last executing test programs: 21.292651951s ago: executing program 4 (id=246): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 21.189742857s ago: executing program 4 (id=249): r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) 20.271153121s ago: executing program 4 (id=269): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) pidfd_send_signal(r0, 0x19, &(0x7f0000000040)={0x2d, 0x200, 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b6e090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e804183f005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc075075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067efdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094bab77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000753f70b04182d27800", 0x1000}}, 0x1006) fspick(r3, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 20.177351617s ago: executing program 4 (id=272): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x3, 0x0, 0xd, 0x21, @dev={0xfe, 0x80, '\x00', 0x21}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x700, 0x8000, 0x14c03a66}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 20.176571487s ago: executing program 4 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0xbaa49000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x2040000, &(0x7f0000000000)) 20.1270606s ago: executing program 4 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0x4, 0x1, @dev}]}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x3c) (async) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x158) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="000202"], 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xbc29c373) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) (async) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 5.109188868s ago: executing program 32 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0x4, 0x1, @dev}]}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x3c) (async) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x158) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="000202"], 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xbc29c373) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) (async) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 3.193217581s ago: executing program 2 (id=498): syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1, 0x1000000, @remote, 0x8000005}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0xaa25, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xddd, 0x0, 0x0, 0xc, 0xb2f, 0x5}, &(0x7f0000000040)=0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xffffff0a, 0x8, &(0x7f0000000bc0)="0000000000000000b45accf3283873c96d91bb47d23f0adbad584f1965ed9001b4b4b92d2f210f5cd90f7cf23bf2c22e4163a8d90a3ef9aad065c5c880846d53c6a0c3c2a1e82eb6a114c1668e6ef97eab488d509ca5eb98fa86dbe658b3a6770fc39b9cd80ff98879a895bb91c2d2c572b37b94f58384b82c09b53e097ef6d761f8cda31695a28bef5333b599f858e3c33fd8858d5110add895160dc0dcb30849c737d3", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000004c0)={0xa, 0x4e22, 0x850f, @mcast2, 0x4}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000500)="c3bd73d8e5e8dd75b570b83ee6ddb40d8173454f67081daf6217c0df7d8cddc9a5373bab25d4c8f790934c80833ae06d3fc348b8dad1e27dd854022505502a2029b24d5f30e187039879d2e4d5aa0ae12c299760a6f9940e10c50b4359df1c86f414bcaeadccee80187b8dcfad807c72192db04b243cca960d41152de1c4d0c1a4d1342f8dcb926da9c5f518c82f0ab89b9f3aa56f776e8afe69375781de2bbc3a38ab1992df86f85ebc1b954a", 0xad}, {&(0x7f00000005c0)="65167f15728354acb159c666b27bd9c8aab9db235f6cac162397d94019cf", 0x1e}, {&(0x7f0000000600)="f25e4c83bcd7b685d85c84d946003b96f088617e4f3c71a44d1fa59b205b907929d2015ad8", 0x25}, {&(0x7f0000000640)="4f9fca4167bd42523c28337d12789d66b27c9d72f1", 0x15}, {&(0x7f0000000680)="3945653cb09e5babc85fe67194c59145662c2a2feccd00a6a9ee6f1d154ed3fa4cd26f6c367e03743fcd0bd97783fa636df78230ddfec15fc74f5060c8b02c8221d7e803695d9fd7d8d4460b24f646d87a3afe2ac6ddd412da47454a582d24d45796643d1a6b1e59338489dab170fac8d9cfcda09d829b4fa487850a1ab090da568dc6905f106e68d694c1eda321fecd3990808d052f0c4b26a9a5990b344999e772ade79635299204246fabfa456c87c9963269dd1750a17bf424d767a7775bcfffa7c40bd05d40", 0xc8}, {&(0x7f0000000780)="e205ca719ae434d8c6", 0x9}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="140000000000002900000000000028000000000000002900000039000000870202d100000000fc0100000000000000000000000000011400000000000000290000000b0000000000000000000000140000000000000029000000430000000600"/112], 0x70}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x882) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0xfd, {0x0, 0xfe}, {}, @raw32={[0x0, 0x1, 0xd4]}}], 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x1c) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8300, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x1) 3.081784119s ago: executing program 2 (id=500): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8422, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x2, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)) 2.869038861s ago: executing program 2 (id=503): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) (async) close_range(r0, 0xffffffffffffffff, 0x400000000000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000440), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000000)={0x1}, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0xee01, &(0x7f0000000000)={0x0, 0x5, 0x1, 0xfff, 0x401, 0x4, 0x8, 0x5, 0x401}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300048c1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r4}, 0x10) (async) fremovexattr(0xffffffffffffffff, 0x0) (async) clock_getres(0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) signalfd4(r6, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=r7, @ANYBLOB="01000000000002004c0012800b00010067726574617000003c000280060011"], 0x6c}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.514300911s ago: executing program 2 (id=508): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYRESHEX], 0x1, 0x2b7, &(0x7f0000000700)="$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") open(&(0x7f0000000040)='.\x00', 0x0, 0x51) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @multicast}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00008290438100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400, 0x300d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x100000000}, 0x108000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6f}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) r9 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x2) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2.005901272s ago: executing program 1 (id=513): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2, 0x0, 0x101}, 0x18) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r1, r3, 0x0, 0x8000fffffffe) 1.726098828s ago: executing program 5 (id=476): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x72040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x8, 0x400, 0x6, 0xd5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x1) unlink(0x0) 1.560497718s ago: executing program 1 (id=516): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000009c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@lazytime}, {@oldalloc}, {@nodiscard}]}, 0x64, 0x514, &(0x7f0000000a40)="$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") 1.545083349s ago: executing program 3 (id=517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 1.493063112s ago: executing program 5 (id=518): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x3, 0x0, 0xd, 0x21, @dev={0xfe, 0x80, '\x00', 0x21}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x700, 0x8000, 0x14c03a66}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1.471276884s ago: executing program 3 (id=519): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180200000000000000000000000000001801f82cc7d76100002020752500000000002020207b1af8ff00000000bfa100000c00000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000069000000950000000000000094deae1ac079c4a23154e23009f9c6fbbfbaf27962a46f68e1b7af2cdbf0b24cc512db95e54b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c810}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0e8f7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934165ded16e411da023b9fba7840a8e50b7f909cc9d51522dc4ac3075e975b35681f8d16915a3d248396f134273ff13a72f082839bd3021d4f0a5550671bb7d267d74dc8a800f3f7e8be6daea4379e76bc978e801fbd9d83544776580baa62d6156cc3aaec4b79a8ecc46317f48f62ff039722c87db0cd54d937de47619f530c29622e55176b5dfbbd084521a28e89488f57a6d3c19c2df39243d73425d52f0a42cc4a01e39f3c24ecd0e22d696d59320e4ee7d111d3abac17ebfc8aa6bb910c8d1d92efe391d372130bfccdec653e41694e86c79164f36b1ac9fc2812a7944f8b08f6780b102f71f4dc7232c83d20a4aa83db3e540a063f7f13360b6435b755f4af598016caf933a76bf2f2897b04a1efe5793b62c87532ba7fc740372ea2918a0dca9de22c336f6b4ab77b1047e00d693585263f938791e5bf228f297896d3a90f4e87c53e42589eba922b3770644a9a199bd95fca9d25416417924b7b594e88cb3e0b3d48014993d64636c82533a49c239a2305b4e9fe43f2ab23aa972ecfd7bd1eefb2d9f8117a8711e5f4c84704b761fdac68a8ae0e0e2d69bcd3ee3b3101a14459b9aac31b693130e809b72e9a8722029a6ee71faf89daa40d3a98476aeeb172b14d452a38475599d5f8243ff49bbc4fd4341ee82c77d0f7e3a93fb89d9c826697f86a7ed404d82fd358d919af26580bed09ce5f694c7fb2919b181ff08da24a7a95523b67b45098c233abdac18a7816bc2e56092f0f8fc300d44f0c181b7bc103b03fe978410816b1ec59a52f2d08a895028dc4559983701ce75a60ccdec67401e1208ca3f4032aeb7536f6cfb3f9fb1f2fa8e67adcfc8690e904599860f707b1be70a49f60e01e8fd3f46165cd186808e0536bde9356dea4ce245a9cc3293a2c7e42d96c953526d3639bd2a1c05a41bac3b5f6481bcfd77800ab9a", 0x301}], 0x1}, 0x44080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.402470307s ago: executing program 3 (id=520): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x2, &(0x7f0000000180), 0x45, 0x7c8, &(0x7f0000002100)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x5, 0x6, 0xa, 0x0, 0xa0}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={r1, 0x3, 0x6, [0x6, 0x401, 0x1, 0x1000, 0x200, 0xd]}, 0x14) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r2, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r2, 0x8, 0x0, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r6}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x98, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x66, 0x2a, [@preq={0x82, 0x4c, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x9, 0x0, 0x5, @device_a, 0x130, @value=@broadcast, 0x6, 0x800, 0x4, [{{0x1}, @device_b, 0x1}, {{0x1}, @broadcast, 0x9f}, {{0x1}, @broadcast, 0x7ff}, {{0x1}, @device_b, 0x4}]}}, @link_id={0x65, 0x12, {@random="0d1051f1b423", @device_b, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="09828ba09282"}, @NL80211_ATTR_SSID={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40811) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r8, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, @random="48bd00"}, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) 1.35225541s ago: executing program 5 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x18) pause() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, 0x0, &(0x7f0000000340)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES64], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) set_robust_list(&(0x7f0000000140)={0x0, 0x401}, 0x18) r11 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r11, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x6}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r12, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1.348651101s ago: executing program 0 (id=522): iopl(0x3) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa2}, 0x0, 0x5, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r5 = syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffd30) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x2, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0x4e22}, {@in6=@dev, 0x4d6, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010103}, {0x2}, {0x40010000000}, {0x0, 0x24, 0x2}, 0x0, 0x3505, 0xa, 0x0, 0x3, 0x20}, [@tfcpad={0x8, 0x16, 0x200}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4044000}, 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0xce3, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) process_vm_writev(r11, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000740)=""/135, 0x87}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000008c0)=""/184, 0xb8}], 0x7, &(0x7f0000000280)=[{&(0x7f0000001a40)=""/128, 0x80}, {&(0x7f0000001ac0)=""/174, 0xae}], 0x2, 0x0) io_uring_enter(r5, 0x4ac9, 0x0, 0x0, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.336095591s ago: executing program 1 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f00000002c0)="c5", 0x1, 0xfffffffffffffffb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file2/file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) unshare(0x8000000) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x48}}, 0x0) r6 = signalfd(r2, &(0x7f0000000000)={[0x8]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000faffffff0100008001010000555d0200", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000005000000040000000000000000f8ffffffffffffff000000"], 0x50) 971.552353ms ago: executing program 2 (id=524): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000380)={[{@errors_continue}], [{@subj_user={'subj_user', 0x3d, '\',,$@\xbf'}}]}, 0xff, 0x499, &(0x7f0000002540)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000880)="299deefbcb538fb304fb66991f9b18e21509706094d91de0d35770d38fa637c9f3f4ba873803b551509f1cee308d4415b040cd1c6a0864ec4097ca1f5aadaca6dffff656da17812a6dc43df342b1e334a7524cd534170e58fcfd1f5c2fb6aa713dff1241102ef6cdc4deec690781ae18f39644fee0baafa3611168b6cb609a4e924cab92a39d40660087c757d58622fb09b4a63dd40f733faffcc11fe86ad9655d7cc9ef8aa23229492c451d3fad85326e81bced17044879ef41b43d6ddc2343715de859850fc8d078a105103ea9", 0xce}], 0x1, 0x7c00, 0x8, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x0, 0x1, 0x1], 0x2, 0x6}, {0x3, [0x3, 0x1, 0x0, 0x2, 0x4, 0x6], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x3, 0x3ff, 0x6, 0x7716, 0x2c9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x800, 0xf, [0x2, 0x16, 0x2c, 0x1b, 0x18, 0x22, 0x2, 0x33, 0x1a, 0xd, 0x38, 0x3f, 0x38, 0x35, 0x36, 0x3d], 0x0, 0x7, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) (fail_nth: 3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) r1 = dup(0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0xa123) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xfffff000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a00), 0x0, 0x10020, 0x0) 970.811853ms ago: executing program 3 (id=525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0xffffffa4, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 970.152203ms ago: executing program 1 (id=526): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, 0x0, 0x48044) recvmsg$unix(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xf}, 0x80, r8}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000018) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r10 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000019c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001980)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 941.323695ms ago: executing program 0 (id=527): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mr_alloc\x00', r2, 0x0, 0x101}, 0x18) r3 = open(0x0, 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r1, r3, 0x0, 0x8000fffffffe) 725.792128ms ago: executing program 3 (id=528): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x72040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x8, 0x400, 0x6, 0xd5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x1) unlink(0x0) 649.649882ms ago: executing program 0 (id=529): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 561.135707ms ago: executing program 1 (id=530): connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2(0x0, 0x4800) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe501, 0x3, 0x230, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x198, 0x230, 0x230, 0x198, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xffffffff, 'ip6_vti0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x6e, 0x0, 0x24}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@multicast2, @rand_addr, 0x0, 0xffffffff, 'vxcan1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x1d}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x589b, 0x6, 0x0, 'syz1\x00', 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x4c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffa}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9aa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4801}, 0xc084) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9}}, {0x4}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x64}}, 0x20048890) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', r7, 0x2f, 0x3, 0x0, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x20, 0x7, 0x3ff, 0x3ff}}) 466.868502ms ago: executing program 2 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_kswapd_wake\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00 ', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfb}]}, 0x1c}}, 0x8001) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x420, 0x200, 0x200, 0x420, 0x420, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f00000006c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xff000000, 0xff000000, 0xffffffff, 0xff], [0xffffffff, 0xff], 'wg2\x00', 'pimreg0\x00', {}, {0xff}, 0x4, 0x2, 0x1, 0x84}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2, @ipv4=@multicast1, 0x14, 0x21, 0xb7c8}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0xfffffffe, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23}}}, {{@ipv6={@mcast1, @local, [0xff, 0xff, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], 'ipvlan1\x00', 'vlan1\x00', {0xff}, {0xff}, 0x33, 0x3, 0x4, 0x24}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xff000000, 0xff000000], [0xff000000, 0xff, 0xf761d69893a6cd8c, 0xffffff00], 'macsec0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x2, 0x20}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x6c, 0x78, 0xdd, 0x9, 0x1, 0x3, 0x2341}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x2, 0x6, 0x5}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7f}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x95}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)) personality(0x500006) 302.021872ms ago: executing program 0 (id=532): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000000040)='./file0\x00', 0x0) 263.389155ms ago: executing program 5 (id=533): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@grpquota}, {@nodelalloc}]}, 0x1, 0x776, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000002003e0000000000030000000000000040000000000000009801000000000000000000000000380001000000020000000300000000000000ffffffffff160080000002000000000007000000400000000400"], 0x78) 207.069658ms ago: executing program 0 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) rt_sigsuspend(0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0x32) read(r3, &(0x7f00000019c0)=""/4107, 0x100b) 118.751424ms ago: executing program 1 (id=535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x10, 0x400, 0x4) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c00000000000000000d00003c6eb227a93bf42559f199f6be420cdb2c97fbaab9c78bfed1460930d698c69121fcaa11edd130dc5c5765a3e1ebd0a8512eefc00e0d7a878dbf03ab30acc99058cb46216426b197228ffbc743d0890f"], 0x1c}, 0x1, 0x0, 0x0, 0x24000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1f, &(0x7f0000000580)=ANY=[@ANYBLOB="045709000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000181b0000", @ANYRES32=0x1, @ANYBLOB="000000000000000085100000f9ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085100000fbffffff18110000", @ANYRES32, @ANYBLOB="007483c50d340000000056cdf88d8423fc9c000600850000f98500000047d38118160d370d5296af5d765a6d6d6ca66e0cc3387aaa"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000800)=""/4096, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x1], &(0x7f0000000400)=[{0x0, 0x1, 0x6, 0xa}, {0x4, 0x5, 0x1, 0x7}, {0x4, 0x2, 0x5, 0x6}, {0x0, 0x2, 0xf, 0x7}, {0x3, 0x1, 0x0, 0x2}, {0x1, 0x5, 0x0, 0x8}, {0x3, 0x1, 0x7, 0x2}, {0x4, 0x5, 0xb, 0xb}, {0x2, 0x1, 0x6, 0x7}, {0x2, 0x2, 0x4}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='kmem_cache_free\x00', r6, 0x0, 0x8001}, 0x77) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010325bd700000000000010000000800070000000000080003"], 0x30}}, 0x0) 70.554097ms ago: executing program 3 (id=536): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x2, &(0x7f0000000180), 0x45, 0x7c8, &(0x7f0000002100)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUwixxWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BLcs3fEGycRDZxyCEozP6QVtKurLWlXTv+fGCs93beznvfebNvnjWj2QCeWOPpP5mIYxHxShIxWn89iYj+aiobMV0rd299LZ8uSWxs/O+bpFrm7vpaPprekzpSz/w2Ij55MeJEZne95ZXV+ZlisbBUz09UFi5PlFdWT15amJkrzBUWT09OTZ0685czpx8qvOHmzHdfrB699eq///ju9A8v/Oa9lz9NYjqO1tc1x3FQxmO8vk/60124zb8OurKe+eC5fRRqOgKyh9kYOpR2TF+9V47FaPTt1T/D3WwZAHBYno+IjXb62q4BAB5rSe38/49etwMA6JbG7wHurq/lG0tvfyPRXbf/GRFDQ/Vc7fpmLZ2tX7Mbql4HHbmbbLsykkTE2AHUPx4Rb374zNvpEod0HRKglWvXI+LC2Pju8T/Zcc/C0x1v+0+tX55rzozvWGn8g+75KJ3//LXV/C+zOf+JFvOfwRaf3Qdx/89/5uYBVNNWOv/7e9O9bfea4q8b66vnflGd8/UnFy8VC+nY9suIOB79g2l+co86jt/58U67dc3zv29fe/attP7051aJzM3s4Pb3zM5UZh4m5ma3r0f8Ltsq/nT8H6z2f9Jm/nuunh64Tx3/+dtLb7Rbl8afxttYdsd/uDZuRPyhZf8nm2WSPe9PnKgeDhONg6KF96djpF3949mt/k+XtP7G/wW6Ie3/kb3jH0ua79cs73vTm3eLfX5j9ON2hZqP/9bxtz7+B5L/V9ONY+/qTKWyNBkxkPx39+untt7byDfKp/Ef/33rz39j/Gtx/D+Vbv/CPndE9tbX7zx4/IcrjX+23v9Hvqzfu1vVrv87TsTQvfm+dvXvr/+ntr1nP+Pffhv4QDsNAAAAAAAAAAAAAAAAAAAAAAAAADqUiYijkWRym+lMJperPQfw1zGSKZbKlRMXS8uLs1H9ruyx6M80HnU52vQ81Mn68/Ab+VM78n+OiF9FxOuDw9V8Ll8qzvY6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Lm+/9TXw3uKNzXixYCAIdiqPnEnulhQwCAbkmy2V43AQDotqGOSg8fWjsAgO7p7PwPAPwcOP8DwJPnPuf/nX8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ06d/Zsumx8v76WT/OzV1aW50tXTs4WyvO5heV8Ll9aupybK5XmioVcvrTQdkPXaj+KpdLlqVhcvjpRKZQrE+WV1fMLpeXFyvlLCzNzhfOF/q5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7V15ZnZ8pFgtLEj1JzH9W64dHpT0SnSXiWq3/HpX2HFwiBrZGieHeDE4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj4GfAgAA//8MAxqr") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x5, 0x6, 0xa, 0x0, 0xa0}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={r1, 0x3, 0x6, [0x6, 0x401, 0x1, 0x1000, 0x200, 0xd]}, 0x14) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r2, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r2, 0x8, 0x0, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r6}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x98, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x66, 0x2a, [@preq={0x82, 0x4c, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x9, 0x0, 0x5, @device_a, 0x130, @value=@broadcast, 0x6, 0x800, 0x4, [{{0x1}, @device_b, 0x1}, {{0x1}, @broadcast, 0x9f}, {{0x1}, @broadcast, 0x7ff}, {{0x1}, @device_b, 0x4}]}}, @link_id={0x65, 0x12, {@random="0d1051f1b423", @device_b, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="09828ba09282"}, @NL80211_ATTR_SSID={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40811) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r8, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, @random="48bd00"}, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) 48.999737ms ago: executing program 5 (id=537): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1000, 0x143) r3 = open$dir(&(0x7f0000000180)='./bus\x00', 0x200080, 0x18) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)=0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r6, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x200000b4) socket$inet(0x2, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r7}, 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) linkat(r2, &(0x7f0000000140)='./bus\x00', r3, &(0x7f00000001c0)='./bus\x00', 0x1000) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) 0s ago: executing program 0 (id=538): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x2, &(0x7f0000000180), 0x45, 0x7c8, &(0x7f0000002100)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x5, 0x6, 0xa, 0x0, 0xa0}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={r1, 0x3, 0x6, [0x6, 0x401, 0x1, 0x1000, 0x200, 0xd]}, 0x14) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r2, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r2, 0x8, 0x0, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r6}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x98, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x66, 0x2a, [@preq={0x82, 0x4c, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x9, 0x0, 0x5, @device_a, 0x130, @value=@broadcast, 0x6, 0x800, 0x4, [{{0x1}, @device_b, 0x1}, {{0x1}, @broadcast, 0x9f}, {{0x1}, @broadcast, 0x7ff}, {{0x1}, @device_b, 0x4}]}}, @link_id={0x65, 0x12, {@random="0d1051f1b423", @device_b, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="09828ba09282"}, @NL80211_ATTR_SSID={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40811) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r8, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, @random="48bd00"}, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) kernel console output (not intermixed with test programs): [ 34.131047][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.143455][ T3453] loop3: detected capacity change from 0 to 128 [ 34.151032][ T3296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.159817][ T3296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.168826][ T3296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.177589][ T3296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.194548][ T3453] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.209933][ T3453] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.250417][ T29] audit: type=1400 audit(1739952973.724:139): avc: denied { mount } for pid=3452 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.324927][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.383909][ T3468] loop0: detected capacity change from 0 to 2048 [ 34.403104][ T3472] loop1: detected capacity change from 0 to 512 [ 34.430154][ T3472] EXT4-fs: Ignoring removed bh option [ 34.442110][ T3472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.455370][ T3472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.466894][ T3471] xt_CT: No such helper "syz1" [ 34.478339][ T3468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.492975][ T3472] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.510723][ T3472] EXT4-fs (loop1): 1 truncate cleaned up [ 34.517656][ T3472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.562311][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.616263][ T3483] loop1: detected capacity change from 0 to 128 [ 34.642782][ T3474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.652821][ T3474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.662853][ T3483] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.665683][ T3486] loop2: detected capacity change from 0 to 512 [ 34.685991][ T3486] EXT4-fs: Ignoring removed bh option [ 34.696669][ T3483] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.732489][ T3486] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.743558][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.763340][ T3486] EXT4-fs (loop2): 1 truncate cleaned up [ 34.778643][ T3486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.795172][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.827041][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.976345][ T3511] loop0: detected capacity change from 0 to 2048 [ 34.997163][ T3511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.134800][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.171232][ T3540] loop0: detected capacity change from 0 to 512 [ 35.179141][ T3540] EXT4-fs: Ignoring removed bh option [ 35.189356][ T3540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.210845][ T3540] EXT4-fs (loop0): 1 truncate cleaned up [ 35.217082][ T3540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.267389][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.306301][ T3557] loop2: detected capacity change from 0 to 512 [ 35.320111][ T3558] loop0: detected capacity change from 0 to 2048 [ 35.327340][ T3557] EXT4-fs: Ignoring removed bh option [ 35.334314][ T3552] loop3: detected capacity change from 0 to 2048 [ 35.342122][ T3557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.357981][ T3557] EXT4-fs (loop2): 1 truncate cleaned up [ 35.367723][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.383523][ T3558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.399422][ T3552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.427857][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.488396][ T3575] loop2: detected capacity change from 0 to 512 [ 35.520407][ T3575] EXT4-fs: Ignoring removed bh option [ 35.531499][ T3575] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.553370][ T3575] EXT4-fs (loop2): 1 truncate cleaned up [ 35.559858][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.607949][ T3585] loop1: detected capacity change from 0 to 128 [ 35.624529][ T3585] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.643444][ T3585] sit0: entered promiscuous mode [ 35.649052][ T3585] sit0: entered allmulticast mode [ 35.669190][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.678488][ C1] hrtimer: interrupt took 67545 ns [ 35.688962][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.719804][ T3585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 35.729046][ T3585] bridge_slave_1: left allmulticast mode [ 35.735383][ T3585] bridge_slave_1: left promiscuous mode [ 35.741327][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.758257][ T3585] bridge_slave_0: left allmulticast mode [ 35.764188][ T3585] bridge_slave_0: left promiscuous mode [ 35.770115][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.797499][ T3589] loop0: detected capacity change from 0 to 512 [ 35.813268][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.829751][ T3589] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.841115][ T3589] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 35.861991][ T3589] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 35.868831][ T3589] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 35.887653][ T3589] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 35.902230][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.903162][ T3592] loop2: detected capacity change from 0 to 512 [ 35.926510][ T3592] ======================================================= [ 35.926510][ T3592] WARNING: The mand mount option has been deprecated and [ 35.926510][ T3592] and is ignored by this kernel. Remove the mand [ 35.926510][ T3592] option from the mount to silence this warning. [ 35.926510][ T3592] ======================================================= [ 35.961925][ T3592] EXT4-fs: Ignoring removed oldalloc option [ 35.968221][ T3589] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.979995][ T3589] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 35.990785][ T3592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.001668][ T3592] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.009801][ T3592] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.31: Failed to acquire dquot type 1 [ 36.039673][ T3592] EXT4-fs (loop2): 1 truncate cleaned up [ 36.048258][ T3592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.067160][ T3611] loop3: detected capacity change from 0 to 512 [ 36.090637][ T3611] EXT4-fs: Ignoring removed bh option [ 36.099269][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.111325][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.121130][ T3611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.152081][ T3611] EXT4-fs (loop3): 1 truncate cleaned up [ 36.169613][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.192838][ T3621] loop0: detected capacity change from 0 to 128 [ 36.223423][ T3621] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.240755][ T3621] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.287432][ T3623] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 36.294386][ T1049] IPVS: starting estimator thread 0... [ 36.304299][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.314291][ T3629] loop2: detected capacity change from 0 to 512 [ 36.333989][ T3629] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.36: casefold flag without casefold feature [ 36.354303][ T3629] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.36: couldn't read orphan inode 15 (err -117) [ 36.370844][ T3639] sd 0:0:1:0: device reset [ 36.376253][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.403458][ T3629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.416111][ T3631] IPVS: using max 2304 ests per chain, 115200 per kthread [ 36.458031][ T3623] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.470647][ T3623] xt_hashlimit: max too large, truncated to 1048576 [ 36.481877][ T3623] Cannot find set identified by id 0 to match [ 36.520951][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.587676][ T3650] loop1: detected capacity change from 0 to 512 [ 36.594437][ T3650] EXT4-fs: Ignoring removed bh option [ 36.611148][ T3650] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.624412][ T3650] EXT4-fs (loop1): 1 truncate cleaned up [ 36.631129][ T3650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.699073][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.131417][ T3689] loop1: detected capacity change from 0 to 512 [ 37.139291][ T3689] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.42: casefold flag without casefold feature [ 37.152269][ T3689] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.42: couldn't read orphan inode 15 (err -117) [ 37.165211][ T3689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.272338][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.327316][ T3693] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 37.334967][ T3693] netlink: 'syz.3.43': attribute type 2 has an invalid length. [ 37.344128][ T3693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 37.424870][ T3700] loop1: detected capacity change from 0 to 512 [ 37.432783][ T3700] EXT4-fs: Ignoring removed oldalloc option [ 37.479814][ T3700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.493241][ T3705] SELinux: ebitmap: map size 695 does not match my size 64 (high bit was 524308) [ 37.505503][ T3705] SELinux: failed to load policy [ 37.509527][ T3708] loop0: detected capacity change from 0 to 2048 [ 37.523080][ T3700] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.540908][ T3708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.543776][ T3700] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.45: Failed to acquire dquot type 1 [ 37.587544][ T3700] EXT4-fs (loop1): 1 truncate cleaned up [ 37.594429][ T3700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.636596][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.714405][ T3724] loop1: detected capacity change from 0 to 2048 [ 37.756701][ T3724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.808425][ T3724] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.51: bg 0: block 234: padding at end of block bitmap is not set [ 37.824392][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.871309][ T3727] netlink: 156 bytes leftover after parsing attributes in process `syz.2.48'. [ 37.881591][ T3724] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 37.894374][ T3724] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.894374][ T3724] [ 37.895655][ T3738] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.904304][ T3724] EXT4-fs (loop1): Total free blocks count 0 [ 37.916319][ T3738] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.916319][ T3738] [ 37.922353][ T3724] EXT4-fs (loop1): Free/Dirty block details [ 37.932028][ T3738] EXT4-fs (loop1): Total free blocks count 0 [ 37.937927][ T3724] EXT4-fs (loop1): free_blocks=0 [ 37.943896][ T3738] EXT4-fs (loop1): Free/Dirty block details [ 37.982136][ T3743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 37.985202][ T3742] loop0: detected capacity change from 0 to 512 [ 38.019099][ T3742] EXT4-fs: Ignoring removed oldalloc option [ 38.050047][ T3724] syz.1.51 (3724) used greatest stack depth: 10160 bytes left [ 38.067636][ T3742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.077807][ T3742] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.089166][ T3742] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.52: Failed to acquire dquot type 1 [ 38.103883][ T3742] EXT4-fs (loop0): 1 truncate cleaned up [ 38.148173][ T3742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.264266][ T3761] loop4: detected capacity change from 0 to 512 [ 38.295721][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.305893][ T3761] EXT4-fs: Ignoring removed bh option [ 38.314890][ T3761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.328813][ T3766] loop3: detected capacity change from 0 to 2048 [ 38.346062][ T3761] EXT4-fs (loop4): 1 truncate cleaned up [ 38.362337][ T3761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.410657][ T3766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.554267][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.691737][ T3774] netlink: 'syz.0.58': attribute type 4 has an invalid length. [ 38.837208][ T3810] xt_CT: No such helper "syz1" [ 38.865254][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.902017][ T3815] loop4: detected capacity change from 0 to 512 [ 38.924912][ T3815] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.942450][ T3815] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 38.970260][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 38.970277][ T29] audit: type=1400 audit(1739953234.481:274): avc: denied { map } for pid=3812 comm="syz.1.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.000554][ T29] audit: type=1400 audit(1739953234.481:275): avc: denied { read write } for pid=3812 comm="syz.1.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.019170][ T3815] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 39.035457][ T3815] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.097043][ T3815] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 39.124716][ T3815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.153737][ T29] audit: type=1400 audit(1739953234.571:276): avc: denied { create } for pid=3812 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.173491][ T29] audit: type=1400 audit(1739953234.571:277): avc: denied { setopt } for pid=3812 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.192832][ T29] audit: type=1400 audit(1739953234.571:278): avc: denied { remount } for pid=3812 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.195866][ T3824] loop0: detected capacity change from 0 to 512 [ 39.222842][ T3815] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 39.248315][ T3815] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 39.277285][ T29] audit: type=1400 audit(1739953234.661:279): avc: denied { ioctl } for pid=3829 comm="syz.3.69" path="socket:[4718]" dev="sockfs" ino=4718 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.309539][ T3824] EXT4-fs: Ignoring removed oldalloc option [ 39.349957][ T29] audit: type=1400 audit(1739953234.861:280): avc: denied { create } for pid=3842 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 39.376000][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.381164][ T29] audit: type=1400 audit(1739953234.891:281): avc: denied { write } for pid=3842 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 39.405444][ T29] audit: type=1400 audit(1739953234.891:282): avc: denied { nlmsg_read } for pid=3842 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 39.435469][ T3824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.460272][ T3845] xt_CT: No such helper "syz1" [ 39.466031][ T3824] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.482982][ T3824] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 39.492487][ T3824] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.66: Failed to acquire dquot type 1 [ 39.516036][ T3824] EXT4-fs (loop0): 1 truncate cleaned up [ 39.525942][ T3824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.534231][ T3852] loop1: detected capacity change from 0 to 512 [ 39.576011][ T3852] EXT4-fs: Ignoring removed oldalloc option [ 39.582092][ T3850] loop4: detected capacity change from 0 to 2048 [ 39.643717][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.656099][ T3850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.668246][ T3852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.692454][ T3850] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.73: bg 0: block 234: padding at end of block bitmap is not set [ 39.707090][ T3860] loop3: detected capacity change from 0 to 128 [ 39.716647][ T3852] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.723702][ T3852] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.75: Failed to acquire dquot type 1 [ 39.738764][ T3850] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 117 [ 39.740574][ T3860] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.751480][ T3850] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.751480][ T3850] [ 39.788707][ T3864] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.800914][ T3864] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.800914][ T3864] [ 39.807654][ T3860] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.810615][ T3864] EXT4-fs (loop4): Total free blocks count 0 [ 39.826829][ T3864] EXT4-fs (loop4): Free/Dirty block details [ 39.832730][ T3864] EXT4-fs (loop4): free_blocks=0 [ 39.837726][ T3864] EXT4-fs (loop4): dirty_blocks=32 [ 39.839383][ T3850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 39.842847][ T3864] EXT4-fs (loop4): Block reservation details [ 39.859839][ T3852] EXT4-fs (loop1): 1 truncate cleaned up [ 39.868798][ T3852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.951479][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.973073][ T3850] syz.4.73 (3850) used greatest stack depth: 9984 bytes left [ 39.980438][ T3717] loop2: detected capacity change from 0 to 256 [ 39.985641][ T3717] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ1844674407370955161518446744073709551615' [ 40.111456][ T3875] syz.3.78 uses obsolete (PF_INET,SOCK_PACKET) [ 40.177116][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.191815][ T3879] loop4: detected capacity change from 0 to 2048 [ 40.237618][ T3879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.371909][ T3882] loop1: detected capacity change from 0 to 2048 [ 40.424677][ T3889] loop3: detected capacity change from 0 to 512 [ 40.437519][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.486809][ T3889] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.521824][ T3889] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 40.572469][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.599755][ T3889] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 40.638605][ T3889] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 40.657615][ T3889] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 40.683184][ T3889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.759363][ T3901] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 40.786545][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.800255][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.836350][ T3904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 40.864950][ T3904] veth1_macvtap: left promiscuous mode [ 40.887419][ T3908] xt_CT: No such helper "syz1" [ 40.941214][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 40.994113][ T3914] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.045115][ T3933] loop3: detected capacity change from 0 to 512 [ 41.057503][ T3933] EXT4-fs: Ignoring removed bh option [ 41.082411][ T3933] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.160785][ T3933] EXT4-fs (loop3): 1 truncate cleaned up [ 41.176896][ T3933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.195072][ T3947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.98'. [ 41.213323][ T3947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'. [ 41.290401][ T3947] bridge0: port 3(batadv1) entered blocking state [ 41.296918][ T3947] bridge0: port 3(batadv1) entered disabled state [ 41.308285][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.322290][ T3947] batadv1: entered allmulticast mode [ 41.335896][ T3947] batadv1: entered promiscuous mode [ 41.388085][ T3947] process 'syz.0.98' launched './file0' with NULL argv: empty string added [ 41.394159][ T3967] loop3: detected capacity change from 0 to 2048 [ 41.417829][ T3967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.566993][ T3975] xt_CT: No such helper "syz1" [ 41.582408][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.739104][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 41.748429][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 41.760676][ T3997] loop2: detected capacity change from 0 to 128 [ 41.791705][ T3997] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.838371][ T3997] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.962871][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.980752][ T4032] loop4: detected capacity change from 0 to 2048 [ 42.030741][ T4032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.049696][ T4036] loop3: detected capacity change from 0 to 512 [ 42.077364][ T4036] EXT4-fs: Ignoring removed oldalloc option [ 42.091235][ T4036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.103925][ T4036] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.113386][ T4036] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.117: Failed to acquire dquot type 1 [ 42.134881][ T4036] EXT4-fs (loop3): 1 truncate cleaned up [ 42.142757][ T4036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.189075][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.232038][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.232136][ T4062] loop1: detected capacity change from 0 to 2048 [ 42.257102][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.340090][ T4076] netlink: 'syz.3.123': attribute type 13 has an invalid length. [ 42.418880][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.434870][ T4076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.476460][ T4093] loop1: detected capacity change from 0 to 128 [ 42.497908][ T4093] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.513389][ T4093] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.573497][ T4103] loop4: detected capacity change from 0 to 512 [ 42.581985][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.586409][ T4103] EXT4-fs: Ignoring removed bh option [ 42.603924][ T4103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.623073][ T4103] EXT4-fs (loop4): 1 truncate cleaned up [ 42.629383][ T4103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.727374][ T4124] loop3: detected capacity change from 0 to 512 [ 42.733847][ T4125] loop1: detected capacity change from 0 to 512 [ 42.735069][ T4124] EXT4-fs: Ignoring removed oldalloc option [ 42.740839][ T4125] EXT4-fs: Ignoring removed bh option [ 42.753049][ T4125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.779052][ T4124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.786930][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.793105][ T4125] EXT4-fs (loop1): 1 truncate cleaned up [ 42.802480][ T4124] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.808895][ T4125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.822504][ T4124] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.132: Failed to acquire dquot type 1 [ 42.842477][ T4124] EXT4-fs (loop3): 1 truncate cleaned up [ 42.871321][ T4124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.894498][ T4139] loop0: detected capacity change from 0 to 2048 [ 42.904315][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.944170][ T4142] loop2: detected capacity change from 0 to 2048 [ 42.953767][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.966199][ T4139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.990149][ T4142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.209650][ T4175] loop1: detected capacity change from 0 to 512 [ 43.254496][ T4181] loop3: detected capacity change from 0 to 512 [ 43.266329][ T4175] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.142: bg 0: block 248: padding at end of block bitmap is not set [ 43.280935][ T4181] EXT4-fs: Ignoring removed oldalloc option [ 43.294892][ T4181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.304458][ T4175] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.142: Failed to acquire dquot type 1 [ 43.305580][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.324868][ T4181] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.339941][ T4161] loop4: detected capacity change from 0 to 2048 [ 43.366258][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.391941][ T4181] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.143: Failed to acquire dquot type 1 [ 43.401034][ T4175] EXT4-fs (loop1): 1 truncate cleaned up [ 43.409258][ T4175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.411600][ T4161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.429580][ T4175] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.460266][ T4181] EXT4-fs (loop3): 1 truncate cleaned up [ 43.483424][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.498414][ T4175] syz.1.142 (4175) used greatest stack depth: 9272 bytes left [ 43.523194][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.554669][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.555218][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.644169][ T4221] loop4: detected capacity change from 0 to 512 [ 43.668383][ T4221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.670408][ T4226] PM: Enabling pm_trace changes system date and time during resume. [ 43.670408][ T4226] PM: Correct system time has to be restored manually after resume. [ 43.678214][ T4221] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 43.708597][ T4221] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 43.716440][ T4226] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.731536][ T4221] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 43.755651][ T4221] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 43.768627][ T4221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.785532][ T4221] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 43.808393][ T4221] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 43.834244][ T4237] loop0: detected capacity change from 0 to 1764 [ 43.872041][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.909243][ T4248] loop0: detected capacity change from 0 to 512 [ 43.926753][ T4251] loop1: detected capacity change from 0 to 2048 [ 43.939243][ T4248] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 43.949415][ T4248] EXT4-fs (loop0): invalid journal inode [ 43.956528][ T4248] EXT4-fs (loop0): can't get journal size [ 43.988104][ T4251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.001517][ T4248] EXT4-fs (loop0): 1 truncate cleaned up [ 44.007542][ T4260] netlink: 'syz.4.157': attribute type 3 has an invalid length. [ 44.007870][ T4248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.086523][ T4263] loop4: detected capacity change from 0 to 128 [ 44.104975][ T4263] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 44.124729][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 44.124745][ T29] audit: type=1400 audit(1739953239.631:328): avc: denied { mount } for pid=4258 comm="syz.4.157" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.166270][ T4273] loop1: detected capacity change from 0 to 128 [ 44.180381][ T4273] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.186239][ T4263] smc: net device bond0 applied user defined pnetid SYZ0 [ 44.203383][ T4273] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.232660][ T4260] FAT-fs (loop4): FAT read failed (blocknr 128) [ 44.250762][ T4273] Zero length message leads to an empty skb [ 44.300264][ T4288] loop1: detected capacity change from 0 to 512 [ 44.303981][ T4260] smc: net device bond0 erased user defined pnetid SYZ0 [ 44.315944][ T29] audit: type=1400 audit(1739953239.831:329): avc: denied { mount } for pid=4289 comm="syz.2.165" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.348025][ T29] audit: type=1400 audit(1739953239.831:330): avc: denied { mounton } for pid=4289 comm="syz.2.165" path="/20/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 44.373231][ T29] audit: type=1400 audit(1739953239.891:331): avc: denied { getopt } for pid=4292 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.409270][ T4299] loop4: detected capacity change from 0 to 512 [ 44.410811][ T29] audit: type=1400 audit(1739953239.921:332): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.438549][ T4288] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.449716][ T4299] EXT4-fs: Ignoring removed bh option [ 44.459837][ T4299] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.461174][ T4288] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.164: corrupted inode contents [ 44.487633][ T4288] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.164: mark_inode_dirty error [ 44.500408][ T4303] xt_CT: No such helper "syz1" [ 44.506555][ T4299] EXT4-fs (loop4): 1 truncate cleaned up [ 44.557266][ T4288] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.164: corrupted inode contents [ 44.573442][ T4288] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.164: mark_inode_dirty error [ 44.595144][ T4307] loop0: detected capacity change from 0 to 2048 [ 44.617408][ T29] audit: type=1400 audit(1739953240.131:333): avc: denied { create } for pid=4287 comm="syz.1.164" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 44.747509][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 44.803159][ T29] audit: type=1326 audit(1739953240.311:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9383cde9 code=0x7ffc0000 [ 44.829494][ T29] audit: type=1326 audit(1739953240.311:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9383cde9 code=0x7ffc0000 [ 44.852859][ T29] audit: type=1326 audit(1739953240.311:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fab9383cde9 code=0x7ffc0000 [ 44.875965][ T29] audit: type=1326 audit(1739953240.311:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4339 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9383cde9 code=0x7ffc0000 [ 44.988466][ T4358] sctp: [Deprecated]: syz.4.181 (pid 4358) Use of int in max_burst socket option. [ 44.988466][ T4358] Use struct sctp_assoc_value instead [ 45.086260][ T4373] netlink: 35347 bytes leftover after parsing attributes in process `syz.0.185'. [ 45.212576][ T4389] loop0: detected capacity change from 0 to 2048 [ 45.402559][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 45.620578][ T4407] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 45.847003][ T4426] FAULT_INJECTION: forcing a failure. [ 45.847003][ T4426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.860282][ T4426] CPU: 1 UID: 0 PID: 4426 Comm: syz.1.201 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 45.860312][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 45.860327][ T4426] Call Trace: [ 45.860334][ T4426] [ 45.860341][ T4426] dump_stack_lvl+0xf2/0x150 [ 45.860374][ T4426] dump_stack+0x15/0x1a [ 45.860412][ T4426] should_fail_ex+0x24a/0x260 [ 45.860445][ T4426] should_fail+0xb/0x10 [ 45.860550][ T4426] should_fail_usercopy+0x1a/0x20 [ 45.860628][ T4426] _copy_from_user+0x1c/0xa0 [ 45.860666][ T4426] ucma_write+0xd4/0x240 [ 45.860698][ T4426] ? __pfx_ucma_write+0x10/0x10 [ 45.860754][ T4426] vfs_write+0x27d/0x920 [ 45.860780][ T4426] ? kmem_cache_free+0xdc/0x2d0 [ 45.860839][ T4426] ? putname+0xcf/0xf0 [ 45.860880][ T4426] ksys_write+0xe8/0x1b0 [ 45.860909][ T4426] __x64_sys_write+0x42/0x50 [ 45.860939][ T4426] x64_sys_call+0x287e/0x2dc0 [ 45.861041][ T4426] do_syscall_64+0xc9/0x1c0 [ 45.861077][ T4426] ? clear_bhb_loop+0x55/0xb0 [ 45.861104][ T4426] ? clear_bhb_loop+0x55/0xb0 [ 45.861164][ T4426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.861262][ T4426] RIP: 0033:0x7f17ba14cde9 [ 45.861281][ T4426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.861298][ T4426] RSP: 002b:00007f17b87b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.861333][ T4426] RAX: ffffffffffffffda RBX: 00007f17ba365fa0 RCX: 00007f17ba14cde9 [ 45.861348][ T4426] RDX: 0000000000000010 RSI: 0000400000000380 RDI: 0000000000000003 [ 45.861359][ T4426] RBP: 00007f17b87b1090 R08: 0000000000000000 R09: 0000000000000000 [ 45.861373][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.861387][ T4426] R13: 0000000000000000 R14: 00007f17ba365fa0 R15: 00007ffcd6430648 [ 45.861404][ T4426] [ 46.263448][ T4436] xt_CT: No such helper "syz1" [ 46.399482][ T4454] loop0: detected capacity change from 0 to 2048 [ 46.436158][ T4442] Restarting kernel threads ... done. [ 46.447604][ T4454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.209: bg 0: block 234: padding at end of block bitmap is not set [ 46.479622][ T4454] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 46.492307][ T4454] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.492307][ T4454] [ 46.502037][ T4454] EXT4-fs (loop0): Total free blocks count 0 [ 46.508064][ T4454] EXT4-fs (loop0): Free/Dirty block details [ 46.513966][ T4454] EXT4-fs (loop0): free_blocks=0 [ 46.518938][ T4454] EXT4-fs (loop0): dirty_blocks=32 [ 46.524064][ T4454] EXT4-fs (loop0): Block reservation details [ 46.530109][ T4454] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 46.549087][ T4460] loop4: detected capacity change from 0 to 2048 [ 46.574535][ T4459] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 46.586854][ T4459] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.586854][ T4459] [ 46.606958][ T4460] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.210: bg 0: block 234: padding at end of block bitmap is not set [ 46.623938][ T4460] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 117 [ 46.636688][ T4460] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.636688][ T4460] [ 46.650724][ T4460] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 46.662968][ T4460] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.662968][ T4460] [ 46.672662][ T4460] EXT4-fs (loop4): Total free blocks count 0 [ 46.678806][ T4460] EXT4-fs (loop4): Free/Dirty block details [ 46.684730][ T4460] EXT4-fs (loop4): free_blocks=0 [ 46.689767][ T4460] EXT4-fs (loop4): dirty_blocks=32 [ 46.694895][ T4460] EXT4-fs (loop4): Block reservation details [ 46.700908][ T4460] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 46.721221][ T4467] loop3: detected capacity change from 0 to 128 [ 46.734691][ T4467] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.747874][ T4467] sit0: entered allmulticast mode [ 46.761931][ T4467] sit0: entered promiscuous mode [ 46.832321][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 46.957028][ T4477] loop1: detected capacity change from 0 to 512 [ 46.974446][ T4477] EXT4-fs: Ignoring removed bh option [ 47.004872][ T4477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.031196][ T4477] EXT4-fs (loop1): 1 truncate cleaned up [ 47.075410][ T4472] bridge_slave_1: left allmulticast mode [ 47.081678][ T4472] bridge_slave_1: left promiscuous mode [ 47.088762][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.104392][ T4472] bridge_slave_0: left allmulticast mode [ 47.111782][ T4472] bridge_slave_0: left promiscuous mode [ 47.118533][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.177323][ T4432] syz.2.204 (4432) used greatest stack depth: 6376 bytes left [ 47.247049][ T4486] loop1: detected capacity change from 0 to 512 [ 47.256241][ T4486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.274953][ T4486] EXT4-fs (loop1): 1 truncate cleaned up [ 47.293437][ T4482] lo speed is unknown, defaulting to 1000 [ 47.299825][ T4482] lo speed is unknown, defaulting to 1000 [ 47.307229][ T4482] lo speed is unknown, defaulting to 1000 [ 47.316691][ T4482] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.324706][ T4482] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 47.375675][ T4482] lo speed is unknown, defaulting to 1000 [ 47.394532][ T4482] lo speed is unknown, defaulting to 1000 [ 47.409623][ T4482] lo speed is unknown, defaulting to 1000 [ 47.415944][ T4482] lo speed is unknown, defaulting to 1000 [ 47.422227][ T4482] lo speed is unknown, defaulting to 1000 [ 47.520392][ T4495] xt_CT: No such helper "syz1" [ 47.561785][ T4498] bridge0: entered promiscuous mode [ 47.567417][ T4498] macvlan2: entered promiscuous mode [ 47.573833][ T4498] bridge0: port 4(macvlan2) entered blocking state [ 47.580438][ T4498] bridge0: port 4(macvlan2) entered disabled state [ 47.587338][ T4498] macvlan2: entered allmulticast mode [ 47.592797][ T4498] bridge0: entered allmulticast mode [ 47.599588][ T4498] macvlan2: left allmulticast mode [ 47.604739][ T4498] bridge0: left allmulticast mode [ 47.610852][ T4498] bridge0: left promiscuous mode [ 47.777458][ T4501] xt_CT: No such helper "syz1" [ 47.892590][ T4506] loop0: detected capacity change from 0 to 8192 [ 47.899588][ T4506] vfat: Unknown parameter '0x0000000000000000ÿÿ' [ 47.940825][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.950699][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.044474][ T4486] syz.1.216 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 48.058661][ T4486] CPU: 1 UID: 0 PID: 4486 Comm: syz.1.216 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 48.058722][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 48.058738][ T4486] Call Trace: [ 48.058746][ T4486] [ 48.058755][ T4486] dump_stack_lvl+0xf2/0x150 [ 48.058784][ T4486] dump_stack+0x15/0x1a [ 48.058805][ T4486] dump_header+0x83/0x2d0 [ 48.058851][ T4486] oom_kill_process+0x341/0x4c0 [ 48.058937][ T4486] out_of_memory+0x9af/0xbe0 [ 48.058979][ T4486] ? css_next_descendant_pre+0x11c/0x140 [ 48.059010][ T4486] mem_cgroup_out_of_memory+0x13e/0x190 [ 48.059050][ T4486] try_charge_memcg+0x508/0x7f0 [ 48.059207][ T4486] obj_cgroup_charge_pages+0xbd/0x1a0 [ 48.059231][ T4486] __memcg_kmem_charge_page+0x9d/0x170 [ 48.059261][ T4486] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 48.059295][ T4486] alloc_pages_mpol+0xb4/0x260 [ 48.059360][ T4486] alloc_pages_noprof+0xe8/0x130 [ 48.059386][ T4486] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 48.059495][ T4486] __kvmalloc_node_noprof+0x121/0x170 [ 48.059525][ T4486] ? ip_set_alloc+0x1f/0x30 [ 48.059549][ T4486] ip_set_alloc+0x1f/0x30 [ 48.059606][ T4486] hash_netiface_create+0x273/0x730 [ 48.059633][ T4486] ? __nla_parse+0x40/0x60 [ 48.059699][ T4486] ? __pfx_hash_netiface_create+0x10/0x10 [ 48.059724][ T4486] ip_set_create+0x3b1/0x970 [ 48.059762][ T4486] ? __nla_parse+0x40/0x60 [ 48.059825][ T4486] nfnetlink_rcv_msg+0x4a9/0x570 [ 48.059866][ T4486] netlink_rcv_skb+0x12c/0x230 [ 48.059896][ T4486] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 48.059924][ T4486] nfnetlink_rcv+0x16c/0x15d0 [ 48.059955][ T4486] ? kmem_cache_free+0xdc/0x2d0 [ 48.059978][ T4486] ? nlmon_xmit+0x51/0x60 [ 48.060011][ T4486] ? __kfree_skb+0x102/0x150 [ 48.060109][ T4486] ? consume_skb+0x49/0x160 [ 48.060128][ T4486] ? nlmon_xmit+0x51/0x60 [ 48.060199][ T4486] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 48.060299][ T4486] ? __dev_queue_xmit+0xb6e/0x2090 [ 48.060323][ T4486] ? ref_tracker_free+0x3a5/0x410 [ 48.060357][ T4486] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 48.060391][ T4486] netlink_unicast+0x599/0x670 [ 48.060422][ T4486] netlink_sendmsg+0x5cc/0x6e0 [ 48.060534][ T4486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.060564][ T4486] __sock_sendmsg+0x140/0x180 [ 48.060595][ T4486] ____sys_sendmsg+0x326/0x4b0 [ 48.060622][ T4486] __sys_sendmsg+0x19d/0x230 [ 48.060704][ T4486] __x64_sys_sendmsg+0x46/0x50 [ 48.060727][ T4486] x64_sys_call+0x2734/0x2dc0 [ 48.060753][ T4486] do_syscall_64+0xc9/0x1c0 [ 48.060782][ T4486] ? clear_bhb_loop+0x55/0xb0 [ 48.060851][ T4486] ? clear_bhb_loop+0x55/0xb0 [ 48.060950][ T4486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.061046][ T4486] RIP: 0033:0x7f17ba14cde9 [ 48.061061][ T4486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.061079][ T4486] RSP: 002b:00007f17b87b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.061097][ T4486] RAX: ffffffffffffffda RBX: 00007f17ba365fa0 RCX: 00007f17ba14cde9 [ 48.061109][ T4486] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 000000000000000c [ 48.061141][ T4486] RBP: 00007f17ba1ce2a0 R08: 0000000000000000 R09: 0000000000000000 [ 48.061152][ T4486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.061164][ T4486] R13: 0000000000000000 R14: 00007f17ba365fa0 R15: 00007ffcd6430648 [ 48.061182][ T4486] [ 48.061189][ T4486] memory: usage 307200kB, limit 307200kB, failcnt 214 [ 48.403057][ T4486] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 48.410988][ T4486] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 48.418291][ T4486] Memory cgroup stats for /syz1: [ 48.418583][ T4486] cache 4096 [ 48.426867][ T4486] rss 0 [ 48.429742][ T4486] shmem 0 [ 48.432682][ T4486] mapped_file 0 [ 48.436165][ T4486] dirty 0 [ 48.439104][ T4486] writeback 0 [ 48.442377][ T4486] workingset_refault_anon 86 [ 48.447008][ T4486] workingset_refault_file 80 [ 48.451607][ T4486] swap 438272 [ 48.454943][ T4486] swapcached 28672 [ 48.458735][ T4486] pgpgin 7263 [ 48.462018][ T4486] pgpgout 7255 [ 48.465432][ T4486] pgfault 9903 [ 48.468830][ T4486] pgmajfault 49 [ 48.472300][ T4486] inactive_anon 28672 [ 48.476325][ T4486] active_anon 0 [ 48.479791][ T4486] inactive_file 4096 [ 48.483685][ T4486] active_file 0 [ 48.487202][ T4486] unevictable 0 [ 48.490670][ T4486] hierarchical_memory_limit 314572800 [ 48.496087][ T4486] hierarchical_memsw_limit 9223372036854771712 [ 48.502262][ T4486] total_cache 4096 [ 48.506018][ T4486] total_rss 0 [ 48.509412][ T4486] total_shmem 0 [ 48.512862][ T4486] total_mapped_file 0 [ 48.516900][ T4486] total_dirty 0 [ 48.520473][ T4486] total_writeback 0 [ 48.524272][ T4486] total_workingset_refault_anon 86 [ 48.529431][ T4486] total_workingset_refault_file 80 [ 48.534580][ T4486] total_swap 438272 [ 48.538419][ T4486] total_swapcached 28672 [ 48.542677][ T4486] total_pgpgin 7263 [ 48.546529][ T4486] total_pgpgout 7255 [ 48.550505][ T4486] total_pgfault 9903 [ 48.553420][ T4515] loop0: detected capacity change from 0 to 512 [ 48.554395][ T4486] total_pgmajfault 49 [ 48.554407][ T4486] total_inactive_anon 28672 [ 48.554418][ T4486] total_active_anon 0 [ 48.564527][ T4515] EXT4-fs: Ignoring removed bh option [ 48.564627][ T4486] total_inactive_file 4096 [ 48.579355][ T4515] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.583161][ T4486] total_active_file 0 [ 48.583173][ T4486] total_unevictable 0 [ 48.596767][ T4515] EXT4-fs (loop0): 1 truncate cleaned up [ 48.597004][ T4486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.216,pid=4485,uid=0 [ 48.621274][ T4486] Memory cgroup out of memory: Killed process 4485 (syz.1.216) total-vm:95760kB, anon-rss:916kB, file-rss:22632kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 48.863503][ T4527] SELinux: ebitmap: map size 695 does not match my size 64 (high bit was 524308) [ 48.875594][ T4527] SELinux: failed to load policy [ 48.930546][ T4529] loop2: detected capacity change from 0 to 8192 [ 48.976104][ T4529] loop2: p1 p2 p3 [ 48.983586][ T4529] loop2: p1 start 51379968 is beyond EOD, truncated [ 48.994380][ T4529] loop2: p3 size 100663552 extends beyond EOD, truncated [ 49.006843][ T2998] loop2: p1 p2 p3 [ 49.014854][ T2998] loop2: p1 start 51379968 is beyond EOD, truncated [ 49.024919][ T2998] loop2: p3 size 100663552 extends beyond EOD, truncated [ 49.033350][ T4540] loop1: detected capacity change from 0 to 2048 [ 49.094608][ T4540] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.233: bg 0: block 234: padding at end of block bitmap is not set [ 49.116868][ T4540] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 49.129506][ T4540] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.129506][ T4540] [ 49.139257][ T4540] EXT4-fs (loop1): Total free blocks count 0 [ 49.145338][ T4540] EXT4-fs (loop1): Free/Dirty block details [ 49.151264][ T4540] EXT4-fs (loop1): free_blocks=0 [ 49.156367][ T4540] EXT4-fs (loop1): dirty_blocks=32 [ 49.161500][ T4540] EXT4-fs (loop1): Block reservation details [ 49.166663][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 49.166678][ T29] audit: type=1400 audit(1739953244.671:595): avc: denied { mounton } for pid=4528 comm="syz.2.230" path="/dev/loop2p2" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.167629][ T4540] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 49.188918][ T4547] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.217464][ T4547] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.217464][ T4547] [ 49.296331][ T4557] Illegal XDP return value 4294967274 on prog (id 190) dev N/A, expect packet loss! [ 49.314493][ T4557] ip6gre1: entered allmulticast mode [ 49.401075][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 49.406625][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 49.428171][ T4568] loop3: detected capacity change from 0 to 2048 [ 49.441203][ T4571] loop2: detected capacity change from 0 to 128 [ 49.450139][ T4571] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.658896][ T29] audit: type=1400 audit(1739953245.171:596): avc: denied { listen } for pid=4587 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.678427][ T29] audit: type=1400 audit(1739953245.171:597): avc: denied { bind } for pid=4587 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.697730][ T29] audit: type=1400 audit(1739953245.171:598): avc: denied { write } for pid=4587 comm="syz.0.248" path="socket:[6088]" dev="sockfs" ino=6088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.749502][ T29] audit: type=1400 audit(1739953245.171:599): avc: denied { accept } for pid=4587 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.768990][ T29] audit: type=1400 audit(1739953245.171:600): avc: denied { ioctl } for pid=4587 comm="syz.0.248" path="/dev/input/event2" dev="devtmpfs" ino=248 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.831233][ T4591] xt_CT: No such helper "syz1" [ 49.868206][ T29] audit: type=1326 audit(1739953245.381:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312ae5cde9 code=0x7ffc0000 [ 49.891526][ T29] audit: type=1326 audit(1739953245.381:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f312ae5cde9 code=0x7ffc0000 [ 49.915891][ T29] audit: type=1326 audit(1739953245.381:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312ae5cde9 code=0x7ffc0000 [ 49.939208][ T29] audit: type=1326 audit(1739953245.381:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312ae5cde9 code=0x7ffc0000 [ 49.963774][ T4606] loop3: detected capacity change from 0 to 2048 [ 50.020493][ T4599] lo speed is unknown, defaulting to 1000 [ 50.028303][ T4606] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.251: bg 0: block 234: padding at end of block bitmap is not set [ 50.080219][ T4606] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 50.080316][ T4623] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.092890][ T4606] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.092890][ T4606] [ 50.105045][ T4623] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.105045][ T4623] [ 50.105064][ T4623] EXT4-fs (loop3): Total free blocks count 0 [ 50.105079][ T4623] EXT4-fs (loop3): Free/Dirty block details [ 50.105093][ T4623] EXT4-fs (loop3): free_blocks=0 [ 50.114740][ T4606] EXT4-fs (loop3): Total free blocks count 0 [ 50.124381][ T4623] EXT4-fs (loop3): dirty_blocks=32 [ 50.130371][ T4606] EXT4-fs (loop3): Free/Dirty block details [ 50.181407][ T4626] loop0: detected capacity change from 0 to 1764 [ 50.298048][ T4638] loop0: detected capacity change from 0 to 512 [ 50.304734][ T4638] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.341684][ T4644] syz.2.260 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.409862][ T4655] lo speed is unknown, defaulting to 1000 [ 50.410036][ T4658] loop2: detected capacity change from 0 to 512 [ 50.450555][ T4658] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.461367][ T4655] loop1: detected capacity change from 0 to 2048 [ 50.535166][ T4665] loop1: detected capacity change from 0 to 2048 [ 50.552453][ T4665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.267: bg 0: block 234: padding at end of block bitmap is not set [ 50.568702][ T4665] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 50.581373][ T4665] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.581373][ T4665] [ 50.591158][ T4665] EXT4-fs (loop1): Total free blocks count 0 [ 50.597196][ T4665] EXT4-fs (loop1): Free/Dirty block details [ 50.603169][ T4665] EXT4-fs (loop1): free_blocks=0 [ 50.608203][ T4665] EXT4-fs (loop1): dirty_blocks=32 [ 50.613330][ T4665] EXT4-fs (loop1): Block reservation details [ 50.619379][ T4665] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 50.635863][ T4671] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.635935][ T4671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.635935][ T4671] [ 50.787583][ T4689] loop1: detected capacity change from 0 to 764 [ 50.831922][ T4694] lo speed is unknown, defaulting to 1000 [ 50.880581][ T4694] loop2: detected capacity change from 0 to 2048 [ 51.113518][ T4709] loop0: detected capacity change from 0 to 2048 [ 51.211392][ T4713] loop0: detected capacity change from 0 to 2048 [ 51.229311][ T4713] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.281: bg 0: block 234: padding at end of block bitmap is not set [ 51.243939][ T4713] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 51.256710][ T4713] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.256710][ T4713] [ 51.266475][ T4713] EXT4-fs (loop0): Total free blocks count 0 [ 51.272474][ T4713] EXT4-fs (loop0): Free/Dirty block details [ 51.278420][ T4713] EXT4-fs (loop0): free_blocks=0 [ 51.283482][ T4713] EXT4-fs (loop0): dirty_blocks=32 [ 51.287747][ T4706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.288616][ T4713] EXT4-fs (loop0): Block reservation details [ 51.299452][ T4706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.302988][ T4713] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 51.317095][ T4716] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.329318][ T4716] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.329318][ T4716] [ 51.400113][ T4722] lo speed is unknown, defaulting to 1000 [ 51.456691][ T4722] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 51.465003][ T4722] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 51.522530][ T4729] loop0: detected capacity change from 0 to 512 [ 51.531450][ T4729] EXT4-fs: Ignoring removed bh option [ 51.541562][ T4725] loop3: detected capacity change from 0 to 512 [ 51.548526][ T4729] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.558581][ T4725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.571725][ T4729] EXT4-fs (loop0): 1 truncate cleaned up [ 51.587759][ T4725] EXT4-fs (loop3): 1 truncate cleaned up [ 51.689044][ T4735] xt_CT: No such helper "syz1" [ 51.720247][ T4741] loop3: detected capacity change from 0 to 512 [ 51.742032][ T4741] EXT4-fs: Ignoring removed oldalloc option [ 51.751923][ T4741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.763028][ T4741] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.769883][ T4741] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.289: Failed to acquire dquot type 1 [ 51.782834][ T4741] EXT4-fs (loop3): 1 truncate cleaned up [ 51.868984][ T4746] 9pnet_fd: Insufficient options for proto=fd [ 51.898186][ T4753] loop1: detected capacity change from 0 to 1024 [ 51.916335][ T4753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 51.924562][ T4753] System zones: 0-1, 3-12 [ 52.020741][ T4758] loop1: detected capacity change from 0 to 1024 [ 52.740305][ T4775] netlink: 14 bytes leftover after parsing attributes in process `syz.0.300'. [ 52.911799][ T4789] xt_CT: No such helper "syz1" [ 52.934859][ T4792] lo speed is unknown, defaulting to 1000 [ 52.993900][ T4796] loop1: detected capacity change from 0 to 2048 [ 53.048526][ T4803] loop0: detected capacity change from 0 to 2048 [ 53.194796][ T4810] loop1: detected capacity change from 0 to 512 [ 53.204025][ T4810] EXT4-fs: Ignoring removed oldalloc option [ 53.214481][ T4810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.227289][ T4810] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.234133][ T4810] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.312: Failed to acquire dquot type 1 [ 53.247539][ T4810] EXT4-fs (loop1): 1 truncate cleaned up [ 53.329874][ T4823] loop0: detected capacity change from 0 to 128 [ 53.338872][ T4823] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.371493][ T4825] SELinux: ebitmap: map size 695 does not match my size 64 (high bit was 524308) [ 53.381128][ T4825] SELinux: failed to load policy [ 53.417866][ T4827] loop0: detected capacity change from 0 to 512 [ 53.427045][ T4827] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.433830][ T4827] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 53.448965][ T4827] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 53.455810][ T4827] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 53.473671][ T4827] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 53.488417][ T4827] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 53.498057][ T4827] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 53.579645][ T4830] syz.0.319: attempt to access beyond end of device [ 53.579645][ T4830] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 53.662200][ T4838] loop0: detected capacity change from 0 to 128 [ 53.668758][ T4836] loop3: detected capacity change from 0 to 2048 [ 53.681090][ T4838] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.779853][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 53.794507][ T4843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.324'. [ 53.869199][ T4851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.878635][ T4851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.937041][ T4853] xt_CT: No such helper "syz1" [ 53.990971][ T4856] bond1: entered promiscuous mode [ 53.996102][ T4856] bond1: entered allmulticast mode [ 54.002889][ T4856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.018869][ T4856] bond1 (unregistering): Released all slaves [ 54.069716][ T4862] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.123461][ T4866] loop2: detected capacity change from 0 to 128 [ 54.139459][ T4866] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.199057][ T4870] loop3: detected capacity change from 0 to 512 [ 54.209844][ T4870] EXT4-fs: Ignoring removed bh option [ 54.223664][ T4870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.233274][ T4874] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.264836][ T4870] EXT4-fs (loop3): 1 truncate cleaned up [ 54.302320][ T4879] loop2: detected capacity change from 0 to 512 [ 54.333309][ T4879] EXT4-fs: Ignoring removed oldalloc option [ 54.347126][ T4879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.359704][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 54.359717][ T29] audit: type=1400 audit(1739953249.871:874): avc: denied { watch watch_reads } for pid=4886 comm="syz.3.342" path="/70/file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.361184][ T4884] lo speed is unknown, defaulting to 1000 [ 54.391976][ T4879] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.419049][ T4887] SELinux: Context Ü is not valid (left unmapped). [ 54.428554][ T4879] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 54.438051][ T4879] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 54.447475][ T4879] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.337: Failed to acquire dquot type 1 [ 54.449560][ T4889] loop1: detected capacity change from 0 to 2048 [ 54.469717][ T29] audit: type=1326 audit(1739953249.981:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.0.343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f312ae5cde9 code=0x0 [ 54.470293][ T4879] EXT4-fs (loop2): 1 truncate cleaned up [ 54.552257][ T29] audit: type=1326 audit(1739953250.061:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe839ddcde9 code=0x7ffc0000 [ 54.576492][ T29] audit: type=1326 audit(1739953250.061:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe839ddcde9 code=0x7ffc0000 [ 54.599715][ T29] audit: type=1326 audit(1739953250.061:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fe839ddcde9 code=0x7ffc0000 [ 54.622805][ T29] audit: type=1326 audit(1739953250.061:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe839ddcde9 code=0x7ffc0000 [ 54.629715][ T4899] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 54.645630][ T29] audit: type=1326 audit(1739953250.061:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe839ddcde9 code=0x7ffc0000 [ 54.645702][ T29] audit: type=1326 audit(1739953250.091:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe839ddcde9 code=0x7ffc0000 [ 54.808092][ T4905] SELinux: ebitmap: map size 695 does not match my size 64 (high bit was 524308) [ 54.817922][ T4905] SELinux: failed to load policy [ 55.332813][ T4922] loop0: detected capacity change from 0 to 512 [ 55.339847][ T4922] EXT4-fs: Ignoring removed bh option [ 55.345849][ T4922] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.357626][ T4922] EXT4-fs (loop0): 1 truncate cleaned up [ 55.392940][ T4912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.402202][ T4912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.441767][ T4928] loop0: detected capacity change from 0 to 2048 [ 55.459556][ T4928] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.354: bg 0: block 234: padding at end of block bitmap is not set [ 55.474206][ T4928] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 55.486903][ T4928] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.486903][ T4928] [ 55.496562][ T4928] EXT4-fs (loop0): Total free blocks count 0 [ 55.502552][ T4928] EXT4-fs (loop0): Free/Dirty block details [ 55.508485][ T4928] EXT4-fs (loop0): free_blocks=0 [ 55.513450][ T4928] EXT4-fs (loop0): dirty_blocks=32 [ 55.514146][ T4931] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.518666][ T4928] EXT4-fs (loop0): Block reservation details [ 55.518699][ T4928] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 55.542877][ T4931] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.542877][ T4931] [ 55.620791][ T4942] loop2: detected capacity change from 0 to 512 [ 55.627986][ T4942] EXT4-fs: Ignoring removed bh option [ 55.635803][ T4942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.659365][ T4942] EXT4-fs (loop2): 1 truncate cleaned up [ 55.749553][ T4961] loop2: detected capacity change from 0 to 512 [ 55.762834][ T4961] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.773515][ T4961] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 55.789605][ T4961] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 55.796670][ T4961] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 55.815699][ T4961] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 55.832038][ T4961] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 55.842744][ T4961] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 56.083906][ T5016] loop1: detected capacity change from 0 to 2048 [ 56.110245][ T5021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.364'. [ 56.188261][ T5023] loop0: detected capacity change from 0 to 512 [ 56.199503][ T5023] EXT4-fs: Ignoring removed oldalloc option [ 56.205747][ T5023] ext4: Unknown parameter 'audit' [ 56.215729][ T5023] loop0: detected capacity change from 0 to 512 [ 56.259335][ T5026] loop1: detected capacity change from 0 to 1024 [ 56.267700][ T5026] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 56.278688][ T5026] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 56.295799][ T5026] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.306083][ T5026] EXT4-fs (loop1): invalid journal inode [ 56.311787][ T5026] EXT4-fs (loop1): can't get journal size [ 56.327946][ T5026] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.365: blocks 2-2 from inode overlap system zone [ 56.341920][ T5026] EXT4-fs (loop1): failed to initialize system zone (-117) [ 56.349167][ T5026] EXT4-fs (loop1): mount failed [ 56.419278][ T5026] Invalid ELF header magic: != ELF [ 56.827682][ T5030] loop2: detected capacity change from 0 to 2048 [ 56.859050][ T5030] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.366: bg 0: block 234: padding at end of block bitmap is not set [ 56.873673][ T5030] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 56.886448][ T5030] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.886448][ T5030] [ 56.896141][ T5030] EXT4-fs (loop2): Total free blocks count 0 [ 56.902140][ T5030] EXT4-fs (loop2): Free/Dirty block details [ 56.908133][ T5030] EXT4-fs (loop2): free_blocks=0 [ 56.909857][ T5033] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 56.913127][ T5030] EXT4-fs (loop2): dirty_blocks=32 [ 56.913150][ T5030] EXT4-fs (loop2): Block reservation details [ 56.925351][ T5033] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.925351][ T5033] [ 56.930419][ T5030] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 57.047004][ T5039] infiniband syz!: set active [ 57.051741][ T5039] infiniband syz!: added team_slave_0 [ 57.105672][ T5039] RDS/IB: syz!: added [ 57.109700][ T5039] smc: adding ib device syz! with port count 1 [ 57.122695][ T5039] smc: ib device syz! port 1 has pnetid [ 57.140404][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 57.191388][ T5047] loop0: detected capacity change from 0 to 256 [ 57.198229][ T5047] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 57.259991][ T5050] lo speed is unknown, defaulting to 1000 [ 57.304633][ T5051] loop1: detected capacity change from 0 to 2048 [ 57.651376][ T5084] loop0: detected capacity change from 0 to 2048 [ 57.680072][ T5084] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.377: bg 0: block 234: padding at end of block bitmap is not set [ 57.695189][ T5084] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 57.707915][ T5084] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.707915][ T5084] [ 57.717570][ T5084] EXT4-fs (loop0): Total free blocks count 0 [ 57.723547][ T5084] EXT4-fs (loop0): Free/Dirty block details [ 57.729607][ T5084] EXT4-fs (loop0): free_blocks=0 [ 57.734561][ T5084] EXT4-fs (loop0): dirty_blocks=32 [ 57.739715][ T5084] EXT4-fs (loop0): Block reservation details [ 57.745773][ T5084] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 57.746589][ T5097] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.763908][ T5097] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.763908][ T5097] [ 57.864852][ T5108] loop2: detected capacity change from 0 to 512 [ 57.873296][ T5108] EXT4-fs: Ignoring removed bh option [ 57.884164][ T5108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.900808][ T5108] EXT4-fs (loop2): 1 truncate cleaned up [ 58.072138][ T5140] loop0: detected capacity change from 0 to 2048 [ 58.190872][ T5154] loop0: detected capacity change from 0 to 128 [ 58.214111][ T5154] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.302949][ T5160] xt_CT: No such helper "syz1" [ 58.414405][ T5167] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 58.422304][ T5167] netlink: 224 bytes leftover after parsing attributes in process `syz.3.391'. [ 58.577658][ T5182] loop1: detected capacity change from 0 to 2048 [ 58.820268][ T5210] loop3: detected capacity change from 0 to 128 [ 58.827282][ T5210] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.847988][ T5210] sit0: left promiscuous mode [ 59.089183][ T5211] lo speed is unknown, defaulting to 1000 [ 59.168421][ T5213] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.394'. [ 59.189960][ T5215] sit0: entered promiscuous mode [ 59.318593][ T5219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 59.361802][ T5212] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 59.674325][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 59.674342][ T29] audit: type=1400 audit(1739953255.181:975): avc: denied { getopt } for pid=5216 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.228203][ T29] audit: type=1400 audit(1739953255.741:976): avc: denied { map } for pid=5233 comm="syz.1.401" path="socket:[8322]" dev="sockfs" ino=8322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 60.284143][ T5229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.399'. [ 60.297754][ T29] audit: type=1400 audit(1739953255.811:977): avc: denied { create } for pid=5236 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.334929][ T5237] syz!: rxe_newlink: already configured on team_slave_0 [ 60.343828][ T29] audit: type=1400 audit(1739953255.851:978): avc: denied { write } for pid=5236 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.368291][ T5229] hub 6-0:1.0: USB hub found [ 60.373490][ T5229] hub 6-0:1.0: 8 ports detected [ 60.473538][ T5244] loop0: detected capacity change from 0 to 2048 [ 60.567246][ T5256] loop0: detected capacity change from 0 to 512 [ 60.573916][ T5256] EXT4-fs: Ignoring removed bh option [ 60.580396][ T5256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.602088][ T5256] EXT4-fs (loop0): 1 truncate cleaned up [ 60.711660][ T5261] loop0: detected capacity change from 0 to 512 [ 60.729478][ T5261] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.736286][ T5261] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 60.751291][ T5261] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 60.758625][ T5261] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 60.776139][ T5261] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 60.790685][ T5261] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 60.800553][ T5261] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 60.848182][ T5264] loop3: detected capacity change from 0 to 164 [ 60.858106][ T5264] rock: directory entry would overflow storage [ 60.864314][ T5264] rock: sig=0x4f50, size=4, remaining=3 [ 60.870086][ T5264] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.911221][ T5270] loop3: detected capacity change from 0 to 512 [ 60.918641][ T5270] EXT4-fs: Ignoring removed i_version option [ 60.937562][ T5270] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.950413][ T29] audit: type=1400 audit(1739953256.471:979): avc: denied { execute } for pid=5268 comm="syz.3.412" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.975558][ T5270] smc: net device bond0 applied user defined pnetid SYZ0 [ 60.982920][ T5270] smc: net device bond0 erased user defined pnetid SYZ0 [ 61.115969][ T5289] loop1: detected capacity change from 0 to 512 [ 61.127968][ T5289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.418: bg 0: block 248: padding at end of block bitmap is not set [ 61.142592][ T5289] Quota error (device loop1): write_blk: dquota write failed [ 61.150073][ T5289] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 61.160200][ T5289] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.418: Failed to acquire dquot type 1 [ 61.172267][ T5289] EXT4-fs (loop1): 1 truncate cleaned up [ 61.178676][ T5289] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.241910][ T5279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.252417][ T5279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.292425][ T5285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.301947][ T5285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.784191][ T29] audit: type=1326 audit(1739953257.291:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d24e7cde9 code=0x7ffc0000 [ 61.807801][ T29] audit: type=1326 audit(1739953257.291:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5d24e7cde9 code=0x7ffc0000 [ 61.831101][ T29] audit: type=1326 audit(1739953257.291:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d24e7cde9 code=0x7ffc0000 [ 62.203878][ T5307] loop1: detected capacity change from 0 to 128 [ 62.214082][ T5307] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.302863][ T5314] loop1: detected capacity change from 0 to 512 [ 62.321244][ T5314] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.341138][ T5314] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.427: corrupted inode contents [ 62.353266][ T5314] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.427: mark_inode_dirty error [ 62.364942][ T5314] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.427: corrupted inode contents [ 62.377817][ T5314] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.427: mark_inode_dirty error [ 62.438931][ T5323] loop1: detected capacity change from 0 to 2048 [ 62.461299][ T5323] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.430: bg 0: block 234: padding at end of block bitmap is not set [ 62.475986][ T5323] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 62.488652][ T5323] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.488652][ T5323] [ 62.498381][ T5323] EXT4-fs (loop1): Total free blocks count 0 [ 62.504381][ T5323] EXT4-fs (loop1): Free/Dirty block details [ 62.510369][ T5323] EXT4-fs (loop1): free_blocks=0 [ 62.515341][ T5323] EXT4-fs (loop1): dirty_blocks=32 [ 62.516086][ T5327] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 62.520452][ T5323] EXT4-fs (loop1): Block reservation details [ 62.520465][ T5323] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 62.544732][ T5327] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.544732][ T5327] [ 62.884508][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.893568][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.254222][ T5338] xt_CT: No such helper "syz1" [ 63.622445][ T5353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.439'. [ 63.669672][ T5355] loop3: detected capacity change from 0 to 512 [ 63.678100][ T5355] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.685247][ T5355] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 63.700445][ T5355] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 63.707697][ T5355] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 63.726730][ T5355] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 63.740355][ T5355] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 63.750180][ T5355] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 63.819779][ T5358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.441'. [ 63.854671][ T5360] loop3: detected capacity change from 0 to 512 [ 63.863012][ T5360] EXT4-fs: Ignoring removed orlov option [ 63.877462][ T5360] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.971991][ T5365] bond1: entered promiscuous mode [ 63.977364][ T5365] bond1: entered allmulticast mode [ 63.982760][ T5365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.994844][ T5365] bond1 (unregistering): Released all slaves [ 64.172297][ T5371] xt_CT: No such helper "syz1" [ 64.274282][ T5383] loop3: detected capacity change from 0 to 128 [ 64.304364][ T5383] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.405122][ T5392] loop1: detected capacity change from 0 to 1024 [ 64.412038][ T5392] ext4: Unknown parameter 'obj_type' [ 64.421179][ T5392] netlink: 'syz.1.453': attribute type 7 has an invalid length. [ 64.428967][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 64.445184][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.460971][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.492719][ T5399] loop1: detected capacity change from 0 to 512 [ 64.510556][ T5399] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.518011][ T5399] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.455: bg 0: block 248: padding at end of block bitmap is not set [ 64.533949][ T5399] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.455: Failed to acquire dquot type 1 [ 64.546093][ T5399] EXT4-fs (loop1): 1 truncate cleaned up [ 64.567891][ T5399] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 64.590541][ T5399] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 64.751630][ T5406] netlink: 'syz.1.457': attribute type 39 has an invalid length. [ 64.781518][ T5408] loop1: detected capacity change from 0 to 1024 [ 64.788503][ T5408] EXT4-fs: Ignoring removed nobh option [ 64.794099][ T5408] EXT4-fs: Ignoring removed bh option [ 64.819891][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 64.819903][ T29] audit: type=1326 audit(1739953260.331:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 64.849522][ T29] audit: type=1326 audit(1739953260.331:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 64.872976][ T29] audit: type=1326 audit(1739953260.331:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 64.896372][ T29] audit: type=1326 audit(1739953260.331:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 64.919940][ T29] audit: type=1326 audit(1739953260.331:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 64.943439][ T29] audit: type=1326 audit(1739953260.331:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 64.967156][ T29] audit: type=1326 audit(1739953260.331:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 64.990403][ T29] audit: type=1326 audit(1739953260.331:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 65.013834][ T29] audit: type=1326 audit(1739953260.331:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 65.037276][ T29] audit: type=1326 audit(1739953260.331:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5407 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ba14cde9 code=0x7ffc0000 [ 65.218705][ T5416] xt_CT: No such helper "syz1" [ 65.259744][ T5421] loop2: detected capacity change from 0 to 512 [ 65.267481][ T5421] EXT4-fs: Ignoring removed bh option [ 65.281717][ T5419] loop1: detected capacity change from 0 to 2048 [ 65.288838][ T5421] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.300987][ T5421] EXT4-fs (loop2): 1 truncate cleaned up [ 65.316107][ T5419] Alternate GPT is invalid, using primary GPT. [ 65.322431][ T5419] loop1: p1 p2 p3 [ 65.433958][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 65.444034][ T5428] loop2: detected capacity change from 0 to 2048 [ 65.452737][ T3465] udevd[3465]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 65.452838][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 65.480167][ T5430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'. [ 65.500903][ T5428] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.465: bg 0: block 234: padding at end of block bitmap is not set [ 65.515967][ T5428] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 117 [ 65.516000][ T5428] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.516000][ T5428] [ 65.516850][ T5428] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.516872][ T5428] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.516872][ T5428] [ 65.516886][ T5428] EXT4-fs (loop2): Total free blocks count 0 [ 65.516901][ T5428] EXT4-fs (loop2): Free/Dirty block details [ 65.516913][ T5428] EXT4-fs (loop2): free_blocks=0 [ 65.516927][ T5428] EXT4-fs (loop2): dirty_blocks=32 [ 65.516941][ T5428] EXT4-fs (loop2): Block reservation details [ 65.516954][ T5428] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 65.756215][ T5452] loop3: detected capacity change from 0 to 512 [ 65.763130][ T5452] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.842079][ T5452] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.474: bg 0: block 496: padding at end of block bitmap is not set [ 65.858446][ T5452] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 65.933752][ T5474] loop3: detected capacity change from 0 to 512 [ 65.940677][ T5474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.954781][ T5474] EXT4-fs (loop3): 1 truncate cleaned up [ 65.974785][ T5458] lo speed is unknown, defaulting to 1000 [ 66.051685][ T5482] loop3: detected capacity change from 0 to 2048 [ 66.081786][ T5482] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.481: bg 0: block 234: padding at end of block bitmap is not set [ 66.093423][ T5458] chnl_net:caif_netlink_parms(): no params data found [ 66.096894][ T5482] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 66.115406][ T5482] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.115406][ T5482] [ 66.125050][ T5482] EXT4-fs (loop3): Total free blocks count 0 [ 66.131207][ T5482] EXT4-fs (loop3): Free/Dirty block details [ 66.137153][ T5482] EXT4-fs (loop3): free_blocks=0 [ 66.137967][ T5487] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.142102][ T5482] EXT4-fs (loop3): dirty_blocks=32 [ 66.142120][ T5482] EXT4-fs (loop3): Block reservation details [ 66.142132][ T5482] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 66.154325][ T5487] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.154325][ T5487] [ 66.239563][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.246740][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.253997][ T5458] bridge_slave_0: entered allmulticast mode [ 66.260567][ T5458] bridge_slave_0: entered promiscuous mode [ 66.267977][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.275057][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.282257][ T5458] bridge_slave_1: entered allmulticast mode [ 66.289150][ T5458] bridge_slave_1: entered promiscuous mode [ 66.313628][ T5494] netlink: 436 bytes leftover after parsing attributes in process `syz.3.482'. [ 66.324435][ T5494] netlink: 76 bytes leftover after parsing attributes in process `syz.3.482'. [ 66.325337][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.344624][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.368480][ T5458] team0: Port device team_slave_0 added [ 66.375823][ T5458] team0: Port device team_slave_1 added [ 66.390932][ T5496] FAULT_INJECTION: forcing a failure. [ 66.390932][ T5496] name failslab, interval 1, probability 0, space 0, times 0 [ 66.403772][ T5496] CPU: 0 UID: 0 PID: 5496 Comm: syz.3.483 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 66.403803][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.403817][ T5496] Call Trace: [ 66.403823][ T5496] [ 66.403830][ T5496] dump_stack_lvl+0xf2/0x150 [ 66.403857][ T5496] dump_stack+0x15/0x1a [ 66.403960][ T5496] should_fail_ex+0x24a/0x260 [ 66.403994][ T5496] should_failslab+0x8f/0xb0 [ 66.404026][ T5496] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 66.404112][ T5496] ? sidtab_sid2str_get+0xb8/0x140 [ 66.404149][ T5496] kmemdup_noprof+0x2b/0x70 [ 66.404208][ T5496] sidtab_sid2str_get+0xb8/0x140 [ 66.404244][ T5496] security_sid_to_context_core+0x1eb/0x2f0 [ 66.404283][ T5496] security_sid_to_context_force+0x2a/0x40 [ 66.404317][ T5496] selinux_inode_init_security+0x344/0x3e0 [ 66.404534][ T5496] ? __pfx_shmem_initxattrs+0x10/0x10 [ 66.404560][ T5496] ? __pfx_shmem_initxattrs+0x10/0x10 [ 66.404586][ T5496] security_inode_init_security+0x141/0x330 [ 66.404648][ T5496] shmem_mknod+0xa8/0x180 [ 66.404672][ T5496] shmem_mkdir+0x33/0x70 [ 66.404696][ T5496] vfs_mkdir+0x1f4/0x320 [ 66.404729][ T5496] do_mkdirat+0x136/0x2c0 [ 66.404755][ T5496] __x64_sys_mkdir+0x42/0x50 [ 66.404826][ T5496] x64_sys_call+0x1b2b/0x2dc0 [ 66.404856][ T5496] do_syscall_64+0xc9/0x1c0 [ 66.404882][ T5496] ? clear_bhb_loop+0x55/0xb0 [ 66.404957][ T5496] ? clear_bhb_loop+0x55/0xb0 [ 66.404991][ T5496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.405030][ T5496] RIP: 0033:0x7f5d24e7cde9 [ 66.405047][ T5496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.405068][ T5496] RSP: 002b:00007f5d234e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 66.405090][ T5496] RAX: ffffffffffffffda RBX: 00007f5d25095fa0 RCX: 00007f5d24e7cde9 [ 66.405105][ T5496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000580 [ 66.405119][ T5496] RBP: 00007f5d234e1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.405133][ T5496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.405215][ T5496] R13: 0000000000000000 R14: 00007f5d25095fa0 R15: 00007ffd3a8ef4b8 [ 66.405234][ T5496] [ 66.645000][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.652115][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.678175][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.693954][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.701055][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.727209][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.768958][ T5458] hsr_slave_0: entered promiscuous mode [ 66.775087][ T5458] hsr_slave_1: entered promiscuous mode [ 66.798513][ T5458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.814257][ T5504] loop3: detected capacity change from 0 to 512 [ 66.818113][ T5458] Cannot create hsr debugfs directory [ 66.826626][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'. [ 66.835584][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'. [ 66.859281][ T5504] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.925951][ T5509] netlink: 'syz.2.488': attribute type 2 has an invalid length. [ 66.933749][ T5509] netlink: 'syz.2.488': attribute type 3 has an invalid length. [ 66.941452][ T5509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.488'. [ 66.953714][ T5509] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 66.985113][ T5458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.997426][ T5458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.012297][ T5458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.030972][ T5458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.052150][ T5517] loop2: detected capacity change from 0 to 4096 [ 67.078686][ T5517] EXT4-fs (loop2): shut down requested (0) [ 67.093739][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.105441][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.126320][ T5458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.136792][ T5458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.150264][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.157351][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.176846][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.183951][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.194507][ T3306] EXT4-fs unmount: 136 callbacks suppressed [ 67.194523][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.251987][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.269942][ T5527] loop3: detected capacity change from 0 to 2048 [ 67.274817][ T5524] lo speed is unknown, defaulting to 1000 [ 67.308503][ T5527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.362908][ T5527] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.491: bg 0: block 234: padding at end of block bitmap is not set [ 67.380031][ T5534] loop0: detected capacity change from 0 to 2048 [ 67.396390][ T5527] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 67.402115][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.408987][ T5527] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.408987][ T5527] [ 67.425488][ T5527] EXT4-fs (loop3): Total free blocks count 0 [ 67.425750][ T5542] loop2: detected capacity change from 0 to 512 [ 67.431464][ T5527] EXT4-fs (loop3): Free/Dirty block details [ 67.431478][ T5527] EXT4-fs (loop3): free_blocks=0 [ 67.448666][ T5527] EXT4-fs (loop3): dirty_blocks=32 [ 67.453873][ T5527] EXT4-fs (loop3): Block reservation details [ 67.459965][ T5527] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 67.472752][ T5544] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 67.472855][ T5542] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.501015][ T5542] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 67.523250][ T5542] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 67.531835][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.547294][ T5542] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.610015][ T5542] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 13 (err -117) [ 67.623768][ T5542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.658480][ T5542] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 67.672002][ T5542] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 67.736248][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.857965][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.893079][ T5590] loop2: detected capacity change from 0 to 512 [ 67.936879][ T5458] veth0_vlan: entered promiscuous mode [ 67.958476][ T5590] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.972124][ T5458] veth1_vlan: entered promiscuous mode [ 68.032484][ T5458] veth0_macvtap: entered promiscuous mode [ 68.067958][ T5458] veth1_macvtap: entered promiscuous mode [ 68.090460][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.101053][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.110979][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.121503][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.131544][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.142227][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.142511][ T5611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5611 comm=syz.1.504 [ 68.152047][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.175007][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.184879][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.195326][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.220880][ T5612] loop0: detected capacity change from 0 to 1024 [ 68.231757][ T5612] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.232948][ T5615] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 68.251005][ T5612] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 68.261744][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.269177][ T5612] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.277391][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.287975][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.297944][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.298782][ T5612] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 68.308442][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.327732][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.337409][ T5606] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 68.338260][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.355710][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.366176][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.376048][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.386500][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.387765][ T5612] EXT4-fs (loop0): Remounting filesystem read-only [ 68.397401][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.413747][ T5619] wg2: entered promiscuous mode [ 68.414546][ T5612] EXT4-fs (loop0): 1 orphan inode deleted [ 68.418905][ T5619] wg2: entered allmulticast mode [ 68.434733][ T5612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.446817][ T5621] loop2: detected capacity change from 0 to 128 [ 68.447105][ T5612] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 68.457449][ T5621] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.460880][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.485452][ T5621] sit0: entered allmulticast mode [ 68.511414][ T5621] sit0: entered promiscuous mode [ 68.529067][ T5626] loop0: detected capacity change from 0 to 128 [ 68.558652][ T5626] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.579369][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 68.597808][ T5626] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.664078][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.761620][ T5636] loop0: detected capacity change from 0 to 1024 [ 68.788009][ T5636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.800983][ T5618] wg2: left promiscuous mode [ 68.806065][ T5618] wg2: left allmulticast mode [ 68.834154][ T5458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.843082][ T5458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.851900][ T5458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.860662][ T5458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.887702][ T5619] lo speed is unknown, defaulting to 1000 [ 68.893792][ T5628] bridge_slave_1: left allmulticast mode [ 68.900169][ T5628] bridge_slave_1: left promiscuous mode [ 68.907011][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.940539][ T5628] bridge_slave_0: left allmulticast mode [ 68.947929][ T5628] bridge_slave_0: left promiscuous mode [ 68.957626][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.154347][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.213792][ T5668] loop0: detected capacity change from 0 to 2048 [ 69.241153][ T5673] loop5: detected capacity change from 0 to 512 [ 69.248263][ T5673] EXT4-fs: Ignoring removed bh option [ 69.255127][ T5668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.287042][ T5673] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.306342][ T5673] EXT4-fs (loop5): 1 truncate cleaned up [ 69.322040][ T5673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.379591][ T5687] loop1: detected capacity change from 0 to 512 [ 69.387397][ T5687] EXT4-fs: Ignoring removed oldalloc option [ 69.394982][ T5687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.441889][ T5458] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.468503][ T5687] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.478407][ T5687] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.516: Failed to acquire dquot type 1 [ 69.490449][ T5687] EXT4-fs (loop1): 1 truncate cleaned up [ 69.523686][ T5687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.560662][ T5696] loop3: detected capacity change from 0 to 2048 [ 69.575804][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.588317][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.617183][ T5696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.658881][ T5696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.520: bg 0: block 234: padding at end of block bitmap is not set [ 69.676026][ T5702] loop1: detected capacity change from 0 to 8192 [ 69.689070][ T5702] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 69.700894][ T5702] bridge0: port 1(batadv1) entered blocking state [ 69.707588][ T5702] bridge0: port 1(batadv1) entered disabled state [ 69.713705][ T5696] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 69.726653][ T5696] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.726653][ T5696] [ 69.736498][ T5696] EXT4-fs (loop3): Total free blocks count 0 [ 69.742568][ T5696] EXT4-fs (loop3): Free/Dirty block details [ 69.748531][ T5696] EXT4-fs (loop3): free_blocks=0 [ 69.753555][ T5696] EXT4-fs (loop3): dirty_blocks=32 [ 69.758796][ T5696] EXT4-fs (loop3): Block reservation details [ 69.764793][ T5696] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 69.776553][ T5705] loop5: detected capacity change from 0 to 1024 [ 69.784035][ T5702] batadv1: entered allmulticast mode [ 69.789595][ T5705] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 69.794785][ T5708] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.800484][ T5705] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 69.825497][ T5702] batadv1: entered promiscuous mode [ 69.831455][ T5705] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 69.864602][ T5705] EXT4-fs (loop5): invalid journal inode [ 69.872494][ T5705] EXT4-fs (loop5): can't get journal size [ 69.882590][ T5705] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.521: blocks 2-2 from inode overlap system zone [ 69.911997][ T5705] EXT4-fs (loop5): failed to initialize system zone (-117) [ 69.925240][ T5705] EXT4-fs (loop5): mount failed [ 70.007685][ T5715] loop2: detected capacity change from 0 to 512 [ 70.052510][ T5705] Invalid ELF header magic: != ELF [ 70.059827][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 70.059842][ T29] audit: type=1400 audit(1739953265.571:1570): avc: denied { create } for pid=5714 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.060348][ T5719] FAULT_INJECTION: forcing a failure. [ 70.060348][ T5719] name failslab, interval 1, probability 0, space 0, times 0 [ 70.066291][ T29] audit: type=1400 audit(1739953265.571:1571): avc: denied { ioctl } for pid=5714 comm="syz.1.526" path="socket:[10270]" dev="sockfs" ino=10270 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.085611][ T5719] CPU: 1 UID: 0 PID: 5719 Comm: syz.1.526 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 70.085642][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.085657][ T5719] Call Trace: [ 70.085664][ T5719] [ 70.085673][ T5719] dump_stack_lvl+0xf2/0x150 [ 70.085710][ T5719] dump_stack+0x15/0x1a [ 70.085737][ T5719] should_fail_ex+0x24a/0x260 [ 70.085918][ T5719] should_failslab+0x8f/0xb0 [ 70.085954][ T5719] kmem_cache_alloc_node_noprof+0x59/0x320 [ 70.085983][ T5719] ? __alloc_skb+0x10b/0x310 [ 70.086057][ T5719] __alloc_skb+0x10b/0x310 [ 70.086090][ T5719] netlink_alloc_large_skb+0xad/0xe0 [ 70.086125][ T5719] netlink_sendmsg+0x3b4/0x6e0 [ 70.086254][ T5719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.086288][ T5719] __sock_sendmsg+0x140/0x180 [ 70.086324][ T5719] ____sys_sendmsg+0x326/0x4b0 [ 70.086356][ T5719] __sys_sendmsg+0x19d/0x230 [ 70.086405][ T5719] __x64_sys_sendmsg+0x46/0x50 [ 70.086429][ T5719] x64_sys_call+0x2734/0x2dc0 [ 70.086454][ T5719] do_syscall_64+0xc9/0x1c0 [ 70.086487][ T5719] ? clear_bhb_loop+0x55/0xb0 [ 70.086591][ T5719] ? clear_bhb_loop+0x55/0xb0 [ 70.086622][ T5719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.086651][ T5719] RIP: 0033:0x7f17ba14cde9 [ 70.086669][ T5719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.086689][ T5719] RSP: 002b:00007f17b87b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.086709][ T5719] RAX: ffffffffffffffda RBX: 00007f17ba365fa0 RCX: 00007f17ba14cde9 [ 70.086723][ T5719] RDX: 0000000004000050 RSI: 0000400000000000 RDI: 0000000000000009 [ 70.086784][ T5719] RBP: 00007f17b87b1090 R08: 0000000000000000 R09: 0000000000000000 [ 70.086867][ T5719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.086880][ T5719] R13: 0000000000000000 R14: 00007f17ba365fa0 R15: 00007ffcd6430648 [ 70.086902][ T5719] [ 70.087366][ T5715] ext4: Unknown parameter 'subj_user' [ 70.213220][ T5723] loop3: detected capacity change from 0 to 512 [ 70.265482][ T5715] FAULT_INJECTION: forcing a failure. [ 70.265482][ T5715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.300146][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 70.307237][ T5715] CPU: 1 UID: 0 PID: 5715 Comm: syz.2.524 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 70.307263][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.307278][ T5715] Call Trace: [ 70.307286][ T5715] [ 70.307294][ T5715] dump_stack_lvl+0xf2/0x150 [ 70.307336][ T5715] dump_stack+0x15/0x1a [ 70.307365][ T5715] should_fail_ex+0x24a/0x260 [ 70.307499][ T5715] should_fail+0xb/0x10 [ 70.307531][ T5715] should_fail_usercopy+0x1a/0x20 [ 70.307569][ T5715] _copy_from_user+0x1c/0xa0 [ 70.307612][ T5715] copy_from_sockptr_offset+0x6b/0xb0 [ 70.307738][ T5715] do_ipt_set_ctl+0x69b/0x8b0 [ 70.307766][ T5715] ? _raw_spin_unlock_bh+0x36/0x40 [ 70.307944][ T5715] ? lock_sock_nested+0x10f/0x140 [ 70.307990][ T5715] nf_setsockopt+0x195/0x1b0 [ 70.308072][ T5715] ip_setsockopt+0xea/0x100 [ 70.308103][ T5715] udp_setsockopt+0x95/0xb0 [ 70.308129][ T5715] sock_common_setsockopt+0x64/0x80 [ 70.308214][ T5715] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 70.308255][ T5715] __sys_setsockopt+0x187/0x200 [ 70.308307][ T5715] __x64_sys_setsockopt+0x66/0x80 [ 70.308336][ T5715] x64_sys_call+0x282e/0x2dc0 [ 70.308368][ T5715] do_syscall_64+0xc9/0x1c0 [ 70.308404][ T5715] ? clear_bhb_loop+0x55/0xb0 [ 70.308489][ T5715] ? clear_bhb_loop+0x55/0xb0 [ 70.308604][ T5715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.308637][ T5715] RIP: 0033:0x7fe839ddcde9 [ 70.308656][ T5715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.308679][ T5715] RSP: 002b:00007fe838441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.308702][ T5715] RAX: ffffffffffffffda RBX: 00007fe839ff5fa0 RCX: 00007fe839ddcde9 [ 70.308717][ T5715] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 70.308732][ T5715] RBP: 00007fe838441090 R08: 0000000000000368 R09: 0000000000000000 [ 70.308795][ T5715] R10: 0000400000000480 R11: 0000000000000246 R12: 0000000000000001 [ 70.308811][ T5715] R13: 0000000000000000 R14: 00007fe839ff5fa0 R15: 00007ffcbc3ace18 [ 70.308835][ T5715] [ 70.312559][ T5723] EXT4-fs: Ignoring removed bh option [ 70.315240][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 70.335611][ T5723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.435636][ T5730] random: crng reseeded on system resumption [ 70.441045][ T29] audit: type=1400 audit(1739953265.951:1572): avc: denied { append } for pid=5729 comm="syz.2.531" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.529969][ T5723] EXT4-fs (loop3): 1 truncate cleaned up [ 70.589040][ T5732] xt_CT: No such helper "syz1" [ 70.623196][ T5723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.669416][ T29] audit: type=1400 audit(1739953266.171:1573): avc: denied { mount } for pid=5737 comm="syz.0.532" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.717662][ T29] audit: type=1400 audit(1739953266.221:1574): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.742708][ T5740] loop5: detected capacity change from 0 to 2048 [ 70.793983][ T5740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.816525][ T29] audit: type=1400 audit(1739953266.331:1575): avc: denied { setopt } for pid=5729 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.857973][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.877039][ T5458] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.944509][ T5751] loop3: detected capacity change from 0 to 2048 [ 70.959698][ T5753] loop0: detected capacity change from 0 to 2048 [ 70.991646][ T5753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.997334][ T5747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 71.012935][ T24] ================================================================== [ 71.021042][ T24] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 71.028980][ T24] [ 71.030167][ T5753] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.538: bg 0: block 234: padding at end of block bitmap is not set [ 71.031299][ T24] read-write to 0xffff8881004c1e70 of 8 bytes by task 3289 on cpu 0: [ 71.031319][ T24] __filemap_add_folio+0x430/0x6f0 [ 71.047960][ T5753] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 71.053493][ T24] filemap_add_folio+0x9c/0x1b0 [ 71.058660][ T5753] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.058660][ T5753] [ 71.071101][ T24] page_cache_ra_unbounded+0x1c1/0x350 [ 71.071166][ T24] page_cache_sync_ra+0x252/0x680 [ 71.071199][ T24] filemap_get_pages+0x2ca/0x11a0 [ 71.071218][ T24] filemap_read+0x230/0x8c0 [ 71.076078][ T5753] EXT4-fs (loop0): Total free blocks count 0 [ 71.085660][ T24] blkdev_read_iter+0x228/0x2d0 [ 71.085698][ T24] vfs_read+0x5cc/0x6f0 [ 71.091156][ T5753] EXT4-fs (loop0): Free/Dirty block details [ 71.096183][ T24] ksys_read+0xe8/0x1b0 [ 71.096213][ T24] __x64_sys_read+0x42/0x50 [ 71.101229][ T5753] EXT4-fs (loop0): free_blocks=0 [ 71.105699][ T24] x64_sys_call+0x2874/0x2dc0 [ 71.105731][ T24] do_syscall_64+0xc9/0x1c0 [ 71.111716][ T5753] EXT4-fs (loop0): dirty_blocks=32 [ 71.116545][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.120723][ T5753] EXT4-fs (loop0): Block reservation details [ 71.126600][ T24] [ 71.126608][ T24] read to 0xffff8881004c1e70 of 8 bytes by task 24 on cpu 1: [ 71.126626][ T24] nr_blockdev_pages+0x7c/0xd0 [ 71.130788][ T5753] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 71.135273][ T24] si_meminfo+0x87/0xd0 [ 71.190914][ T24] update_defense_level+0x49/0x5b0 [ 71.196033][ T24] defense_work_handler+0x1f/0x80 [ 71.201060][ T24] process_scheduled_works+0x4db/0xa20 [ 71.206520][ T24] worker_thread+0x51d/0x6f0 [ 71.211116][ T24] kthread+0x4ae/0x520 [ 71.215197][ T24] ret_from_fork+0x4b/0x60 [ 71.219627][ T24] ret_from_fork_asm+0x1a/0x30 [ 71.224395][ T24] [ 71.226715][ T24] value changed: 0x0000000000000007 -> 0x0000000000000008 [ 71.233837][ T24] [ 71.236160][ T24] Reported by Kernel Concurrency Sanitizer on: [ 71.242322][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 71.252940][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 71.263014][ T24] Workqueue: events_long defense_work_handler [ 71.269086][ T24] ================================================================== [ 71.285240][ T5758] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.327089][ T29] audit: type=1326 audit(1739953266.831:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee185cde9 code=0x7ffc0000 [ 71.350494][ T29] audit: type=1326 audit(1739953266.831:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6ee185cde9 code=0x7ffc0000 [ 71.373894][ T29] audit: type=1326 audit(1739953266.831:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee185cde9 code=0x7ffc0000 [ 71.380382][ T5751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.397385][ T29] audit: type=1326 audit(1739953266.831:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.5.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee185cde9 code=0x7ffc0000 [ 71.440030][ T5751] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.536: bg 0: block 234: padding at end of block bitmap is not set [ 71.461294][ T5751] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 71.473918][ T5751] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.473918][ T5751] [ 71.483587][ T5751] EXT4-fs (loop3): Total free blocks count 0 [ 71.489612][ T5751] EXT4-fs (loop3): Free/Dirty block details [ 71.495560][ T5751] EXT4-fs (loop3): free_blocks=0 [ 71.496527][ T5767] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.500497][ T5751] EXT4-fs (loop3): dirty_blocks=32 [ 71.500514][ T5751] EXT4-fs (loop3): Block reservation details [ 71.512705][ T5767] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.512705][ T5767]