [ 69.835270][ T7560] netlink: 'syz.7.1643': attribute type 2 has an invalid length. [ 69.843064][ T7560] netlink: 'syz.7.1643': attribute type 1 has an invalid length. [ 69.850881][ T7560] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1643'. [ 69.875659][ T7568] syzkaller1: entered promiscuous mode [ 69.881253][ T7568] syzkaller1: entered allmulticast mode [ 69.905955][ T7574] loop6: detected capacity change from 0 to 512 [ 69.924695][ T7574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.939003][ T7574] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.968567][ T6171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.989859][ T7584] hub 4-0:1.0: USB hub found [ 69.999926][ T7584] hub 4-0:1.0: 8 ports detected [ 70.036188][ T7595] loop7: detected capacity change from 0 to 128 [ 70.049849][ T7595] bio_check_eod: 4 callbacks suppressed [ 70.049865][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.049865][ T7595] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 70.063098][ T7600] loop9: detected capacity change from 0 to 256 [ 70.077669][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.077669][ T7595] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 70.091370][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.091370][ T7595] loop7: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 70.105625][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.105625][ T7595] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 70.120340][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.120340][ T7595] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 70.134370][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.134370][ T7595] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 70.148324][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.148324][ T7595] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 70.162073][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.162073][ T7595] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 70.189368][ T7595] syz.7.1658: attempt to access beyond end of device [ 70.189368][ T7595] loop7: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 70.212433][ T7608] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1664'. [ 70.220083][ T7610] loop9: detected capacity change from 0 to 1024 [ 70.229905][ T7608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.230371][ T7610] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 70.248873][ T7610] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.259806][ T7610] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.271111][ T7608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.273659][ T7610] JBD2: no valid journal superblock found [ 70.285504][ T7610] EXT4-fs (loop9): Could not load journal inode [ 70.295286][ T7608] bond0 (unregistering): Released all slaves [ 70.534540][ T7652] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 70.534540][ T7652] program syz.6.1685 not setting count and/or reply_len properly [ 70.542133][ T7654] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1684'. [ 70.586383][ T7654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.599668][ T7654] bond_slave_0: left promiscuous mode [ 70.605853][ T7654] bond_slave_0: left allmulticast mode [ 70.615016][ T7654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.624269][ T7654] bond_slave_1: left promiscuous mode [ 70.629762][ T7654] bond_slave_1: left allmulticast mode [ 70.636385][ T7654] bond0 (unregistering): Released all slaves [ 70.668095][ T7668] loop7: detected capacity change from 0 to 512 [ 70.675212][ T7668] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 70.687520][ T7668] EXT4-fs (loop7): 1 truncate cleaned up [ 70.694062][ T7668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.712079][ T7668] EXT4-fs error (device loop7): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.7.1691: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 70.741974][ T7668] EXT4-fs error (device loop7) in ext4_delete_entry:2739: Corrupt filesystem [ 70.759537][ T7668] EXT4-fs warning (device loop7): ext4_rename_delete:3726: inode #2: comm syz.7.1691: Deleting old file: nlink 6, error=-117 [ 70.761756][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.791509][ T7676] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 70.791509][ T7676] program syz.5.1694 not setting count and/or reply_len properly [ 70.792923][ T6215] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.834629][ T3391] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.900477][ T7686] loop5: detected capacity change from 0 to 2048 [ 70.953180][ T7686] loop5: p1 < > p4 < > [ 70.996030][ T7690] loop9: detected capacity change from 0 to 8192 [ 71.104289][ T7705] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1705'. [ 71.119791][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.134294][ T7705] bond_slave_0: left promiscuous mode [ 71.139934][ T7705] bond_slave_0: left allmulticast mode [ 71.148098][ T7709] openvswitch: netlink: Message has 6 unknown bytes. [ 71.156791][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.167950][ T7705] bond_slave_1: left promiscuous mode [ 71.173640][ T7705] bond_slave_1: left allmulticast mode [ 71.185560][ T7705] bond0 (unregistering): Released all slaves [ 71.338494][ T7737] loop9: detected capacity change from 0 to 512 [ 71.345373][ T7737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.352918][ T7737] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 71.386023][ T7742] can0: slcan on ttyS3. [ 71.393812][ T7737] EXT4-fs (loop9): failed to open journal device unknown-block(0,3) -6 [ 71.442130][ T7742] can0 (unregistered): slcan off ttyS3. [ 71.594978][ T7771] loop6: detected capacity change from 0 to 256 [ 71.605055][ T7774] loop5: detected capacity change from 0 to 128 [ 71.614279][ T7768] hub 4-0:1.0: USB hub found [ 71.619252][ T7768] hub 4-0:1.0: 8 ports detected [ 71.635888][ T7774] syz.5.1737: attempt to access beyond end of device [ 71.635888][ T7774] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 71.720398][ T7791] loop6: detected capacity change from 0 to 512 [ 71.753470][ T7791] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 71.775673][ T7791] EXT4-fs (loop6): 1 truncate cleaned up [ 71.784084][ T7798] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1749'. [ 71.784455][ T7791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.822381][ T7801] loop5: detected capacity change from 0 to 512 [ 71.828964][ T7801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.853574][ T7798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.864981][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 71.864994][ T29] audit: type=1326 audit(1751063924.641:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.8.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 71.867572][ T7801] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 71.871374][ T29] audit: type=1326 audit(1751063924.651:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.8.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 71.926983][ T29] audit: type=1326 audit(1751063924.651:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.8.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 71.950627][ T29] audit: type=1326 audit(1751063924.651:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.8.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 71.953751][ T7801] EXT4-fs (loop5): failed to open journal device unknown-block(0,3) -6 [ 71.974370][ T29] audit: type=1326 audit(1751063924.651:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.8.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 72.006366][ T29] audit: type=1326 audit(1751063924.651:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.8.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 72.031389][ T29] audit: type=1326 audit(1751063924.651:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.8.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 72.060100][ T29] audit: type=1400 audit(1751063924.701:2204): avc: denied { write open } for pid=7789 comm="syz.6.1745" path="/93/file2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.104647][ T29] audit: type=1400 audit(1751063924.701:2205): avc: denied { append } for pid=7789 comm="syz.6.1745" path="/93/file2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.152604][ T6171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.172416][ T7798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.184792][ T7798] bond0 (unregistering): Released all slaves [ 72.225547][ T7810] hub 4-0:1.0: USB hub found [ 72.230342][ T7810] hub 4-0:1.0: 8 ports detected [ 72.300834][ T29] audit: type=1400 audit(1751063925.101:2206): avc: denied { create } for pid=7813 comm="syz.5.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.438966][ T7829] netlink: 'syz.7.1761': attribute type 1 has an invalid length. [ 72.462482][ T7829] bond0: entered promiscuous mode [ 72.482262][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.533793][ T7835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.543447][ T7840] loop5: detected capacity change from 0 to 512 [ 72.550318][ T7840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.554772][ T7835] bond0: (slave bond1): making interface the new active one [ 72.564524][ T7835] bond1: entered promiscuous mode [ 72.570546][ T7835] bond0: (slave bond1): Enslaving as an active interface with an up link [ 72.588942][ T7840] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 72.637156][ T7848] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1768'. [ 72.662071][ T7845] hub 4-0:1.0: USB hub found [ 72.670154][ T7845] hub 4-0:1.0: 8 ports detected [ 72.687278][ T7840] EXT4-fs (loop5): failed to open journal device unknown-block(0,3) -6 [ 72.787517][ T7862] can0: slcan on ttyS3. [ 72.807853][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1777'. [ 72.827963][ T7869] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1779'. [ 72.849932][ T7867] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 72.858632][ T7862] can0 (unregistered): slcan off ttyS3. [ 72.910854][ T7875] loop9: detected capacity change from 0 to 512 [ 72.919040][ T7875] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.944971][ T7875] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 72.953005][ T7875] EXT4-fs (loop9): orphan cleanup on readonly fs [ 72.961938][ T7875] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.981896][ T7875] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 72.992295][ T7875] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1781: bg 0: block 40: padding at end of block bitmap is not set [ 73.022186][ T7875] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 73.037603][ T7875] EXT4-fs (loop9): 1 truncate cleaned up [ 73.054775][ T7875] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.109182][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.194206][ T7884] IPVS: stopping master sync thread 7888 ... [ 73.194650][ T7888] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 73.269333][ T7885] hub 4-0:1.0: USB hub found [ 73.277087][ T7885] hub 4-0:1.0: 8 ports detected [ 73.347013][ T7916] loop7: detected capacity change from 0 to 2048 [ 73.357384][ T7916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.381503][ T7916] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 9: comm syz.7.1797: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 73.401277][ T7916] EXT4-fs (loop7): Remounting filesystem read-only [ 73.416023][ T6215] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.511974][ T7946] loop7: detected capacity change from 0 to 164 [ 73.524620][ T7946] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 73.547618][ T7946] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 73.557186][ T7946] Symlink component flag not implemented [ 73.563121][ T7946] Symlink component flag not implemented [ 73.569434][ T7946] Symlink component flag not implemented (7) [ 73.575567][ T7946] Symlink component flag not implemented (116) [ 73.703751][ T7978] loop6: detected capacity change from 0 to 128 [ 73.713047][ T7978] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.728453][ T7978] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.734703][ T7982] syzkaller1: entered promiscuous mode [ 73.744239][ T7982] syzkaller1: entered allmulticast mode [ 73.754083][ T7978] EXT4-fs warning (device loop6): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 73.791472][ T6171] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.165897][ T7988] loop8: detected capacity change from 0 to 512 [ 74.179642][ T7988] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 74.196055][ T7988] EXT4-fs (loop8): 1 truncate cleaned up [ 74.203780][ T7988] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.217756][ T7988] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.246853][ T7997] bridge0: port 3(vlan2) entered blocking state [ 74.253294][ T7997] bridge0: port 3(vlan2) entered disabled state [ 74.268722][ T7997] vlan2: entered allmulticast mode [ 74.275273][ T8003] netlink: 'syz.8.1837': attribute type 1 has an invalid length. [ 74.283212][ T7997] dummy0: entered allmulticast mode [ 74.289308][ T7997] vlan2: entered promiscuous mode [ 74.294541][ T7997] dummy0: entered promiscuous mode [ 74.301574][ T7997] bridge0: port 3(vlan2) entered blocking state [ 74.307904][ T7997] bridge0: port 3(vlan2) entered forwarding state [ 74.327564][ T8003] bond0: entered promiscuous mode [ 74.341118][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.351709][ T8005] hub 4-0:1.0: USB hub found [ 74.360469][ T8005] hub 4-0:1.0: 8 ports detected [ 74.369053][ T8007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.402184][ T8007] bond0: (slave bond1): making interface the new active one [ 74.409588][ T8007] bond1: entered promiscuous mode [ 74.442843][ T8007] bond0: (slave bond1): Enslaving as an active interface with an up link [ 74.579841][ T10] kernel write not supported for file /303/attr/exec (pid: 10 comm: kworker/0:1) [ 74.592485][ T8027] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.609959][ T8027] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 74.653675][ T8037] loop8: detected capacity change from 0 to 1024 [ 74.675604][ T8037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.706742][ T8049] loop7: detected capacity change from 0 to 512 [ 74.738527][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.754730][ T8049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.788773][ T8049] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.813028][ T6215] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.852291][ T8061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.866517][ T8067] __nla_validate_parse: 2 callbacks suppressed [ 74.866533][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1866'. [ 74.960232][ T8084] loop9: detected capacity change from 0 to 1024 [ 74.985034][ T8084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.001754][ T8084] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 75.019004][ T8084] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 75.031402][ T8084] EXT4-fs (loop9): This should not happen!! Data will be lost [ 75.031402][ T8084] [ 75.041121][ T8084] EXT4-fs (loop9): Total free blocks count 0 [ 75.047243][ T8084] EXT4-fs (loop9): Free/Dirty block details [ 75.053275][ T8084] EXT4-fs (loop9): free_blocks=20480 [ 75.058651][ T8084] EXT4-fs (loop9): dirty_blocks=32 [ 75.063878][ T8084] EXT4-fs (loop9): Block reservation details [ 75.069945][ T8084] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 75.129117][ T57] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.147340][ T8092] loop6: detected capacity change from 0 to 512 [ 75.154015][ T8092] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.184542][ T8092] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 75.200517][ T8092] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.207824][ T8092] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.225765][ T8092] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 75.236825][ T8092] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1876: bg 0: block 40: padding at end of block bitmap is not set [ 75.274119][ T8092] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 75.303977][ T8092] EXT4-fs (loop6): 1 truncate cleaned up [ 75.310527][ T8092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.359132][ T8108] loop8: detected capacity change from 0 to 8192 [ 75.377443][ T6171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.503743][ T8141] vlan2: entered allmulticast mode [ 75.586980][ T8150] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1902'. [ 75.596136][ T8150] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 75.743586][ T8172] loop8: detected capacity change from 0 to 512 [ 75.752025][ T8172] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.1913: corrupted in-inode xattr: invalid ea_ino [ 75.768681][ T8172] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.1913: couldn't read orphan inode 15 (err -117) [ 75.782826][ T8172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.813951][ T8179] netlink: 'syz.5.1915': attribute type 1 has an invalid length. [ 75.830073][ T8179] bond0: entered promiscuous mode [ 75.835675][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.837865][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.857424][ T8179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.866263][ T8179] bond0: (slave bond1): making interface the new active one [ 75.873801][ T8179] bond1: entered promiscuous mode [ 75.879867][ T8179] bond0: (slave bond1): Enslaving as an active interface with an up link [ 75.978889][ T8199] vlan2: entered promiscuous mode [ 75.984108][ T8199] gretap0: entered promiscuous mode [ 76.032012][ T8206] bridge0: port 3(vlan3) entered blocking state [ 76.038432][ T8206] bridge0: port 3(vlan3) entered disabled state [ 76.044994][ T8206] vlan3: entered allmulticast mode [ 76.050132][ T8206] dummy0: entered allmulticast mode [ 76.056245][ T8206] vlan3: entered promiscuous mode [ 76.061456][ T8206] dummy0: entered promiscuous mode [ 76.067061][ T8206] bridge0: port 3(vlan3) entered blocking state [ 76.073339][ T8206] bridge0: port 3(vlan3) entered forwarding state [ 76.168527][ T8213] binfmt_misc: register: failed to install interpreter file ./file2 [ 76.212831][ T8219] loop8: detected capacity change from 0 to 164 [ 76.221806][ T8219] Unsupported NM flag settings (8) [ 76.383046][ T8239] loop7: detected capacity change from 0 to 1024 [ 76.389873][ T8239] EXT4-fs: Ignoring removed orlov option [ 76.413299][ T8239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.444658][ T6215] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.565082][ T8266] wireguard0: entered promiscuous mode [ 76.570596][ T8266] wireguard0: entered allmulticast mode [ 76.653043][ T8282] netlink: 320 bytes leftover after parsing attributes in process `syz.9.1961'. [ 76.654310][ T8284] loop7: detected capacity change from 0 to 512 [ 76.669180][ T8284] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 76.696916][ T8286] macvtap0: entered promiscuous mode [ 76.703469][ T8286] macvtap0: left promiscuous mode [ 76.794135][ T8298] loop9: detected capacity change from 0 to 128 [ 76.849841][ T8300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.892022][ T8302] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 76.898774][ T8302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.906527][ T8302] vhci_hcd vhci_hcd.0: Device attached [ 76.914636][ T8305] vhci_hcd: connection closed [ 76.914827][ T168] vhci_hcd: stop threads [ 76.923861][ T168] vhci_hcd: release socket [ 76.928292][ T168] vhci_hcd: disconnect device [ 76.957698][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 76.957713][ T29] audit: type=1400 audit(1751063929.761:2373): avc: denied { create } for pid=8311 comm="syz.5.1973" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.015125][ T29] audit: type=1326 audit(1751063929.811:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8311 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 77.038577][ T29] audit: type=1326 audit(1751063929.811:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8311 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 77.061990][ T29] audit: type=1326 audit(1751063929.811:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8311 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 77.085373][ T29] audit: type=1400 audit(1751063929.811:2377): avc: denied { setattr } for pid=8311 comm="syz.5.1973" name="file0" dev="tmpfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.108051][ T29] audit: type=1326 audit(1751063929.811:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8311 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 77.131614][ T29] audit: type=1326 audit(1751063929.811:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8311 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 77.155005][ T29] audit: type=1400 audit(1751063929.821:2380): avc: denied { unlink } for pid=3811 comm="syz-executor" name="file0" dev="tmpfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.179007][ T29] audit: type=1400 audit(1751063929.981:2381): avc: denied { allowed } for pid=8313 comm="syz.5.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.208076][ T29] audit: type=1400 audit(1751063930.011:2382): avc: denied { create } for pid=8313 comm="syz.5.1974" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.235050][ T8319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8319 comm=syz.9.1976 [ 77.269795][ T8323] loop9: detected capacity change from 0 to 512 [ 77.277983][ T8323] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.1979: corrupted in-inode xattr: invalid ea_ino [ 77.291779][ T8323] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.1979: couldn't read orphan inode 15 (err -117) [ 77.307513][ T8323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.325093][ T8326] loop5: detected capacity change from 0 to 512 [ 77.344491][ T8326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.357736][ T8326] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.369805][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.388505][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.583878][ T8345] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1987'. [ 77.643742][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1992'. [ 77.652762][ T8354] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1992'. [ 77.689391][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1992'. [ 77.711245][ T8354] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1992'. [ 77.720349][ T8354] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1992'. [ 77.896333][ T8372] loop8: detected capacity change from 0 to 512 [ 77.907620][ T8372] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 77.920416][ T8372] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 77.938346][ T8372] EXT4-fs (loop8): 1 truncate cleaned up [ 77.944843][ T8372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.983635][ T8376] loop6: detected capacity change from 0 to 512 [ 78.003439][ T8376] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.019427][ T8376] EXT4-fs (loop6): mount failed [ 78.044972][ T6197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.093841][ T8385] sd 0:0:1:0: device reset [ 78.110674][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2005'. [ 78.374535][ T8428] netlink: 'syz.5.2023': attribute type 1 has an invalid length. [ 78.513156][ T8451] wireguard0: entered promiscuous mode [ 78.518679][ T8451] wireguard0: entered allmulticast mode [ 78.862595][ T8507] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 78.882183][ T8507] SELinux: failed to load policy [ 79.110206][ T8525] netem: change failed [ 79.345381][ T8563] loop9: detected capacity change from 0 to 256 [ 79.397787][ T8563] FAT-fs (loop9): Directory bread(block 64) failed [ 79.407896][ T8563] FAT-fs (loop9): Directory bread(block 65) failed [ 79.414685][ T8563] FAT-fs (loop9): Directory bread(block 66) failed [ 79.421576][ T8563] FAT-fs (loop9): Directory bread(block 67) failed [ 79.435816][ T8563] FAT-fs (loop9): Directory bread(block 68) failed [ 79.442898][ T8563] FAT-fs (loop9): Directory bread(block 69) failed [ 79.449559][ T8563] FAT-fs (loop9): Directory bread(block 70) failed [ 79.456529][ T8563] FAT-fs (loop9): Directory bread(block 71) failed [ 79.465147][ T8563] FAT-fs (loop9): Directory bread(block 72) failed [ 79.472771][ T8563] FAT-fs (loop9): Directory bread(block 73) failed [ 79.485195][ T8573] netlink: 'syz.8.2089': attribute type 1 has an invalid length. [ 79.493091][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.508618][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.515763][ T8573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.524244][ T8563] bio_check_eod: 8 callbacks suppressed [ 79.524257][ T8563] syz.9.2084: attempt to access beyond end of device [ 79.524257][ T8563] loop9: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 79.544447][ T8563] syz.9.2084: attempt to access beyond end of device [ 79.544447][ T8563] loop9: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 79.618524][ T8587] netlink: 'syz.8.2096': attribute type 13 has an invalid length. [ 79.626062][ T8592] loop7: detected capacity change from 0 to 1024 [ 79.655152][ T8596] sd 0:0:1:0: device reset [ 79.661322][ T8592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.720101][ T8587] bridge0: port 3(vlan3) entered disabled state [ 79.726519][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.734328][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.761239][ T6215] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.873096][ T8587] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.882566][ T8587] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.891474][ T8587] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.900375][ T8587] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.914680][ T8625] loop5: detected capacity change from 0 to 512 [ 79.921700][ T8625] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.935332][ T8625] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 79.950177][ T8625] EXT4-fs (loop5): 1 truncate cleaned up [ 79.957260][ T8625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.997787][ T8635] __nla_validate_parse: 7 callbacks suppressed [ 79.997875][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2117'. [ 80.038023][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.202099][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2125'. [ 80.211083][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2125'. [ 80.253342][ T8662] loop5: detected capacity change from 0 to 512 [ 80.263074][ T8662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.276150][ T8662] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.297721][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.332411][ T8669] loop7: detected capacity change from 0 to 512 [ 80.338896][ T8669] EXT4-fs: Ignoring removed nobh option [ 80.353991][ T8669] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #3: comm syz.7.2132: corrupted inode contents [ 80.366528][ T8669] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #3: comm syz.7.2132: mark_inode_dirty error [ 80.378648][ T8669] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #3: comm syz.7.2132: corrupted inode contents [ 80.384062][ T8673] loop5: detected capacity change from 0 to 4096 [ 80.390905][ T8669] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.2132: mark_inode_dirty error [ 80.397133][ T8673] EXT4-fs: inline encryption not supported [ 80.409137][ T8669] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2132: Failed to acquire dquot type 0 [ 80.426427][ T8669] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.2132: corrupted inode contents [ 80.438848][ T8669] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #16: comm syz.7.2132: mark_inode_dirty error [ 80.440003][ T8673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.450708][ T8669] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.2132: corrupted inode contents [ 80.474989][ T8669] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.2132: mark_inode_dirty error [ 80.477667][ T8673] EXT4-fs (loop5): shut down requested (2) [ 80.487165][ T8669] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.2132: corrupted inode contents [ 80.504514][ T8669] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 80.513747][ T8669] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.2132: corrupted inode contents [ 80.526560][ T8669] EXT4-fs error (device loop7): ext4_truncate:4597: inode #16: comm syz.7.2132: mark_inode_dirty error [ 80.539009][ T8669] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 80.549016][ T8669] EXT4-fs (loop7): 1 truncate cleaned up [ 80.555311][ T8669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.568291][ T8669] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.569282][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.588079][ T57] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 80.599108][ T8669] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.809208][ T8692] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 80.813242][ T8688] netlink: 'syz.5.2149': attribute type 1 has an invalid length. [ 80.819032][ T8692] SELinux: failed to load policy [ 80.825707][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2149'. [ 80.839780][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.861055][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.868259][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.180422][ T8726] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2166'. [ 81.748476][ T8744] netlink: 'syz.9.2165': attribute type 27 has an invalid length. [ 81.859312][ T8744] bridge0: port 3(batadv0) entered disabled state [ 81.865920][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.873099][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.009415][ T8744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.035796][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 82.035810][ T29] audit: type=1326 audit(1751063934.841:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.7.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57c22e929 code=0x7ffc0000 [ 82.067557][ T29] audit: type=1326 audit(1751063934.841:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.7.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57c22e929 code=0x7ffc0000 [ 82.092354][ T8744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.147304][ T29] audit: type=1326 audit(1751063934.841:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.7.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fb57c22e929 code=0x7ffc0000 [ 82.171209][ T29] audit: type=1326 audit(1751063934.841:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.7.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57c22e929 code=0x7ffc0000 [ 82.194868][ T29] audit: type=1326 audit(1751063934.841:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.7.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57c22e929 code=0x7ffc0000 [ 82.218417][ T29] audit: type=1326 audit(1751063934.901:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 82.242236][ T29] audit: type=1326 audit(1751063934.901:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 82.265850][ T29] audit: type=1326 audit(1751063934.911:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 82.289738][ T29] audit: type=1326 audit(1751063934.911:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 82.309586][ T8771] netlink: 'syz.7.2178': attribute type 3 has an invalid length. [ 82.313282][ T29] audit: type=1326 audit(1751063934.911:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 82.363873][ T8744] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.373033][ T8744] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.381963][ T8744] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.390917][ T8744] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.418212][ T8777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8777 comm=syz.7.2181 [ 82.462350][ T8744] hsr1: left allmulticast mode [ 82.467315][ T8744] bridge0: left allmulticast mode [ 82.507737][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2174'. [ 82.602563][ T8788] Cannot find add_set index 3 as target [ 82.676289][ T8804] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 82.766945][ T8815] netlink: 'syz.7.2198': attribute type 29 has an invalid length. [ 82.799481][ T8815] netlink: 'syz.7.2198': attribute type 29 has an invalid length. [ 82.823956][ T8815] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2198'. [ 82.850783][ T8827] netlink: 452 bytes leftover after parsing attributes in process `syz.8.2204'. [ 82.854125][ T8825] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2203'. [ 82.927124][ T8837] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 82.935378][ T8837] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 83.029430][ T8845] loop7: detected capacity change from 0 to 1024 [ 83.054779][ T8845] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.065870][ T8845] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.086165][ T8840] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.098925][ T8845] JBD2: no valid journal superblock found [ 83.104714][ T8845] EXT4-fs (loop7): Could not load journal inode [ 83.165311][ T8840] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.219148][ T8855] netlink: 'syz.9.2217': attribute type 29 has an invalid length. [ 83.230494][ T8840] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.243726][ T8855] netlink: 'syz.9.2217': attribute type 29 has an invalid length. [ 83.256096][ T8855] netlink: 500 bytes leftover after parsing attributes in process `syz.9.2217'. [ 83.274720][ T8840] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.337737][ T8869] pim6reg: entered allmulticast mode [ 83.366397][ T8840] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.387530][ T8869] pim6reg: left allmulticast mode [ 83.427259][ T8840] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.443977][ T8840] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.473689][ T8840] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.510998][ T8881] hub 9-0:1.0: USB hub found [ 83.521645][ T8884] loop9: detected capacity change from 0 to 256 [ 83.523980][ T8881] hub 9-0:1.0: 8 ports detected [ 83.583912][ T8884] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.594154][ T8884] FAT-fs (loop9): Filesystem has been set read-only [ 83.613693][ T8884] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.643191][ T8884] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.653849][ T8896] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.681532][ T8896] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.719687][ T8901] program syz.7.2236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.781322][ T8911] openvswitch: netlink: Message has 6 unknown bytes. [ 83.790314][ T8910] random: crng reseeded on system resumption [ 83.867245][ T8919] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 83.874845][ T8919] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.969917][ T8931] tap0: tun_chr_ioctl cmd 1074025678 [ 83.975349][ T8931] tap0: group set to 0 [ 83.979998][ T8931] tap0: tun_chr_ioctl cmd 1074025677 [ 83.985963][ T8931] tap0: linktype set to 821 [ 84.002298][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.009691][ T8935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.042877][ T8940] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 84.107059][ T8949] SELinux: policydb version 0 does not match my version range 15-34 [ 84.116691][ T8949] SELinux: failed to load policy [ 84.294821][ T8991] macvlan0: entered promiscuous mode [ 84.301343][ T8991] batadv_slave_1: entered promiscuous mode [ 84.308520][ T8991] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 84.317546][ T8991] Cannot create hsr debugfs directory [ 84.379756][ T9007] loop7: detected capacity change from 0 to 1024 [ 84.389252][ T9008] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 84.403760][ T9007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.416175][ T9007] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.512530][ T6215] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.549986][ T9030] random: crng reseeded on system resumption [ 84.561437][ T9028] SELinux: failed to load policy [ 84.586521][ T9034] binfmt_misc: register: failed to install interpreter file ./file2 [ 84.688075][ T9050] random: crng reseeded on system resumption [ 84.695511][ T9049] program syz.7.2305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.950550][ T9097] loop7: detected capacity change from 0 to 512 [ 84.980532][ T9097] EXT4-fs (loop7): too many log groups per flexible block group [ 84.988384][ T9097] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 85.009143][ T9097] EXT4-fs (loop7): mount failed [ 85.074811][ T9118] loop7: detected capacity change from 0 to 2048 [ 85.081668][ T9118] ext4: Unknown parameter 'appraise' [ 85.286260][ T9166] loop8: detected capacity change from 0 to 256 [ 85.302237][ T9168] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 85.302237][ T9168] program syz.7.2359 not setting count and/or reply_len properly [ 85.351038][ T9174] program syz.5.2362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.360677][ T9174] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 85.430450][ T9184] loop8: detected capacity change from 0 to 512 [ 85.436926][ T9187] loop7: detected capacity change from 0 to 1024 [ 85.439924][ T9184] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 85.454506][ T9187] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.455923][ T9184] EXT4-fs (loop8): 1 truncate cleaned up [ 85.465831][ T9187] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.499764][ T9187] JBD2: no valid journal superblock found [ 85.505575][ T9187] EXT4-fs (loop7): Could not load journal inode [ 85.539136][ T9187] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 85.589943][ T9207] netlink: 'syz.7.2376': attribute type 27 has an invalid length. [ 85.631384][ T9213] sd 0:0:1:0: device reset [ 85.679587][ T9207] bridge0: port 3(vlan2) entered disabled state [ 85.686070][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.693344][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.772292][ T9207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.786632][ T9207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.825288][ T9207] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.834483][ T9207] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.843522][ T9207] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.852471][ T9207] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.874596][ T9207] bond0: left promiscuous mode [ 85.880564][ T9207] bond1: left promiscuous mode [ 86.055503][ T9248] loop9: detected capacity change from 0 to 1024 [ 86.073454][ T9248] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.148175][ T9253] program syz.6.2388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.446818][ T9286] __nla_validate_parse: 5 callbacks suppressed [ 86.446829][ T9286] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2406'. [ 86.497519][ T9289] loop9: detected capacity change from 0 to 8192 [ 86.567994][ T9299] loop9: detected capacity change from 0 to 512 [ 86.583350][ T9299] EXT4-fs error (device loop9): __ext4_iget:5379: inode #4: block 193290: comm syz.9.2411: invalid block [ 86.594961][ T9299] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.2411: Bad quota inode: 4, type: 1 [ 86.606303][ T9299] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.621212][ T9299] EXT4-fs (loop9): mount failed [ 86.709607][ T9310] program syz.9.2415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.170482][ T9370] loop5: detected capacity change from 0 to 1024 [ 87.177423][ T9370] EXT4-fs: Ignoring removed nobh option [ 87.183112][ T9370] EXT4-fs: Ignoring removed bh option [ 87.195424][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 87.195439][ T29] audit: type=1400 audit(1751063940.001:2799): avc: denied { add_name } for pid=9369 comm="syz.5.2441" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.222453][ T29] audit: type=1400 audit(1751063940.001:2800): avc: denied { create } for pid=9369 comm="syz.5.2441" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.243062][ T29] audit: type=1400 audit(1751063940.001:2801): avc: denied { append } for pid=9369 comm="syz.5.2441" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.265426][ T29] audit: type=1400 audit(1751063940.001:2802): avc: denied { open } for pid=9369 comm="syz.5.2441" path="/428/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.288518][ T29] audit: type=1400 audit(1751063940.001:2803): avc: denied { write } for pid=9369 comm="syz.5.2441" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.329017][ T29] audit: type=1400 audit(1751063940.131:2804): avc: denied { write } for pid=9376 comm="syz.5.2442" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.418707][ T29] audit: type=1400 audit(1751063940.221:2805): avc: denied { name_bind } for pid=9391 comm="syz.8.2450" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 87.440984][ T29] audit: type=1400 audit(1751063940.221:2806): avc: denied { node_bind } for pid=9391 comm="syz.8.2450" saddr=::ffff:172.20.20.46 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.471302][ T29] audit: type=1326 audit(1751063940.271:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.8.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 87.495559][ T29] audit: type=1326 audit(1751063940.271:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.8.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16e2fe929 code=0x7ffc0000 [ 87.571476][ T9404] SELinux: failed to load policy [ 87.657923][ T9414] SELinux: failed to load policy [ 87.739211][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2470'. [ 87.748285][ T9432] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2470'. [ 88.043268][ T9473] loop9: detected capacity change from 0 to 2048 [ 88.065981][ T9473] EXT4-fs (loop9): shut down requested (0) [ 88.079425][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2492'. [ 88.088668][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2492'. [ 88.119977][ T9485] Invalid ELF header magic: != ELF [ 88.178410][ T9496] loop6: detected capacity change from 0 to 1024 [ 88.185980][ T9496] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 88.197008][ T9496] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.207891][ T9496] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #32: comm syz.6.2498: iget: special inode unallocated [ 88.220950][ T9496] EXT4-fs (loop6): no journal found [ 88.226218][ T9496] EXT4-fs (loop6): can't get journal size [ 88.233676][ T9496] EXT4-fs error (device loop6): ext4_protect_reserved_inode:160: inode #32: comm syz.6.2498: iget: special inode unallocated [ 88.247269][ T9496] EXT4-fs (loop6): failed to initialize system zone (-117) [ 88.255716][ T9496] EXT4-fs (loop6): mount failed [ 88.355710][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2513'. [ 88.383610][ T9533] program syz.6.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.414626][ T9540] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2519'. [ 88.436255][ T9542] loop7: detected capacity change from 0 to 512 [ 88.437154][ T9544] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 88.452301][ T9542] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 88.478321][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2522'. [ 88.487507][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2522'. [ 88.496491][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2522'. [ 88.723227][ T9588] veth0: entered promiscuous mode [ 88.729232][ T9587] veth0: left promiscuous mode [ 88.809694][ T9598] ipvlan2: entered promiscuous mode [ 88.815225][ T9598] ipvlan2: entered allmulticast mode [ 88.820712][ T9598] dummy0: entered allmulticast mode [ 89.431161][ T9637] loop9: detected capacity change from 0 to 164 [ 89.721780][ T9676] netlink: 'syz.8.2581': attribute type 1 has an invalid length. [ 89.885861][ T9696] loop6: detected capacity change from 0 to 512 [ 89.903617][ T9696] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 89.911821][ T9696] System zones: 0-2, 18-18, 34-35 [ 89.918275][ T9696] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.520481][ T9732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9732 comm=syz.7.2605 [ 90.656817][ T9747] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 90.784851][ T9766] loop8: detected capacity change from 0 to 2048 [ 90.850913][ T9766] Alternate GPT is invalid, using primary GPT. [ 90.857419][ T9766] loop8: p2 p3 p7 [ 90.899828][ T9781] loop9: detected capacity change from 0 to 512 [ 90.919239][ T9781] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.933940][ T9781] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 90.946645][ T9781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 90.959217][ T9781] System zones: 1-12 [ 90.968720][ T9781] EXT4-fs (loop9): 1 truncate cleaned up [ 91.117722][ T9809] loop9: detected capacity change from 0 to 2048 [ 91.205210][ T9809] Alternate GPT is invalid, using primary GPT. [ 91.211720][ T9809] loop9: p2 p3 p7 [ 91.358114][ T9843] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.441915][ T9848] loop7: detected capacity change from 0 to 2048 [ 91.486838][ T9852] loop6: detected capacity change from 0 to 2048 [ 91.517455][ T9859] loop9: detected capacity change from 0 to 512 [ 91.526092][ T9852] Alternate GPT is invalid, using primary GPT. [ 91.532728][ T9852] loop6: p2 p3 p7 [ 91.542824][ T6215] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 91.554933][ T9859] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2661: Failed to acquire dquot type 1 [ 91.576329][ T6215] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 91.611271][ T9859] EXT4-fs (loop9): 1 truncate cleaned up [ 91.628392][ T9859] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.136601][ T9912] program syz.8.2684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.195709][ T9920] loop8: detected capacity change from 0 to 164 [ 92.263600][ T9929] random: crng reseeded on system resumption [ 92.319801][ T9939] loop8: detected capacity change from 0 to 1024 [ 92.327318][ T9939] EXT4-fs: Ignoring removed oldalloc option [ 92.333488][ T9939] EXT4-fs: Ignoring removed bh option [ 92.343288][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 92.343301][ T29] audit: type=1400 audit(1751063945.151:2993): avc: denied { mount } for pid=9940 comm="syz.6.2698" name="/" dev="ramfs" ino=26156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.381040][ T29] audit: type=1400 audit(1751063945.151:2994): avc: denied { unmount } for pid=6171 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.401239][ T29] audit: type=1400 audit(1751063945.151:2995): avc: denied { mounton } for pid=9938 comm="syz.8.2697" path="/319/file1/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.434099][ T29] audit: type=1326 audit(1751063945.241:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d00e929 code=0x7ffc0000 [ 92.457614][ T29] audit: type=1326 audit(1751063945.241:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d00e929 code=0x7ffc0000 [ 92.481117][ T29] audit: type=1326 audit(1751063945.241:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fdd1d00e929 code=0x7ffc0000 [ 92.504819][ T29] audit: type=1326 audit(1751063945.241:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d00e929 code=0x7ffc0000 [ 92.528297][ T29] audit: type=1326 audit(1751063945.241:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d00e929 code=0x7ffc0000 [ 92.641186][ T29] audit: type=1400 audit(1751063945.441:3001): avc: denied { write } for pid=9956 comm="syz.6.2707" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 92.671369][ T29] audit: type=1400 audit(1751063945.471:3002): avc: denied { mounton } for pid=9959 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 92.768843][ T9973] SELinux: syz.9.2710 (9973) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.875385][ T9986] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2716' sets config #1 [ 92.884631][ T9959] chnl_net:caif_netlink_parms(): no params data found [ 92.921091][ T9994] __nla_validate_parse: 2 callbacks suppressed [ 92.921105][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2718'. [ 92.947282][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.954520][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.962642][ T9959] bridge_slave_0: entered allmulticast mode [ 92.969349][ T9959] bridge_slave_0: entered promiscuous mode [ 92.977682][ T9994] tipc: Started in network mode [ 92.982725][ T9994] tipc: Node identity 7, cluster identity 4711 [ 92.988914][ T9994] tipc: Node number set to 7 [ 92.998538][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.998569][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.998717][ T9959] bridge_slave_1: entered allmulticast mode [ 92.999243][ T9959] bridge_slave_1: entered promiscuous mode [ 93.024778][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.047646][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.069415][ T9959] team0: Port device team_slave_0 added [ 93.070338][ T9959] team0: Port device team_slave_1 added [ 93.096683][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.096695][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.096753][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.097206][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.097216][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.097305][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.196870][ T9959] hsr_slave_0: entered promiscuous mode [ 93.197410][ T9959] hsr_slave_1: entered promiscuous mode [ 93.197618][ T9959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.197629][ T9959] Cannot create hsr debugfs directory [ 93.204382][ T168] vlan3: left allmulticast mode [ 93.204399][ T168] dummy0: left allmulticast mode [ 93.204413][ T168] vlan3: left promiscuous mode [ 93.204425][ T168] dummy0: left promiscuous mode [ 93.204648][ T168] bridge0: port 3(vlan3) entered disabled state [ 93.205399][ T168] bridge_slave_1: left allmulticast mode [ 93.205415][ T168] bridge_slave_1: left promiscuous mode [ 93.205552][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.217677][ T168] bridge_slave_0: left allmulticast mode [ 93.217695][ T168] bridge_slave_0: left promiscuous mode [ 93.217835][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.239919][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.307894][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.333996][ T168] bond0 (unregistering): (slave bond1): Releasing backup interface [ 93.334075][ T168] bond1 (unregistering): left promiscuous mode [ 93.334499][ T168] bond0 (unregistering): Released all slaves [ 93.356984][ T168] bond1 (unregistering): Released all slaves [ 93.434858][ T168] hsr_slave_0: left promiscuous mode [ 93.435059][ T168] hsr_slave_1: left promiscuous mode [ 93.471714][ T168] team0 (unregistering): Port device team_slave_1 removed [ 93.479871][ T168] team0 (unregistering): Port device team_slave_0 removed [ 93.668350][ T9959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.677496][ T9959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.679591][ T9959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.693428][ T9959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.721589][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.734873][ T9959] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.744659][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.744767][ T5319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.755433][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.767184][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.892176][ T9959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.957092][T10045] loop7: detected capacity change from 0 to 1024 [ 93.965042][T10045] EXT4-fs: Ignoring removed oldalloc option [ 93.970997][T10045] EXT4-fs: Ignoring removed bh option [ 93.972965][ T9959] veth0_vlan: entered promiscuous mode [ 93.984842][ T9959] veth1_vlan: entered promiscuous mode [ 93.999343][ T9959] veth0_macvtap: entered promiscuous mode [ 94.006974][ T9959] veth1_macvtap: entered promiscuous mode [ 94.018731][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.028090][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.037283][ T9959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.046100][ T9959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.055002][ T9959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.063797][ T9959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.179767][T10067] bond1: entered promiscuous mode [ 94.184934][T10067] bond1: entered allmulticast mode [ 94.197107][T10067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.217817][T10067] bond1 (unregistering): Released all slaves [ 94.353331][ T57] vlan2: left allmulticast mode [ 94.368767][ T57] dummy0: left allmulticast mode [ 94.373791][ T57] vlan2: left promiscuous mode [ 94.379380][ T57] dummy0: left promiscuous mode [ 94.384609][ T57] bridge0: port 3(vlan2) entered disabled state [ 94.392215][ T57] bridge_slave_1: left allmulticast mode [ 94.398091][ T57] bridge_slave_1: left promiscuous mode [ 94.403826][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.411836][ T57] bridge_slave_0: left allmulticast mode [ 94.417671][ T57] bridge_slave_0: left promiscuous mode [ 94.423364][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.473898][ T57] bond0 (unregistering): (slave bond1): Releasing backup interface [ 94.482585][ T57] bond0 (unregistering): Released all slaves [ 94.491354][ T57] bond1 (unregistering): Released all slaves [ 94.507700][T10105] loop5: detected capacity change from 0 to 4096 [ 94.518737][T10105] ext4: Unknown parameter 'pcr' [ 94.586343][T10110] netlink: 'syz.6.2755': attribute type 3 has an invalid length. [ 94.636356][ T57] hsr_slave_0: left promiscuous mode [ 94.643571][ T57] hsr_slave_1: left promiscuous mode [ 94.649270][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.656917][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.695209][ T57] team0 (unregistering): Port device team_slave_1 removed [ 94.709613][ T57] team0 (unregistering): Port device team_slave_0 removed [ 94.717695][ T1383] smc: removing ib device syz! [ 94.782514][T10075] chnl_net:caif_netlink_parms(): no params data found [ 94.842694][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.849822][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.880042][T10075] bridge_slave_0: entered allmulticast mode [ 94.889496][T10075] bridge_slave_0: entered promiscuous mode [ 94.903935][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.911016][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.929532][T10075] bridge_slave_1: entered allmulticast mode [ 94.944580][T10075] bridge_slave_1: entered promiscuous mode [ 94.993145][T10075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.003600][T10075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.038199][T10075] team0: Port device team_slave_0 added [ 95.044819][T10075] team0: Port device team_slave_1 added [ 95.050678][T10148] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2769'. [ 95.077625][T10075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.084679][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.110723][T10075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.144684][T10075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.151657][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.177733][T10075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.210016][T10157] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 95.210016][T10157] program syz.6.2772 not setting count and/or reply_len properly [ 95.210608][T10075] hsr_slave_0: entered promiscuous mode [ 95.234324][T10075] hsr_slave_1: entered promiscuous mode [ 95.240245][T10075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.254900][T10075] Cannot create hsr debugfs directory [ 95.293734][T10166] IPv6: sit1: Disabled Multicast RS [ 95.299745][T10166] sit1: entered allmulticast mode [ 95.334498][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2778'. [ 95.551083][T10075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.561144][T10075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.570507][T10075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.585216][T10075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.636833][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.649198][T10075] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.664638][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.672053][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.680955][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.688025][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.780968][T10075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.942736][T10075] veth0_vlan: entered promiscuous mode [ 95.950986][T10075] veth1_vlan: entered promiscuous mode [ 95.967294][T10075] veth0_macvtap: entered promiscuous mode [ 95.976548][T10075] veth1_macvtap: entered promiscuous mode [ 95.989722][T10075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.007175][T10075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.018033][T10250] usb usb1: usbfs: process 10250 (syz.0.2805) did not claim interface 0 before use [ 96.020332][T10075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.036530][T10075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.045272][T10075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.054130][T10075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.149313][T10258] geneve2: entered promiscuous mode [ 96.154662][T10258] geneve2: entered allmulticast mode [ 96.160474][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2810'. [ 96.329236][T10292] loop4: detected capacity change from 0 to 2048 [ 96.366901][T10292] EXT4-fs mount: 20 callbacks suppressed [ 96.366915][T10292] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.371009][T10292] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2823: bg 0: block 120: padding at end of block bitmap is not set [ 96.421040][T10075] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 96.559858][T10320] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2836'. [ 96.664252][T10333] lo speed is unknown, defaulting to 1000 [ 96.664271][T10333] lo speed is unknown, defaulting to 1000 [ 96.664464][T10333] lo speed is unknown, defaulting to 1000 [ 96.665266][T10333] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 96.669317][T10333] lo speed is unknown, defaulting to 1000 [ 96.701599][T10333] lo speed is unknown, defaulting to 1000 [ 96.708436][T10333] lo speed is unknown, defaulting to 1000 [ 96.708715][T10333] lo speed is unknown, defaulting to 1000 [ 96.708940][T10333] lo speed is unknown, defaulting to 1000 [ 96.730670][T10338] netlink: 'syz.9.2844': attribute type 3 has an invalid length. [ 96.759921][T10341] usb usb1: usbfs: process 10341 (syz.5.2846) did not claim interface 0 before use [ 96.782202][T10344] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10344 comm=syz.4.2848 [ 96.782228][T10344] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10344 comm=syz.4.2848 [ 96.898689][T10360] loop9: detected capacity change from 0 to 2048 [ 96.918019][T10360] EXT4-fs (loop9): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.921502][T10360] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2855: bg 0: block 120: padding at end of block bitmap is not set [ 96.943497][ T6147] EXT4-fs (loop9): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 97.165620][T10393] loop4: detected capacity change from 0 to 512 [ 97.165972][T10393] journal_path: Non-blockdev passed as './bus' [ 97.165988][T10393] EXT4-fs: error: could not find journal device path [ 97.227394][T10401] hub 5-0:1.0: USB hub found [ 97.227496][T10401] hub 5-0:1.0: 8 ports detected [ 97.353446][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2883'. [ 97.361967][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 97.361985][ T29] audit: type=1400 audit(1751063950.161:3217): avc: denied { write } for pid=10419 comm="syz.0.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.388997][ T29] audit: type=1400 audit(1751063950.161:3218): avc: denied { read } for pid=10419 comm="syz.0.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.464320][ T29] audit: type=1400 audit(1751063950.201:3219): avc: denied { create } for pid=10412 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.484035][ T29] audit: type=1400 audit(1751063950.201:3220): avc: denied { write } for pid=10412 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.503428][ T29] audit: type=1400 audit(1751063950.211:3221): avc: denied { allowed } for pid=10423 comm="syz.9.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.522950][ T29] audit: type=1400 audit(1751063950.221:3222): avc: denied { create } for pid=10423 comm="syz.9.2885" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.544293][ T29] audit: type=1400 audit(1751063950.221:3223): avc: denied { map } for pid=10423 comm="syz.9.2885" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.568617][ T29] audit: type=1400 audit(1751063950.221:3224): avc: denied { read write } for pid=10423 comm="syz.9.2885" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.594108][ T29] audit: type=1400 audit(1751063950.301:3225): avc: denied { read } for pid=10436 comm="syz.6.2891" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.617846][ T29] audit: type=1400 audit(1751063950.301:3226): avc: denied { open } for pid=10436 comm="syz.6.2891" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.789090][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2909'. [ 97.863173][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2914'. [ 98.045432][T10532] loop9: detected capacity change from 0 to 1024 [ 98.101071][T10532] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.138341][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.147103][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.167969][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.192612][T10555] geneve2: entered promiscuous mode [ 98.197986][T10555] geneve2: entered allmulticast mode [ 98.240501][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 98.248313][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 98.256927][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.264714][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.272526][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.280340][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.288189][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.295880][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.303557][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.311205][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.318948][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.326695][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.334486][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.342174][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.349826][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.357541][ T9220] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 98.367208][ T9220] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 98.454740][T10583] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2956'. [ 98.546640][T10601] geneve2: entered promiscuous mode [ 98.552087][T10601] geneve2: entered allmulticast mode [ 98.567994][T10603] loop6: detected capacity change from 0 to 2048 [ 98.616924][T10603] Alternate GPT is invalid, using primary GPT. [ 98.623288][T10603] loop6: p1 p2 p3 [ 98.676732][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'. [ 98.798874][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2982'. [ 98.910361][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2991'. [ 98.948916][T10675] 9pnet_fd: Insufficient options for proto=fd [ 99.091748][T10703] loop4: detected capacity change from 0 to 128 [ 99.099941][T10703] EXT4-fs: Ignoring removed nobh option [ 99.110215][T10703] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.124657][T10703] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.198745][T10075] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.211298][T10717] atomic_op ffff888116b1c928 conn xmit_atomic 0000000000000000 [ 99.227432][T10721] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3016'. [ 99.373458][T10751] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000003 [ 99.459215][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3033'. [ 99.529216][T10764] sctp: [Deprecated]: syz.5.3035 (pid 10764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.529216][T10764] Use struct sctp_sack_info instead [ 99.717688][T10782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3043'. [ 99.773941][T10790] syzkaller1: entered promiscuous mode [ 99.779572][T10790] syzkaller1: entered allmulticast mode [ 99.843374][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 99.913019][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3056'. [ 100.076151][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 100.272641][T10871] loop6: detected capacity change from 0 to 512 [ 100.280326][T10871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.300857][T10871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.330911][T10871] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.397665][ T6171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.511600][T10898] loop9: detected capacity change from 0 to 512 [ 100.525513][T10898] EXT4-fs (loop9): orphan cleanup on readonly fs [ 100.533426][T10898] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3098: bg 0: block 248: padding at end of block bitmap is not set [ 100.548533][T10898] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3098: Failed to acquire dquot type 1 [ 100.565425][T10898] EXT4-fs (loop9): 1 truncate cleaned up [ 100.573699][T10898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.590335][T10898] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.3098: deleted inode referenced: 12 [ 100.618089][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.649637][T10907] loop9: detected capacity change from 0 to 164 [ 100.663157][T10907] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 100.673113][T10907] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 100.692171][T10907] rock: directory entry would overflow storage [ 100.698442][T10907] rock: sig=0x4f50, size=4, remaining=3 [ 100.704157][T10907] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 100.901584][T10934] vhci_hcd: invalid port number 255 [ 100.906872][T10934] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 100.919550][T10932] loop9: detected capacity change from 0 to 8192 [ 101.277410][T10975] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 101.412598][T10875] syz.0.3088 (10875) used greatest stack depth: 7856 bytes left [ 101.518304][T10997] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 101.795151][T11060] loop9: detected capacity change from 0 to 1024 [ 101.813461][T11060] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.832508][T11060] EXT4-fs warning (device loop9): empty_inline_dir:1775: bad inline directory (dir #12) - no `..' [ 101.863242][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.979435][T11094] loop5: detected capacity change from 0 to 128 [ 101.987258][T11094] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.999527][T11094] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.023612][ T57] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.399166][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 102.399181][ T29] audit: type=1400 audit(1751063955.201:3468): avc: denied { create } for pid=11185 comm="syz.0.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.426065][ T29] audit: type=1400 audit(1751063955.201:3469): avc: denied { listen } for pid=11185 comm="syz.0.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.481422][ T29] audit: type=1400 audit(1751063955.281:3470): avc: denied { create } for pid=11195 comm="syz.4.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.501564][ T29] audit: type=1400 audit(1751063955.291:3471): avc: denied { write } for pid=11195 comm="syz.4.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.528872][ T29] audit: type=1326 audit(1751063955.331:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8690e929 code=0x7ffc0000 [ 102.552587][ T29] audit: type=1326 audit(1751063955.331:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8690e929 code=0x7ffc0000 [ 102.576147][ T29] audit: type=1326 audit(1751063955.331:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd8690e929 code=0x7ffc0000 [ 102.599759][ T29] audit: type=1326 audit(1751063955.331:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8690e929 code=0x7ffc0000 [ 102.623337][ T29] audit: type=1326 audit(1751063955.331:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8690e929 code=0x7ffc0000 [ 102.655497][ T29] audit: type=1326 audit(1751063955.331:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fcd8690e929 code=0x7ffc0000 [ 102.745527][T11220] program syz.9.3192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.765318][T11222] loop5: detected capacity change from 0 to 512 [ 102.772593][T11222] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.786904][T11222] EXT4-fs (loop5): 1 truncate cleaned up [ 102.793336][T11222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.820321][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.832745][T11228] netlink: 'syz.4.3195': attribute type 280 has an invalid length. [ 102.892084][T11242] loop4: detected capacity change from 0 to 128 [ 102.898818][T11242] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.910861][T11242] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.930611][ T1383] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.072583][T11267] lo speed is unknown, defaulting to 1000 [ 103.087054][T11272] loop6: detected capacity change from 0 to 2048 [ 103.142749][T11272] Alternate GPT is invalid, using primary GPT. [ 103.149280][T11272] loop6: p1 p2 p3 [ 103.156582][T11283] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11283 comm=syz.4.3221 [ 103.169244][T11283] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11283 comm=syz.4.3221 [ 103.260534][T11297] netlink: 'syz.5.3227': attribute type 1 has an invalid length. [ 103.319261][T11305] loop6: detected capacity change from 0 to 256 [ 103.337369][T11305] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.373843][T11305] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 103.382534][T11305] FAT-fs (loop6): Filesystem has been set read-only [ 103.417152][T11316] loop9: detected capacity change from 0 to 128 [ 103.423855][T11316] EXT4-fs: Ignoring removed nobh option [ 103.433999][T11316] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.450905][T11316] ext4 filesystem being mounted at /510/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.536996][T11325] loop5: detected capacity change from 0 to 1024 [ 103.552298][ T6147] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.624590][T11325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.710792][T11325] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.841981][T11325] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 103.872784][T11325] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 103.885188][T11325] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.885188][T11325] [ 103.894908][T11325] EXT4-fs (loop5): Total free blocks count 0 [ 103.900896][T11325] EXT4-fs (loop5): Free/Dirty block details [ 103.906825][T11325] EXT4-fs (loop5): free_blocks=4293918720 [ 103.912755][T11325] EXT4-fs (loop5): dirty_blocks=80 [ 103.917991][T11325] EXT4-fs (loop5): Block reservation details [ 103.923997][T11325] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 103.953729][T11363] __nla_validate_parse: 2 callbacks suppressed [ 103.953743][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 103.968920][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 103.981774][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 104.009820][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 104.018766][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 104.032491][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.046121][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 104.115156][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 104.124179][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 104.150636][T11380] loop5: detected capacity change from 0 to 256 [ 104.157307][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 104.191929][T11380] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.257540][T11380] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 104.266331][T11380] FAT-fs (loop5): Filesystem has been set read-only [ 104.307347][T11401] loop6: detected capacity change from 0 to 1024 [ 104.316933][T11401] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.345099][T11401] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.3275: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 104.364323][T11401] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.3275: Bad quota inode: 3, type: 0 [ 104.376839][T11401] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 104.404372][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 104.413780][T11401] EXT4-fs (loop6): mount failed [ 104.538578][T11435] random: crng reseeded on system resumption [ 104.638207][T11456] program syz.6.3300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.756040][T11478] netlink: 'syz.6.3310': attribute type 1 has an invalid length. [ 104.917961][T11492] infiniband syz!: set active [ 104.922877][T11492] infiniband syz!: added team_slave_0 [ 104.943120][T11492] RDS/IB: syz!: added [ 104.947826][T11492] smc: adding ib device syz! with port count 1 [ 104.954262][T11492] smc: ib device syz! port 1 has pnetid [ 105.244563][T11542] 9pnet_fd: Insufficient options for proto=fd [ 105.294361][T11549] bond0: entered promiscuous mode [ 105.299451][T11549] bond0: entered allmulticast mode [ 105.305840][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.315405][T11549] bond0 (unregistering): Released all slaves [ 105.381391][T11557] macsec1: entered promiscuous mode [ 105.386752][T11557] dummy0: entered promiscuous mode [ 105.392083][T11557] macsec1: entered allmulticast mode [ 105.397381][T11557] dummy0: entered allmulticast mode [ 105.404018][T11557] dummy0: left allmulticast mode [ 105.408975][T11557] dummy0: left promiscuous mode [ 105.633315][T11577] xt_hashlimit: max too large, truncated to 1048576 [ 106.158832][T11602] netlink: 'syz.5.3365': attribute type 21 has an invalid length. [ 106.319837][T11625] loop4: detected capacity change from 0 to 1024 [ 106.326888][T11625] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.338577][T11625] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.3375: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 106.358795][T11625] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.3375: Bad quota inode: 3, type: 0 [ 106.370704][T11625] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 106.386537][T11625] EXT4-fs (loop4): mount failed [ 106.550991][T11653] batadv_slave_1: entered promiscuous mode [ 106.558960][T11651] batadv_slave_1: left promiscuous mode [ 106.771597][T11678] atomic_op ffff888119895528 conn xmit_atomic 0000000000000000 [ 106.882364][T11688] loop0: detected capacity change from 0 to 1024 [ 106.903401][T11688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.916112][T11688] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.934630][T11688] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 106.951294][T11688] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 106.963854][T11688] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.963854][T11688] [ 106.973537][T11688] EXT4-fs (loop0): Total free blocks count 0 [ 106.979501][T11688] EXT4-fs (loop0): Free/Dirty block details [ 106.985509][T11688] EXT4-fs (loop0): free_blocks=4293918720 [ 106.991238][T11688] EXT4-fs (loop0): dirty_blocks=80 [ 106.996525][T11688] EXT4-fs (loop0): Block reservation details [ 107.002636][T11688] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 107.024943][T11696] lo speed is unknown, defaulting to 1000 [ 107.032486][ T9959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.363787][T11731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11731 comm=syz.9.3422 [ 107.407294][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 107.407309][ T29] audit: type=1326 audit(1751063960.211:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.437182][ T29] audit: type=1326 audit(1751063960.211:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.467498][ T29] audit: type=1326 audit(1751063960.241:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.491244][ T29] audit: type=1326 audit(1751063960.241:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.514930][ T29] audit: type=1326 audit(1751063960.241:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.538510][ T29] audit: type=1326 audit(1751063960.241:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.562261][ T29] audit: type=1326 audit(1751063960.271:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.585822][ T29] audit: type=1326 audit(1751063960.271:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.604177][T11744] loop5: detected capacity change from 0 to 512 [ 107.609619][ T29] audit: type=1326 audit(1751063960.271:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.618477][T11744] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3428: casefold flag without casefold feature [ 107.640561][ T29] audit: type=1326 audit(1751063960.271:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.5.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772749e929 code=0x7ffc0000 [ 107.654520][T11744] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3428: couldn't read orphan inode 15 (err -117) [ 107.689165][T11744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.734088][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.754079][T11749] Cannot find del_set index 0 as target [ 107.833887][T11765] loop4: detected capacity change from 0 to 2048 [ 107.855441][T11765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.882862][T11765] EXT4-fs (loop4): shut down requested (0) [ 107.890452][T11765] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 107.899523][T11765] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 107.908906][T11765] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 107.918263][T11765] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 107.927286][T11765] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 107.936328][T11765] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 107.945358][T11765] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 107.963506][T10075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.051291][T11786] netlink: 'syz.4.3446': attribute type 1 has an invalid length. [ 108.097763][T11792] atomic_op ffff888114336528 conn xmit_atomic 0000000000000000 [ 108.385778][T11832] loop4: detected capacity change from 0 to 512 [ 108.392957][T11832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.412118][T11832] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3468: invalid block [ 108.419349][T11835] netlink: 'syz.9.3469': attribute type 2 has an invalid length. [ 108.427092][T11832] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3468: invalid indirect mapped block 4294967295 (level 1) [ 108.447811][T11832] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3468: invalid indirect mapped block 4294967295 (level 1) [ 108.462851][T11832] EXT4-fs (loop4): 2 truncates cleaned up [ 108.468832][T11838] loop6: detected capacity change from 0 to 128 [ 108.475590][T11832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.502853][T11832] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3468: bg 0: block 5: invalid block bitmap [ 108.534383][T10075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.626255][T11861] loop4: detected capacity change from 0 to 1024 [ 108.634255][T11861] EXT4-fs: Ignoring removed oldalloc option [ 108.656586][T11861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.732604][T10075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.755325][T11881] batadv1: entered promiscuous mode [ 108.760616][T11881] batadv1: entered allmulticast mode [ 108.770048][T11884] xt_hashlimit: max too large, truncated to 1048576 [ 109.061499][T11905] loop9: detected capacity change from 0 to 256 [ 109.078009][T11905] FAT-fs (loop9): bogus number of FAT sectors [ 109.084179][T11905] FAT-fs (loop9): Can't find a valid FAT filesystem [ 109.151560][T11913] loop9: detected capacity change from 0 to 2048 [ 109.186278][T11913] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.233475][T11913] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 109.250947][T11913] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 109.263323][T11913] EXT4-fs (loop9): This should not happen!! Data will be lost [ 109.263323][T11913] [ 109.273003][T11913] EXT4-fs (loop9): Total free blocks count 0 [ 109.279115][T11913] EXT4-fs (loop9): Free/Dirty block details [ 109.285057][T11913] EXT4-fs (loop9): free_blocks=2415919504 [ 109.290864][T11913] EXT4-fs (loop9): dirty_blocks=48 [ 109.296134][T11913] EXT4-fs (loop9): Block reservation details [ 109.302170][T11913] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 109.315342][T11912] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 109.415658][T11941] syzkaller1: entered promiscuous mode [ 109.421186][T11941] syzkaller1: entered allmulticast mode [ 109.680667][T11961] program syz.4.3525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.695933][T11962] loop0: detected capacity change from 0 to 2048 [ 109.714327][T11962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.744479][ T9959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.760513][T11968] loop6: detected capacity change from 0 to 2048 [ 109.774893][T11968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.791612][T11968] EXT4-fs (loop6): shut down requested (0) [ 109.803253][T11968] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 109.813359][T11968] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 109.822955][T11968] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 109.832035][T11968] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 109.841038][T11968] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 109.850212][T11968] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 109.866560][T11968] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 109.904059][T11986] team0: Device gre1 is of different type [ 109.910273][ T6171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.993625][T11996] loop0: detected capacity change from 0 to 256 [ 110.031656][T12003] loop6: detected capacity change from 0 to 1024 [ 110.035201][T12005] debugfs: Invalid uid '0x00000000ffffffff' [ 110.054597][T12003] EXT4-fs: Ignoring removed oldalloc option [ 110.076545][T12003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.106123][T12017] __nla_validate_parse: 18 callbacks suppressed [ 110.106136][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3550'. [ 110.109899][T12015] loop0: detected capacity change from 0 to 2048 [ 110.112499][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3550'. [ 110.150464][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3550'. [ 110.151714][ T6171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.159917][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3550'. [ 110.172357][T12015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.206353][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3550'. [ 110.215410][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3550'. [ 110.246513][T12015] EXT4-fs (loop0): shut down requested (0) [ 110.256578][T12015] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 110.282026][T12015] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 110.294074][T12015] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 110.303913][T12015] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 110.314512][T12015] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 110.323570][T12015] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 110.333355][T12015] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 110.374771][ T9959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.516709][T12068] x_tables: duplicate underflow at hook 2 [ 110.604342][T12079] loop9: detected capacity change from 0 to 2048 [ 110.614985][T12079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.623354][T12079] EXT4-fs (loop9): shut down requested (0) [ 110.649477][T12083] loop0: detected capacity change from 0 to 1024 [ 110.657238][T12079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 110.676763][T12083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.677767][T12083] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 110.677948][T12083] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 110.677976][T12083] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 110.678104][T12083] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 110.678241][T12083] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 110.678352][T12083] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 110.678453][T12083] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 110.678612][T12083] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 110.691220][T12079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 110.691839][T12079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 110.691856][T12079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 110.691921][T12079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 110.691936][T12079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 110.691951][T12079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 110.696093][T12089] syzkaller1: entered promiscuous mode [ 110.696108][T12089] syzkaller1: entered allmulticast mode [ 110.707890][ T6147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.866754][ T9959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.907745][T12093] loop9: detected capacity change from 0 to 256 [ 110.944092][T12093] syz.9.3577: attempt to access beyond end of device [ 110.944092][T12093] loop9: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 111.016066][T12105] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 111.047036][T12109] loop0: detected capacity change from 0 to 256 [ 111.049198][T12109] FAT-fs (loop0): bogus number of FAT sectors [ 111.061252][T12109] FAT-fs (loop0): Can't find a valid FAT filesystem [ 111.389093][T12138] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3598'. [ 111.607932][T12155] loop5: detected capacity change from 0 to 256 [ 111.662380][T12155] FAT-fs (loop5): bogus number of FAT sectors [ 111.668512][T12155] FAT-fs (loop5): Can't find a valid FAT filesystem [ 111.788169][T12186] SELinux: syz.0.3620 (12186) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 111.873182][T12200] syzkaller1: entered promiscuous mode [ 111.878850][T12200] syzkaller1: entered allmulticast mode [ 111.963220][T12195] ================================================================== [ 111.971339][T12195] BUG: KCSAN: data-race in pcpu_balance_workfn / pcpu_nr_pages [ 111.978887][T12195] [ 111.981197][T12195] read-write to 0xffffffff88e84988 of 8 bytes by task 3391 on cpu 1: [ 111.989285][T12195] pcpu_balance_workfn+0x2eb/0xc00 [ 111.994390][T12195] process_scheduled_works+0x4ce/0x9d0 [ 111.999847][T12195] worker_thread+0x582/0x770 [ 112.004432][T12195] kthread+0x486/0x510 [ 112.008503][T12195] ret_from_fork+0xda/0x150 [ 112.013018][T12195] ret_from_fork_asm+0x1a/0x30 [ 112.017794][T12195] [ 112.020122][T12195] read to 0xffffffff88e84988 of 8 bytes by task 12195 on cpu 0: [ 112.027745][T12195] pcpu_nr_pages+0x16/0x40 [ 112.032164][T12195] meminfo_proc_show+0x94b/0xa30 [ 112.037101][T12195] traverse+0x144/0x3a0 [ 112.041264][T12195] seq_read_iter+0x853/0x940 [ 112.046109][T12195] proc_reg_read_iter+0xe3/0x180 [ 112.051049][T12195] __io_read+0x438/0xc20 [ 112.055297][T12195] io_read+0x1c/0x60 [ 112.059200][T12195] __io_issue_sqe+0xfe/0x2e0 [ 112.063797][T12195] io_issue_sqe+0x53/0x970 [ 112.068215][T12195] io_submit_sqes+0x667/0xfd0 [ 112.072891][T12195] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 112.078434][T12195] __x64_sys_io_uring_enter+0x78/0x90 [ 112.083815][T12195] x64_sys_call+0x28c8/0x2fb0 [ 112.088484][T12195] do_syscall_64+0xd2/0x200 [ 112.092980][T12195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.098960][T12195] [ 112.101274][T12195] value changed: 0x0000000000000295 -> 0x000000000000028e [ 112.108383][T12195] [ 112.110696][T12195] Reported by Kernel Concurrency Sanitizer on: [ 112.116847][T12195] CPU: 0 UID: 0 PID: 12195 Comm: syz.5.3624 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 112.129349][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.139406][T12195] ================================================================== [ 112.181622][T12212] loop6: detected capacity change from 0 to 512 [ 112.194078][T12212] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 112.202062][T12212] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 112.211382][T12212] System zones: 0-1, 15-15, 18-18, 34-34 [ 112.217250][T12212] EXT4-fs (loop6): orphan cleanup on readonly fs [ 112.224571][T12212] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 112.239148][T12212] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 112.247164][T12212] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.3633: bad orphan inode 16 [ 112.258539][T12212] ext4_test_bit(bit=15, block=18) = 1 [ 112.264056][T12212] is_bad_inode(inode)=0 [ 112.268252][T12212] NEXT_ORPHAN(inode)=0 [ 112.272332][T12212] max_ino=32 [ 112.275578][T12212] i_nlink=2 [ 112.279105][T12212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.300181][ T6171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.