last executing test programs: 2m1.789342127s ago: executing program 3 (id=1198): socket$netlink(0x10, 0x3, 0x10) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) ppoll(&(0x7f0000000d40)=[{r0}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 2m1.682585409s ago: executing program 3 (id=1199): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) 2m1.456468432s ago: executing program 3 (id=1205): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0x2fe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2m1.394174263s ago: executing program 3 (id=1206): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x891018, 0x0) 2m1.374546393s ago: executing program 3 (id=1207): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 2m1.205158125s ago: executing program 3 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m1.205007995s ago: executing program 32 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 54.505606564s ago: executing program 4 (id=3138): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0x1, 0x4, 0xc42f, 0x5, 0x10, 0x0, {0x3}}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) r3 = eventfd2(0x0, 0x1) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r3, &(0x7f0000000280)=0x9, 0x8) 54.357358196s ago: executing program 4 (id=3140): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x0) 54.284694987s ago: executing program 4 (id=3142): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8c07, 0xe, @local, 0x1, 0x1, 0x4, 0x7}}}}}}, 0x0) 53.968071081s ago: executing program 4 (id=3145): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) sendfile(r0, r0, 0x0, 0x7a680000) 53.632076465s ago: executing program 4 (id=3152): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 52.842295976s ago: executing program 4 (id=3167): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 52.842087066s ago: executing program 33 (id=3167): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 50.233771681s ago: executing program 1 (id=3217): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x407, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x4}, {0x0, 0x1000}, {0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x40008040) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 50.184171911s ago: executing program 1 (id=3218): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 49.998576143s ago: executing program 1 (id=3222): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0xd384ed8852b2f03d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 49.903790335s ago: executing program 1 (id=3225): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) sendfile(r0, r0, 0x0, 0x7a680000) 49.683584918s ago: executing program 1 (id=3237): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 48.674149191s ago: executing program 1 (id=3263): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 48.616057732s ago: executing program 34 (id=3263): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 29.410779548s ago: executing program 6 (id=3800): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x13c4, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 29.327278439s ago: executing program 6 (id=3803): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x11, 0x10ffef8, 0x15, 0xa, 0x20000050, 0xfffffffc, 0x110, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 29.26559994s ago: executing program 6 (id=3805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xfffffffe) r3 = eventfd2(0x9, 0x80800) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) shutdown(r2, 0x0) 29.059901693s ago: executing program 6 (id=3813): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 28.981099484s ago: executing program 6 (id=3818): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 28.757939117s ago: executing program 6 (id=3825): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r2, &(0x7f0000000740)='foo', 0x3) 28.692676948s ago: executing program 35 (id=3825): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r2, &(0x7f0000000740)='foo', 0x3) 9.062335799s ago: executing program 8 (id=4292): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008085) 8.906357971s ago: executing program 8 (id=4293): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 8.906007451s ago: executing program 8 (id=4294): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000024879ede00ff040400000050c9e40000e8ffffffffffffff0000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/202, 0xca}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0x9, 0x4, 0x0, 0x70bd25, 0x0, [@sadb_sa={0x2, 0x1b, 0x4d4, 0x7b, 0x12, 0x3f, 0x2, 0x40000001}]}, 0x20}}, 0x4) 8.834736313s ago: executing program 8 (id=4295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 8.815521263s ago: executing program 8 (id=4296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 8.607751216s ago: executing program 8 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x3d) dup3(r0, r1, 0x0) r2 = open(0x0, 0x0, 0xd4) open(0x0, 0x0, 0x0) renameat2(r2, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3) 8.607594865s ago: executing program 36 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x3d) dup3(r0, r1, 0x0) r2 = open(0x0, 0x0, 0xd4) open(0x0, 0x0, 0x0) renameat2(r2, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3) 2.855079592s ago: executing program 7 (id=4386): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2.706198704s ago: executing program 7 (id=4393): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r0, 0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.006450177s ago: executing program 2 (id=4415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r2) close(r3) 928.616568ms ago: executing program 2 (id=4418): ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 914.681698ms ago: executing program 7 (id=4420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 874.228478ms ago: executing program 7 (id=4423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 851.494249ms ago: executing program 7 (id=4424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4000000000002ab}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 725.923431ms ago: executing program 2 (id=4429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 702.612171ms ago: executing program 2 (id=4430): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 665.634921ms ago: executing program 2 (id=4432): r0 = socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 587.545092ms ago: executing program 5 (id=4436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 554.129843ms ago: executing program 0 (id=4437): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 553.757023ms ago: executing program 5 (id=4438): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) close(r2) 526.788463ms ago: executing program 5 (id=4439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 513.577563ms ago: executing program 0 (id=4440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x1a) close(r4) 496.677883ms ago: executing program 9 (id=4441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 458.754724ms ago: executing program 9 (id=4442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x400c, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x462, &(0x7f0000000280)="$eJzs281vVFUbAPDn3nYKvMDbivjBh1pFY+NHSwGVhQs1mrjAxEQXumzaQpCBGloTIUSLMbgyxsS9cem/4Eo3xrgycanuDQkxbABXY+7MvXRmmBlgOu2Uzu+XXDjn3nN7zjPnnplz75kJYGCNZ/8kETsi4s+IGK1lGwuM1/67fvXC7I2rF2aTqFTe+Seplrt29cJsUbQ4b3uemUgj0s+T2Nei3sVz50/NlMvzZ/P81NLpD6cWz51//uTpmRPzJ+bPHDp69Mjh6ZdePPRCT+LM2nRt7ycL+/e8+f7Xbx37siH+pjh6ZLzTwacqlR5X118769LJcB8bwl0Zioisu0rV8T8aQ7HSeaPxxmd9bRywpiqVSmV7+8PL2fHKcF1hYBNJmob1cr8aAqyz4oM+u/8ttuZJwCtrM/XYEK68WrsByuK+nm+1I8OR5mVKTfe3vTQeEe8t//tttsXaPIcAAGjwYzb/ea7V/C+NB+vK/T9fGxqLiPsiYldE3B8RuyPigYhq2Yci4uG7rL95keTW+U96uavA7lA2/3s5X9tqnP8Vs78YG8pzO6vxl5LjJ8vzB/PXZCJKW7L8dOQP01v46fXfv2pXf/38L9uy+ou5YN6Oy8NbGs+Zm1maWW3chSsXI/YOt4o/ubkSkETEnojY22UdJ5/5fn/Djj9WkrePv4MerDNVvot4utb/y9EUfyHpvD45tTXK8weniqviVr/+duntdvWvKv4eyPr/fxGxtW4M1I7cjH8sqV+vXbz7Oi799UXbe5pur/+R5N1qeiTf9/HM0tLZ6YiR5Fit0fX7D62cW+SL8ln8Ewdaj/9dsfJK7IuI7CJ+JCIejYjH8rY/HhFPRMSBDvH/8tqTH3Qf/9rK4p9r+f7Xrv9XEiPRvKd1YujUzz80VDp2S/w3Ovf/kWpqIt9zJ+9/d9Ku7q5mAAAAuPekEbEjknTyZjpNJydr35ffHZGWFxaXnj2+8NGZuexY9YFbWjzpGq17Hjqd39bX8hcjovbVguL44fy58TdD26r5ydmF8ly/g4cBt73N+M/83WY9A9hE/F4LBpfxD4PL+IfBZfzD4Gox/rf1ox3A+mv1+f9pH9oBrL+m8W/ZDwaI+38YXMY/DC7jHwbS4ra4/Y/kOyaKv9Tl6Zs2EaUN0YxVJ0rt+j3dKC3cmInSPT4u+veeBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ev/BQAA//8qR9Mj") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x40}, {}, {}, {}, {0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x400}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 439.851304ms ago: executing program 0 (id=4443): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 341.386445ms ago: executing program 0 (id=4444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x7d98, &(0x7f0000000240)={0x0, 0x918a, 0x8, 0xffffffff, 0x24a}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 271.955686ms ago: executing program 0 (id=4445): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 221.625577ms ago: executing program 9 (id=4446): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xf97, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 185.922108ms ago: executing program 0 (id=4447): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r0, 0x0, 0x578410e9) sendfile(r3, r0, 0x0, 0x100000000) 162.818708ms ago: executing program 5 (id=4448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 143.535758ms ago: executing program 9 (id=4449): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) unshare(0x22020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00'}) io_uring_enter(r2, 0x3516, 0x4, 0x0, 0x0, 0x0) 80.463429ms ago: executing program 5 (id=4450): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdba, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 76.914439ms ago: executing program 9 (id=4451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r0, &(0x7f0000000100)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 16.57227ms ago: executing program 9 (id=4452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 14.12408ms ago: executing program 5 (id=4453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r3, 0x205, 0x0, 0x24dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x8000) 1.80902ms ago: executing program 2 (id=4454): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') pwrite64(r0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000002380)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00, 0xc00}]) 0s ago: executing program 7 (id=4455): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x44040) kernel console output (not intermixed with test programs): forwarding state [ 145.364145][T11561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.385665][ T29] audit: type=1400 audit(1745917937.631:4800): avc: denied { open } for pid=11634 comm="syz.6.3292" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 145.503741][T11561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.520415][T11653] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 145.527057][T11653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 145.534786][T11653] vhci_hcd vhci_hcd.0: Device attached [ 145.543100][T11653] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 145.549657][T11653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.557249][T11653] vhci_hcd vhci_hcd.0: Device attached [ 145.564064][T11653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 145.575318][T11653] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 145.582154][T11653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 145.589636][T11653] vhci_hcd vhci_hcd.0: Device attached [ 145.597733][T11653] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(11) [ 145.604510][T11653] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 145.612686][T11653] vhci_hcd vhci_hcd.0: Device attached [ 145.619337][T11653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 145.628669][T11653] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(15) [ 145.635345][T11653] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 145.643015][T11653] vhci_hcd vhci_hcd.0: Device attached [ 145.660745][T11653] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(17) [ 145.667563][T11653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 145.675318][T11653] vhci_hcd vhci_hcd.0: Device attached [ 145.685434][T11671] vhci_hcd: connection closed [ 145.685829][T11667] vhci_hcd: connection closed [ 145.687892][T11674] vhci_hcd: connection closed [ 145.690876][T11663] vhci_hcd: connection closed [ 145.695331][ T4104] vhci_hcd: stop threads [ 145.700367][T11655] vhci_hcd: connection closed [ 145.704662][ T4104] vhci_hcd: release socket [ 145.704679][ T4104] vhci_hcd: disconnect device [ 145.715493][ T8811] vhci_hcd: vhci_device speed not set [ 145.719131][T11659] vhci_hcd: connection closed [ 145.730072][ T4104] vhci_hcd: stop threads [ 145.739099][ T4104] vhci_hcd: release socket [ 145.743551][ T4104] vhci_hcd: disconnect device [ 145.744825][T11561] veth0_vlan: entered promiscuous mode [ 145.749960][ T4104] vhci_hcd: stop threads [ 145.758082][ T4104] vhci_hcd: release socket [ 145.762635][ T4104] vhci_hcd: disconnect device [ 145.766817][T11561] veth1_vlan: entered promiscuous mode [ 145.768141][ T4104] vhci_hcd: stop threads [ 145.777018][ T8811] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 145.777081][T11656] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 145.790576][ T4104] vhci_hcd: release socket [ 145.792109][T11561] veth0_macvtap: entered promiscuous mode [ 145.795009][ T4104] vhci_hcd: disconnect device [ 145.804049][T11561] veth1_macvtap: entered promiscuous mode [ 145.805965][ T4104] vhci_hcd: stop threads [ 145.815540][ T4104] vhci_hcd: release socket [ 145.819990][ T4104] vhci_hcd: disconnect device [ 145.825084][ T4104] vhci_hcd: stop threads [ 145.829429][ T4104] vhci_hcd: release socket [ 145.833920][ T4104] vhci_hcd: disconnect device [ 145.838609][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.838656][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.838672][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.869710][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.879593][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.890084][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.899997][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.910519][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.921385][T11561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.934970][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.945618][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.955488][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.965966][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.975962][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.986562][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.996428][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.006944][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.017979][T11561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.057094][T11561] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.066041][T11561] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.074765][T11561] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.083656][T11561] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.140111][ T29] audit: type=1326 audit(1745917938.381:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 146.175721][ T5545] usb 5-1: enqueue for inactive port 0 [ 146.178212][ T29] audit: type=1326 audit(1745917938.411:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 146.181232][ T5545] usb 5-1: enqueue for inactive port 0 [ 146.205165][ T29] audit: type=1326 audit(1745917938.411:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 146.234197][ T29] audit: type=1326 audit(1745917938.411:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 146.257898][ T29] audit: type=1326 audit(1745917938.411:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 146.281426][ T29] audit: type=1326 audit(1745917938.411:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 146.305011][ T29] audit: type=1326 audit(1745917938.411:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 146.328549][ T29] audit: type=1326 audit(1745917938.411:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 146.357243][ T5545] vhci_hcd: vhci_device speed not set [ 146.453637][T11708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11708 comm=syz.0.3309 [ 146.505179][T11716] loop0: detected capacity change from 0 to 512 [ 146.555367][T11716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.576613][T11716] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.613634][T11716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.683283][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.772779][T11738] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 146.844944][T11746] loop7: detected capacity change from 0 to 128 [ 147.092085][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 147.114805][T11781] loop0: detected capacity change from 0 to 128 [ 147.140413][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3341'. [ 147.171240][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3341'. [ 147.201963][T11790] smc: net device bond0 applied user defined pnetid SYZ2 [ 147.213960][T11790] smc: net device bond0 erased user defined pnetid SYZ2 [ 147.315261][T11802] loop6: detected capacity change from 0 to 256 [ 147.345073][T11804] team0 (unregistering): Port device team_slave_0 removed [ 147.370660][T11804] team0 (unregistering): Port device team_slave_1 removed [ 147.385976][T11806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3356'. [ 147.589262][T11829] loop6: detected capacity change from 0 to 128 [ 147.598102][T11829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 147.606541][T11829] System zones: 1-3, 19-19, 35-36 [ 147.607133][T11831] loop5: detected capacity change from 0 to 128 [ 147.612200][T11829] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.630315][T11829] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.685937][T11276] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.702087][T11834] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 147.710169][T11836] loop0: detected capacity change from 0 to 1024 [ 147.720023][T11836] EXT4-fs: Ignoring removed orlov option [ 147.725929][T11836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.737406][T11836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.899511][T11846] team0 (unregistering): Port device team_slave_0 removed [ 147.909154][T11846] team0 (unregistering): Port device team_slave_1 removed [ 147.947526][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.309585][T11875] loop5: detected capacity change from 0 to 2048 [ 148.376184][T11875] loop5: p1 < > p4 [ 148.381310][T11875] loop5: p4 size 8388608 extends beyond EOD, truncated [ 148.448155][T11886] bridge0: entered promiscuous mode [ 148.456192][T11886] bridge0: port 3(macvlan2) entered blocking state [ 148.462763][T11886] bridge0: port 3(macvlan2) entered disabled state [ 148.475761][T11886] macvlan2: entered allmulticast mode [ 148.481394][T11886] bridge0: entered allmulticast mode [ 148.490468][T11886] macvlan2: left allmulticast mode [ 148.495731][T11886] bridge0: left allmulticast mode [ 148.507547][T11886] bridge0: left promiscuous mode [ 149.072716][T11921] team0 (unregistering): Port device team_slave_0 removed [ 149.148575][T11925] loop7: detected capacity change from 0 to 164 [ 149.171416][T11925] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.193325][T11925] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.225041][T11925] Symlink component flag not implemented [ 149.230894][T11925] Symlink component flag not implemented [ 149.244986][T11921] team0 (unregistering): Port device team_slave_1 removed [ 149.279063][T11925] Symlink component flag not implemented (7) [ 149.285201][T11925] Symlink component flag not implemented (116) [ 149.355711][ T3378] usb usb6-port7: attempt power cycle [ 149.450595][T11918] loop0: detected capacity change from 0 to 2048 [ 149.484157][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3412'. [ 149.509951][T11918] Alternate GPT is invalid, using primary GPT. [ 149.518946][T11918] loop0: p1 p2 p3 [ 149.720369][T11949] loop0: detected capacity change from 0 to 512 [ 149.728591][T11949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.746711][T11949] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3417: invalid block [ 149.768848][T11949] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3417: invalid indirect mapped block 4294967295 (level 1) [ 149.785498][T11949] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3417: invalid indirect mapped block 4294967295 (level 1) [ 149.804674][T11949] EXT4-fs (loop0): 2 truncates cleaned up [ 149.817152][T11949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.861868][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.880570][T11954] bond0: entered promiscuous mode [ 149.885909][T11954] bond_slave_0: entered promiscuous mode [ 149.891787][T11954] bond_slave_1: entered promiscuous mode [ 149.899755][T11954] batadv0: entered promiscuous mode [ 149.905812][T11954] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 149.914813][T11954] Cannot create hsr debugfs directory [ 149.921686][T11954] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 149.931033][T11954] bond0: left promiscuous mode [ 149.935911][T11954] bond_slave_0: left promiscuous mode [ 149.941397][T11954] bond_slave_1: left promiscuous mode [ 149.949524][T11954] batadv0: left promiscuous mode [ 149.986879][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3419'. [ 150.133989][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3419'. [ 150.287645][T11981] ref_ctr_offset mismatch. inode: 0x143 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 150.301465][T11981] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 150.310219][T11981] ref_ctr decrement failed for inode: 0x143 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005a680 [ 150.323854][T11981] uprobe: syz.2.3428:11981 failed to unregister, leaking uprobe [ 150.588763][T11994] loop6: detected capacity change from 0 to 164 [ 150.625921][T11994] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 150.645040][T12001] hub 9-0:1.0: USB hub found [ 150.650572][T12001] hub 9-0:1.0: 8 ports detected [ 150.757477][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 150.757495][ T29] audit: type=1326 audit(1745917943.001:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 150.805952][ T8811] usb 13-1: enqueue for inactive port 0 [ 150.825877][ T8811] usb 13-1: enqueue for inactive port 0 [ 150.840338][ T29] audit: type=1326 audit(1745917943.031:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 150.863942][ T29] audit: type=1326 audit(1745917943.031:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 150.887778][ T29] audit: type=1326 audit(1745917943.031:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 150.911492][ T29] audit: type=1326 audit(1745917943.031:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 150.915562][ T8811] vhci_hcd: vhci_device speed not set [ 150.935321][ T29] audit: type=1326 audit(1745917943.031:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 150.964181][ T29] audit: type=1326 audit(1745917943.031:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 150.987779][ T29] audit: type=1326 audit(1745917943.031:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 151.011404][ T29] audit: type=1326 audit(1745917943.031:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 151.035059][ T29] audit: type=1326 audit(1745917943.031:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 151.069652][T12008] pimreg: entered allmulticast mode [ 151.085247][T12008] pimreg: left allmulticast mode [ 151.113166][T12014] ref_ctr_offset mismatch. inode: 0x9e9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 151.236048][ T3378] usb usb6-port7: unable to enumerate USB device [ 151.387384][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 151.448085][T12043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12043 comm=syz.7.3455 [ 151.480889][T12044] loop2: detected capacity change from 0 to 128 [ 151.520949][T12027] loop6: detected capacity change from 0 to 2048 [ 151.541015][T12048] loop5: detected capacity change from 0 to 2048 [ 151.565343][T12027] Alternate GPT is invalid, using primary GPT. [ 151.576489][T12027] loop6: p1 p2 p3 [ 151.599169][T12048] loop5: p1 < > p4 [ 151.603655][T12048] loop5: p4 size 8388608 extends beyond EOD, truncated [ 151.708282][T12057] loop7: detected capacity change from 0 to 164 [ 151.740500][T12057] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 151.926475][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3475'. [ 151.991008][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.004992][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.035706][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3481'. [ 152.057204][T12101] loop0: detected capacity change from 0 to 164 [ 152.066338][T12101] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 152.732544][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3489'. [ 153.019085][T12124] loop6: detected capacity change from 0 to 512 [ 153.051566][T12127] loop0: detected capacity change from 0 to 1024 [ 153.066842][T12124] EXT4-fs (loop6): orphan cleanup on readonly fs [ 153.088338][T12124] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3492: bad orphan inode 13 [ 153.106705][T12127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.126199][T12124] ext4_test_bit(bit=12, block=18) = 1 [ 153.131639][T12124] is_bad_inode(inode)=0 [ 153.135831][T12124] NEXT_ORPHAN(inode)=2130706432 [ 153.140693][T12124] max_ino=32 [ 153.143903][T12124] i_nlink=1 [ 153.179847][T12124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.254694][T11276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.373467][T12149] loop7: detected capacity change from 0 to 512 [ 153.382034][T12149] EXT4-fs: Ignoring removed nobh option [ 153.414863][T12149] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3501: invalid indirect mapped block 256 (level 2) [ 153.428923][T12149] EXT4-fs (loop7): 2 truncates cleaned up [ 153.435057][T12149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.775150][ T4132] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:44: bg 0: block 5: invalid block bitmap [ 153.788308][ T4132] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 153.800850][ T4132] EXT4-fs (loop7): This should not happen!! Data will be lost [ 153.800850][ T4132] [ 153.810734][ T4132] EXT4-fs (loop7): Total free blocks count 0 [ 153.816776][ T4132] EXT4-fs (loop7): Free/Dirty block details [ 153.822805][ T4132] EXT4-fs (loop7): free_blocks=0 [ 153.827789][ T4132] EXT4-fs (loop7): dirty_blocks=16000 [ 153.833277][ T4132] EXT4-fs (loop7): Block reservation details [ 153.839299][ T4132] EXT4-fs (loop7): i_reserved_data_blocks=16000 [ 153.854330][ T4132] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 153.902189][T12158] bridge0: entered allmulticast mode [ 153.905900][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.909385][T12158] bridge_slave_1: left allmulticast mode [ 153.922196][T12158] bridge_slave_1: left promiscuous mode [ 153.928106][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.941523][T12158] bridge_slave_0: left promiscuous mode [ 153.947444][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.973098][T12164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3507'. [ 154.116316][T12176] loop7: detected capacity change from 0 to 1024 [ 154.124685][T12176] EXT4-fs: Ignoring removed oldalloc option [ 154.136803][T12176] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 154.167871][T12174] SELinux: failed to load policy [ 154.210331][T12188] serio: Serial port ptm0 [ 154.238903][T12190] ipvlan2: entered promiscuous mode [ 154.245919][T12190] bridge0: port 3(ipvlan2) entered blocking state [ 154.252392][T12190] bridge0: port 3(ipvlan2) entered disabled state [ 154.259198][T12190] ipvlan2: entered allmulticast mode [ 154.264497][T12190] bridge0: entered allmulticast mode [ 154.270414][T12190] ipvlan2: left allmulticast mode [ 154.275483][T12190] bridge0: left allmulticast mode [ 154.289735][T12196] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3521'. [ 154.299309][T12196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.334949][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3523'. [ 154.432849][T12212] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3529'. [ 154.563351][T12225] bridge0: entered promiscuous mode [ 154.572503][T12225] bridge0: port 3(macvlan2) entered blocking state [ 154.575810][T12232] 9pnet: p9_errstr2errno: server reported unknown error àûu0*óiÝÙÆ‡Þ¿_ ößk¿."¦À#pÍ/¦ò¼yL…aµ»~+>¼“ø«š3…l{@!2¶!®÷9kˆ 8I$ý [ 154.579316][T12225] bridge0: port 3(macvlan2) entered disabled state [ 154.600330][T12225] macvlan2: entered allmulticast mode [ 154.605917][T12225] bridge0: entered allmulticast mode [ 154.614763][T12225] macvlan2: left allmulticast mode [ 154.620096][T12225] bridge0: left allmulticast mode [ 154.620109][T12228] loop7: detected capacity change from 0 to 8192 [ 154.632979][T12228] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.638850][T12225] bridge0: left promiscuous mode [ 154.982671][T12249] loop2: detected capacity change from 0 to 164 [ 154.991637][T12249] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 155.050163][T12253] pim6reg1: entered promiscuous mode [ 155.055633][T12253] pim6reg1: entered allmulticast mode [ 155.090919][T12261] 9pnet: p9_errstr2errno: server reported unknown error àûu0*óiÝÙÆ‡Þ¿_ ößk¿."¦À#pÍ/¦ò¼yL…aµ»~+>¼“ø«š3…l{@!2¶!®÷9kˆ 8I$ý [ 155.109927][T12259] loop0: detected capacity change from 0 to 512 [ 155.116852][T12259] EXT4-fs: Ignoring removed oldalloc option [ 155.124500][T12259] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3550: Parent and EA inode have the same ino 15 [ 155.138998][T12259] EXT4-fs (loop0): Remounting filesystem read-only [ 155.145733][T12259] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 155.157239][T12259] EXT4-fs (loop0): 1 orphan inode deleted [ 155.169912][T12259] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3550'. [ 155.206294][T12259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.238055][T12259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.253130][T12272] loop5: detected capacity change from 0 to 512 [ 155.259982][T12272] EXT4-fs: Ignoring removed nobh option [ 155.260246][T12259] bond0 (unregistering): Released all slaves [ 155.523443][T12283] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3561'. [ 155.538285][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 155.634885][T12300] loop0: detected capacity change from 0 to 1024 [ 155.641871][T12300] EXT4-fs: Ignoring removed orlov option [ 155.647703][T12300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.979479][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 155.979496][ T29] audit: type=1400 audit(1745917948.221:5043): avc: denied { listen } for pid=12319 comm="syz.7.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.005925][ T29] audit: type=1400 audit(1745917948.221:5044): avc: denied { read } for pid=12319 comm="syz.7.3576" path="socket:[37662]" dev="sockfs" ino=37662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.072874][ T29] audit: type=1400 audit(1745917948.311:5045): avc: denied { associate } for pid=12329 comm="syz.6.3580" name="1" dev="devpts" ino=4 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 156.119451][ T29] audit: type=1400 audit(1745917948.361:5046): avc: denied { read } for pid=12333 comm="syz.7.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.149401][T12337] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.156646][T12337] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.164116][T12337] bridge0: entered allmulticast mode [ 156.175714][T12337] bridge_slave_1: left allmulticast mode [ 156.181397][T12337] bridge_slave_1: left promiscuous mode [ 156.187498][T12337] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.196974][T12337] bridge_slave_0: left allmulticast mode [ 156.202653][T12337] bridge_slave_0: left promiscuous mode [ 156.208606][T12337] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.366610][T12347] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 156.469004][T12359] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 156.812133][T12388] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.858940][T12388] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.912134][T12392] netlink: 'syz.5.3608': attribute type 10 has an invalid length. [ 156.923030][T12388] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.020376][T12388] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.070152][ T29] audit: type=1400 audit(1745917949.311:5047): avc: denied { accept } for pid=12409 comm="syz.7.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.092684][ T29] audit: type=1400 audit(1745917949.331:5048): avc: denied { read } for pid=12409 comm="syz.7.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.124410][T12388] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.148535][T12388] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.161436][T12388] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.174381][T12388] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.281700][T12421] netlink: 'syz.5.3619': attribute type 4 has an invalid length. [ 157.704986][T12445] loop2: detected capacity change from 0 to 1024 [ 157.711825][T12445] EXT4-fs: Ignoring removed orlov option [ 157.717641][T12445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.954416][ T29] audit: type=1400 audit(1745917950.191:5049): avc: denied { setopt } for pid=12461 comm="syz.5.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.994846][ T29] audit: type=1400 audit(1745917950.191:5050): avc: denied { write } for pid=12461 comm="syz.5.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.019948][ T29] audit: type=1326 audit(1745917950.261:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.5.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 158.043723][ T29] audit: type=1326 audit(1745917950.261:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.5.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 158.164699][T12470] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 158.312587][T12491] vlan2: entered allmulticast mode [ 158.412837][T12499] netlink: 191080 bytes leftover after parsing attributes in process `wg1'. [ 158.429052][T12499] netlink: zone id is out of range [ 158.437598][T12499] netlink: zone id is out of range [ 158.444958][T12499] netlink: zone id is out of range [ 158.450168][T12499] netlink: zone id is out of range [ 158.455290][T12499] netlink: zone id is out of range [ 158.460475][T12499] netlink: zone id is out of range [ 158.465777][T12499] netlink: zone id is out of range [ 158.470922][T12499] netlink: zone id is out of range [ 158.476162][T12499] netlink: zone id is out of range [ 158.534634][T12507] loop0: detected capacity change from 0 to 512 [ 158.544336][T12508] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3657'. [ 158.560360][T12510] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.567692][T12510] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.587452][T12507] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.590241][T12514] loop7: detected capacity change from 0 to 512 [ 158.606493][T12514] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 158.608383][T12510] bridge0: entered allmulticast mode [ 158.633172][T12510] bridge_slave_1: left allmulticast mode [ 158.640479][T12510] bridge_slave_1: left promiscuous mode [ 158.647150][T12514] EXT4-fs (loop7): 1 truncate cleaned up [ 158.653514][T12510] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.667077][T12510] bridge_slave_0: left allmulticast mode [ 158.672769][T12510] bridge_slave_0: left promiscuous mode [ 158.679930][T12510] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.745370][T12523] loop7: detected capacity change from 0 to 1024 [ 158.828513][T12530] sd 0:0:1:0: device reset [ 158.852250][T12533] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3664'. [ 159.093077][T12563] loop0: detected capacity change from 0 to 512 [ 159.102219][T12563] EXT4-fs (loop0): orphan cleanup on readonly fs [ 159.109177][T12563] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3677: bg 0: block 248: padding at end of block bitmap is not set [ 159.124084][T12563] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3677: Failed to acquire dquot type 1 [ 159.137868][T12563] EXT4-fs (loop0): 1 truncate cleaned up [ 159.148005][T12563] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.3677: deleted inode referenced: 12 [ 159.490110][T12580] loop0: detected capacity change from 0 to 512 [ 159.496820][T12580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.503843][T12580] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.516252][T12580] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 159.530968][T12580] EXT4-fs (loop0): 1 truncate cleaned up [ 159.712423][T12593] infiniband syz!: set active [ 159.717320][T12593] infiniband syz!: added team_slave_0 [ 159.728852][T12593] RDS/IB: syz!: added [ 159.733050][T12593] smc: adding ib device syz! with port count 1 [ 159.739453][T12593] smc: ib device syz! port 1 has pnetid [ 160.064992][T12613] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3697'. [ 160.130065][T12618] serio: Serial port ptm0 [ 160.147194][T12622] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3701'. [ 160.158904][T12621] loop2: detected capacity change from 0 to 164 [ 160.187105][T12621] bio_check_eod: 35 callbacks suppressed [ 160.187124][T12621] +}[@: attempt to access beyond end of device [ 160.187124][T12621] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 160.211386][T12621] +}[@: attempt to access beyond end of device [ 160.211386][T12621] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 160.280197][T12632] loop2: detected capacity change from 0 to 1024 [ 160.316732][T12632] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 160.367473][T12640] loop7: detected capacity change from 0 to 1024 [ 160.384265][T12640] EXT4-fs: Ignoring removed oldalloc option [ 160.402953][T12640] EXT4-fs: Ignoring removed orlov option [ 160.418013][T12640] EXT4-fs (loop7): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 160.470343][T12640] EXT4-fs mount: 18 callbacks suppressed [ 160.470363][T12640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.524641][T12654] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3714'. [ 160.543453][T12640] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 160.561067][T12640] EXT4-fs (loop7): Remounting filesystem read-only [ 160.590602][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.629653][T12660] pim6reg1: entered promiscuous mode [ 160.635108][T12660] pim6reg1: entered allmulticast mode [ 160.772127][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3727'. [ 160.781229][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3727'. [ 160.819633][T12684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12684 comm=syz.7.3730 [ 160.945128][T12702] netlink: 'syz.5.3737': attribute type 4 has an invalid length. [ 160.974842][T12704] loop5: detected capacity change from 0 to 512 [ 160.983937][T12704] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 160.992863][T12704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.005787][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 161.005800][ T29] audit: type=1326 audit(1745917953.251:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e6cc1d2d0 code=0x7ffc0000 [ 161.048824][ T29] audit: type=1326 audit(1745917953.251:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4e6cc1d6b7 code=0x7ffc0000 [ 161.072286][ T29] audit: type=1326 audit(1745917953.251:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e6cc1d2d0 code=0x7ffc0000 [ 161.086363][T12704] EXT4-fs error (device loop5): ext4_lookup:1793: inode #2: comm syz.5.3738: deleted inode referenced: 12 [ 161.095830][ T29] audit: type=1326 audit(1745917953.251:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 161.095930][ T29] audit: type=1326 audit(1745917953.251:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 161.095962][ T29] audit: type=1326 audit(1745917953.251:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 161.096002][ T29] audit: type=1326 audit(1745917953.251:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 161.096030][ T29] audit: type=1326 audit(1745917953.251:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 161.096134][ T29] audit: type=1326 audit(1745917953.251:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 161.096168][ T29] audit: type=1326 audit(1745917953.251:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12703 comm="syz.5.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 161.308039][T12714] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3742'. [ 161.319984][ T6377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.341577][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'. [ 161.605915][T12737] loop5: detected capacity change from 0 to 512 [ 161.612764][T12737] EXT4-fs: Ignoring removed oldalloc option [ 161.613856][T12739] serio: Serial port ptm0 [ 161.628862][T12737] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.638185][T12737] bond_slave_0: left promiscuous mode [ 161.644433][T12737] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.657027][T12737] bond_slave_1: left promiscuous mode [ 161.662762][T12737] $Hÿ (unregistering): Released all slaves [ 161.705137][T12743] loop7: detected capacity change from 0 to 512 [ 161.720311][T12743] EXT4-fs (loop7): orphan cleanup on readonly fs [ 161.732320][T12743] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3755: bg 0: block 248: padding at end of block bitmap is not set [ 161.750625][T12743] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3755: Failed to acquire dquot type 1 [ 161.770289][T12743] EXT4-fs (loop7): 1 truncate cleaned up [ 161.779525][T12743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.802701][T12743] EXT4-fs error (device loop7): ext4_lookup:1793: inode #2: comm syz.7.3755: deleted inode referenced: 12 [ 161.828724][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.861680][T12756] loop7: detected capacity change from 0 to 512 [ 161.870577][T12756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.881150][T12756] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 161.894265][T12756] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 161.911306][T12756] EXT4-fs (loop7): 1 truncate cleaned up [ 161.917649][T12756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.920763][T12765] loop0: detected capacity change from 0 to 512 [ 161.939672][T12765] EXT4-fs: inline encryption not supported [ 161.974535][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.975141][T12765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.998007][T12765] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.059942][T12776] loop5: detected capacity change from 0 to 512 [ 162.082469][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.106084][T12780] loop6: detected capacity change from 0 to 1024 [ 162.112898][T12780] EXT4-fs: Ignoring removed oldalloc option [ 162.120617][T12780] EXT4-fs: Ignoring removed orlov option [ 162.127777][T12780] EXT4-fs (loop6): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 162.158552][T12780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.187508][T12780] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 162.203642][T12780] EXT4-fs (loop6): Remounting filesystem read-only [ 162.231835][T11276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.256514][T12791] loop0: detected capacity change from 0 to 2048 [ 162.277959][T12791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.302092][T12791] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.320294][T12796] loop6: detected capacity change from 0 to 512 [ 162.349705][T12791] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3784: bg 0: block 345: padding at end of block bitmap is not set [ 162.388964][T12796] EXT4-fs (loop6): orphan cleanup on readonly fs [ 162.401532][T12791] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 162.414033][T12791] EXT4-fs (loop0): This should not happen!! Data will be lost [ 162.414033][T12791] [ 162.437682][T12796] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3773: bg 0: block 248: padding at end of block bitmap is not set [ 162.459697][T12802] netlink: 'syz.7.3777': attribute type 39 has an invalid length. [ 162.504967][T12796] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3773: Failed to acquire dquot type 1 [ 162.525157][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.544170][T12796] EXT4-fs (loop6): 1 truncate cleaned up [ 162.556361][T12806] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 162.567281][T12796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.605147][T12796] EXT4-fs error (device loop6): ext4_lookup:1793: inode #2: comm syz.6.3773: deleted inode referenced: 12 [ 162.650996][T11276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.694469][T12823] loop6: detected capacity change from 0 to 512 [ 162.715118][T12823] EXT4-fs (loop6): orphan cleanup on readonly fs [ 162.724421][T12823] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3787: bad orphan inode 13 [ 162.745484][T12823] ext4_test_bit(bit=12, block=18) = 1 [ 162.750919][T12823] is_bad_inode(inode)=0 [ 162.755109][T12823] NEXT_ORPHAN(inode)=2130706432 [ 162.760047][T12823] max_ino=32 [ 162.763263][T12823] i_nlink=1 [ 162.767263][T12823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.785417][T12823] syz.6.3787 (12823): attempted to duplicate a private mapping with mremap. This is not supported. [ 162.813931][T12823] EXT4-fs error (device loop6): ext4_lookup:1793: inode #2: comm syz.6.3787: deleted inode referenced: 12 [ 162.911851][T11276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.962897][T12839] loop6: detected capacity change from 0 to 128 [ 162.980826][T12839] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.994719][T12839] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.031128][T12839] EXT4-fs error (device loop6): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.6.3796: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 163.064284][T11276] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.093696][T12844] netem: unknown loss type 13 [ 163.099782][T12844] netem: change failed [ 163.193105][T12853] loop2: detected capacity change from 0 to 512 [ 163.213975][T12854] loop7: detected capacity change from 0 to 512 [ 163.224973][T12853] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.234920][T12853] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3798: bg 0: block 248: padding at end of block bitmap is not set [ 163.252723][T12853] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3798: Failed to acquire dquot type 1 [ 163.266728][T12853] EXT4-fs (loop2): 1 truncate cleaned up [ 163.274737][T12853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.301089][T12854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.315616][T12854] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.347101][T12853] EXT4-fs error (device loop2): ext4_lookup:1793: inode #2: comm syz.2.3798: deleted inode referenced: 12 [ 163.380497][T10950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.390403][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.422745][T12875] __nla_validate_parse: 4 callbacks suppressed [ 163.422764][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'. [ 163.422798][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3812'. [ 163.435668][T12877] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3810'. [ 163.449719][T12875] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.471468][T12875] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.471501][T12875] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.471546][T12875] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.629872][T12891] loop5: detected capacity change from 0 to 512 [ 163.748854][ T51] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.808513][ T51] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.885124][T12910] loop2: detected capacity change from 0 to 527 [ 163.894363][T12910] EXT4-fs (loop2): failed to parse options in superblock:  [ 163.908647][T12910] EXT4-fs (loop2): Unsupported encryption level 4 [ 163.928142][ T51] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.967760][T12908] loop5: detected capacity change from 0 to 8192 [ 164.004679][T12908] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 164.023156][ T51] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.070473][T12925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3833'. [ 164.160579][T12932] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.179470][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 164.285552][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.301550][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.314000][ T51] bond0 (unregistering): Released all slaves [ 164.322282][T12941] loop5: detected capacity change from 0 to 1024 [ 164.329460][T12941] EXT4-fs: Ignoring removed nobh option [ 164.335060][T12941] EXT4-fs: Ignoring removed bh option [ 164.347728][T12932] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.398260][ T51] hsr_slave_0: left promiscuous mode [ 164.404265][ T51] hsr_slave_1: left promiscuous mode [ 164.410684][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.417728][T12946] loop5: detected capacity change from 0 to 2048 [ 164.418143][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.432196][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.439905][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.465006][ T51] veth1_macvtap: left promiscuous mode [ 164.470679][ T51] veth0_macvtap: left promiscuous mode [ 164.477746][ T51] veth1_vlan: left promiscuous mode [ 164.483197][ T51] veth0_vlan: left promiscuous mode [ 164.500319][T12950] loop5: detected capacity change from 0 to 512 [ 164.512415][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3842'. [ 164.567954][T12956] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 164.598750][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3846'. [ 164.643490][T12932] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.658420][T12958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.666114][T12958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.674250][T12958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.681866][T12958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.710044][T12932] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.761553][T12911] chnl_net:caif_netlink_parms(): no params data found [ 164.782058][T12932] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.813228][T12969] loop2: detected capacity change from 0 to 128 [ 164.821443][T12969] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.827248][T12932] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.833955][T12969] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.866417][T12932] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.887624][T12969] EXT4-fs error (device loop2): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.2.3849: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 164.892053][T12932] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.951348][T12911] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.958715][T12911] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.966127][T12911] bridge_slave_0: entered allmulticast mode [ 164.972979][T10950] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.973030][T12911] bridge_slave_0: entered promiscuous mode [ 164.989257][T12911] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.996853][T12911] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.004607][T12911] bridge_slave_1: entered allmulticast mode [ 165.011435][T12911] bridge_slave_1: entered promiscuous mode [ 165.051022][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3850'. [ 165.052239][T12911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.082878][T12911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.135698][T12911] team0: Port device team_slave_0 added [ 165.142599][T12911] team0: Port device team_slave_1 added [ 165.170950][T12911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.178109][T12911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.204154][T12911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.217976][T12911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.225040][T12911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.251047][T12911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.286514][T12911] hsr_slave_0: entered promiscuous mode [ 165.297277][T12911] hsr_slave_1: entered promiscuous mode [ 165.303552][T12911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.312696][T12911] Cannot create hsr debugfs directory [ 165.396022][T12911] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 165.405316][T12911] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 165.414739][T12911] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 165.424661][T12911] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 165.442096][T12911] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.449211][T12911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.456556][T12911] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.463684][T12911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.501143][T12911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.517122][ T4132] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.525295][ T4132] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.539461][T12911] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.553057][ T4125] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.560203][ T4125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.571253][ T4110] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.578472][ T4110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.641288][T13009] loop5: detected capacity change from 0 to 128 [ 165.669004][T12911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.804521][T12911] veth0_vlan: entered promiscuous mode [ 165.815768][T12911] veth1_vlan: entered promiscuous mode [ 165.838763][T12911] veth0_macvtap: entered promiscuous mode [ 165.847956][T12911] veth1_macvtap: entered promiscuous mode [ 165.859474][T12911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.870024][T12911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.881169][T12911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.892799][T12911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.903853][T12911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.915394][T12911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.929323][T12911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.937931][T12911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.949971][T12911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.961134][T12911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.971579][T12911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.981463][T12911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.991971][T12911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.004036][T12911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.019038][T12911] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.027986][T12911] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.036790][T12911] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.045635][T12911] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.100915][T13030] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 166.126075][T13029] 9pnet: p9_errstr2errno: server reported unknown error àûu0*óiÝÙÆ‡Þ¿_ ößk¿."¦À#pÍ/¦ò¼yL…aµ»~+>¼“ø«š3…l{@ [ 166.149919][T13032] loop8: detected capacity change from 0 to 4096 [ 166.171420][T13032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.202207][T13032] EXT4-fs (loop8): resizing filesystem from 512 to 0 blocks [ 166.211036][T13032] EXT4-fs warning (device loop8): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 166.240748][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 166.240766][ T29] audit: type=1326 audit(1745917958.481:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.272018][ T29] audit: type=1326 audit(1745917958.481:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.296871][ T29] audit: type=1326 audit(1745917958.481:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.321777][ T29] audit: type=1326 audit(1745917958.481:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.346758][ T29] audit: type=1326 audit(1745917958.481:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.370498][ T29] audit: type=1326 audit(1745917958.481:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.375140][T13046] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3873'. [ 166.395411][ T29] audit: type=1326 audit(1745917958.481:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.427924][ T29] audit: type=1326 audit(1745917958.481:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.451550][ T29] audit: type=1326 audit(1745917958.481:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13036 comm="syz.7.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1d653e969 code=0x7ffc0000 [ 166.478043][ T29] audit: type=1326 audit(1745917958.511:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.0.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc748f8e969 code=0x7ffc0000 [ 166.503795][T12911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.677070][T13058] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 166.750106][T13067] loop7: detected capacity change from 0 to 1024 [ 166.760684][T13068] netlink: 'syz.0.3882': attribute type 3 has an invalid length. [ 166.769102][T13068] netlink: 'syz.0.3882': attribute type 3 has an invalid length. [ 166.781135][T13067] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.828942][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.842961][T13074] netlink: 'syz.5.3886': attribute type 4 has an invalid length. [ 166.850948][T13074] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3886'. [ 167.009847][T13092] loop7: detected capacity change from 0 to 128 [ 167.016996][T13092] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 167.029857][T13092] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 167.037934][T13092] FAT-fs (loop7): Filesystem has been set read-only [ 167.044682][T13092] syz.7.3893: attempt to access beyond end of device [ 167.044682][T13092] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 167.158017][T13102] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.180773][T13104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.189086][T13104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.284977][T13109] loop7: detected capacity change from 0 to 128 [ 167.300968][T13109] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 167.315312][T13109] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.336270][T13114] loop0: detected capacity change from 0 to 128 [ 167.347239][T13114] syz.0.3902: attempt to access beyond end of device [ 167.347239][T13114] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 167.361216][T13114] syz.0.3902: attempt to access beyond end of device [ 167.361216][T13114] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 167.374963][T13114] syz.0.3902: attempt to access beyond end of device [ 167.374963][T13114] loop0: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 167.428723][T11561] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.597663][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.597663][ T51] loop0: rw=1, sector=185, nr_sectors = 96 limit=128 [ 167.622953][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.622953][ T51] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 167.639025][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.639025][ T51] loop0: rw=1, sector=305, nr_sectors = 8 limit=128 [ 167.656072][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.656072][ T51] loop0: rw=1, sector=321, nr_sectors = 8 limit=128 [ 167.671303][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.671303][ T51] loop0: rw=1, sector=337, nr_sectors = 8 limit=128 [ 167.686130][ T51] kworker/u8:3: attempt to access beyond end of device [ 167.686130][ T51] loop0: rw=1, sector=353, nr_sectors = 8 limit=128 [ 167.953407][T13144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.961079][T13144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.969090][T13144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.976634][T13144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.990628][T13136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.060786][T13148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.068163][T13148] IPv6: NLM_F_CREATE should be set when creating new route [ 168.139598][T13163] loop7: detected capacity change from 0 to 128 [ 168.491056][T13184] loop7: detected capacity change from 0 to 128 [ 168.587628][T13195] loop5: detected capacity change from 0 to 164 [ 168.594542][T13195] /dev/loop5: Can't open blockdev [ 168.874160][T13205] netlink: 'syz.5.3942': attribute type 39 has an invalid length. [ 169.383933][T13232] loop5: detected capacity change from 0 to 1024 [ 169.398346][T13232] loop5: detected capacity change from 0 to 512 [ 169.405056][T13232] EXT4-fs: Ignoring removed orlov option [ 169.411468][T13232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.420782][T13232] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 169.429973][T13232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.446079][T13232] EXT4-fs: Ignoring removed orlov option [ 169.722153][T13285] loop2: detected capacity change from 0 to 512 [ 169.737993][T13285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3948: bg 0: block 35: padding at end of block bitmap is not set [ 169.762881][T13285] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 169.782433][T13285] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3948: invalid indirect mapped block 4294967295 (level 1) [ 169.799416][T13285] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3948: invalid indirect mapped block 4294967295 (level 2) [ 169.820552][T13285] EXT4-fs (loop2): 1 truncate cleaned up [ 169.826845][T13285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.847435][T13303] loop7: detected capacity change from 0 to 128 [ 169.872330][T10950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.030847][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 170.039988][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 170.049487][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.058649][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.067776][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.075484][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.083165][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.092363][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.101456][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.110324][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.118070][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.125765][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.133481][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.141199][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.150327][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.159445][ T3378] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 170.171818][ T3378] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.336509][T13362] loop7: detected capacity change from 0 to 1024 [ 170.343504][T13362] EXT4-fs: Ignoring removed oldalloc option [ 170.422011][T13362] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 170.444979][T13368] loop2: detected capacity change from 0 to 4096 [ 170.456638][T13368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.467697][T13362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.489428][T13368] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 170.496881][T13368] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 170.533889][T10950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.569813][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.630658][T13388] ALSA: seq fatal error: cannot create timer (-19) [ 170.965142][ T6377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.977361][T13399] loop7: detected capacity change from 0 to 512 [ 170.998357][T13399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.012664][T13399] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.041344][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.253989][T13410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.333818][T13418] __nla_validate_parse: 4 callbacks suppressed [ 171.333841][T13418] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3978'. [ 171.374607][T13420] loop5: detected capacity change from 0 to 1024 [ 171.480206][T13429] wireguard0: entered promiscuous mode [ 171.487428][T13429] wireguard0: entered allmulticast mode [ 171.530062][T13436] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.3985'. [ 171.540222][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3985'. [ 171.575281][T13440] loop0: detected capacity change from 0 to 512 [ 171.582501][T13440] EXT4-fs: Ignoring removed oldalloc option [ 171.592527][T13440] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3999: Parent and EA inode have the same ino 15 [ 171.605331][T13440] EXT4-fs (loop0): Remounting filesystem read-only [ 171.612566][T13440] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 171.623225][T13440] EXT4-fs (loop0): 1 orphan inode deleted [ 171.630253][T13440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.668219][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.773651][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 171.773667][ T29] audit: type=1107 audit(1745917964.011:5542): pid=13456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 171.812568][T13461] loop2: detected capacity change from 0 to 1024 [ 171.821700][T13461] EXT4-fs: Ignoring removed oldalloc option [ 171.825306][ T29] audit: type=1400 audit(1745917964.061:5543): avc: denied { append } for pid=13458 comm="syz.0.3993" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.830283][T13461] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 171.869145][T13461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.885129][ T29] audit: type=1400 audit(1745917964.121:5544): avc: denied { setopt } for pid=13469 comm="syz.0.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.906395][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3996'. [ 171.916160][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3996'. [ 171.944629][T13472] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 171.974828][T10950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.003178][T13478] loop2: detected capacity change from 0 to 512 [ 172.010778][T13478] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.039897][T13478] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 172.049274][T13478] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.058108][T13478] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 172.069886][T13478] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.087483][T13478] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 172.094804][T13478] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4001: bg 0: block 40: padding at end of block bitmap is not set [ 172.111651][T13478] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 172.131969][T13478] EXT4-fs (loop2): 1 truncate cleaned up [ 172.144731][T13478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.158294][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4006'. [ 172.168630][T13478] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.4001: corrupted xattr block 31: invalid header [ 172.191325][T13478] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 172.201792][T13478] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.4001: corrupted xattr block 31: invalid header [ 172.221603][T13478] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 172.237250][T13500] loop7: detected capacity change from 0 to 128 [ 172.269794][T13502] vlan2: entered allmulticast mode [ 172.285284][ T29] audit: type=1400 audit(1745917964.521:5545): avc: denied { read } for pid=13477 comm="syz.2.4001" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 172.308281][T13478] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.4001: bad symlink. [ 172.333837][T10950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.372972][T13510] loop0: detected capacity change from 0 to 1024 [ 172.394723][T13512] usb usb1: usbfs: process 13512 (syz.5.4013) did not claim interface 0 before use [ 172.404885][T13510] EXT4-fs: Ignoring removed oldalloc option [ 172.405281][T13510] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 172.420334][T13510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.423157][T13500] bio_check_eod: 306 callbacks suppressed [ 172.423173][T13500] syz.7.4007: attempt to access beyond end of device [ 172.423173][T13500] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 172.453845][T13500] syz.7.4007: attempt to access beyond end of device [ 172.453845][T13500] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 172.478776][T13500] syz.7.4007: attempt to access beyond end of device [ 172.478776][T13500] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 172.492592][T13500] syz.7.4007: attempt to access beyond end of device [ 172.492592][T13500] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 172.506270][T13500] syz.7.4007: attempt to access beyond end of device [ 172.506270][T13500] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 172.507904][T13517] netlink: 'syz.2.4011': attribute type 1 has an invalid length. [ 172.519910][T13500] syz.7.4007: attempt to access beyond end of device [ 172.519910][T13500] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 172.519956][T13500] syz.7.4007: attempt to access beyond end of device [ 172.519956][T13500] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 172.519999][T13500] syz.7.4007: attempt to access beyond end of device [ 172.519999][T13500] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 172.520159][T13500] syz.7.4007: attempt to access beyond end of device [ 172.520159][T13500] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 172.520200][T13500] syz.7.4007: attempt to access beyond end of device [ 172.520200][T13500] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 172.602802][T13517] netlink: 'syz.2.4011': attribute type 2 has an invalid length. [ 172.633264][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.663933][T13523] loop8: detected capacity change from 0 to 512 [ 172.680853][T13523] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.4017: corrupted in-inode xattr: invalid ea_ino [ 172.701464][T13530] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4016'. [ 172.736460][T13523] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4017: couldn't read orphan inode 15 (err -117) [ 172.756969][T13523] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.836931][T12911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.861928][T13542] loop7: detected capacity change from 0 to 512 [ 172.877271][T13542] EXT4-fs (loop7): orphan cleanup on readonly fs [ 172.901150][T13542] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4033: bg 0: block 248: padding at end of block bitmap is not set [ 172.946581][T13542] Quota error (device loop7): write_blk: dquota write failed [ 172.954041][T13542] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 172.964038][T13542] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.4033: Failed to acquire dquot type 1 [ 172.981348][T13548] all: renamed from bridge_slave_0 (while UP) [ 173.072651][T13542] EXT4-fs (loop7): 1 truncate cleaned up [ 173.089668][T13550] loop0: detected capacity change from 0 to 128 [ 173.098230][T13542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.112891][T13550] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.137397][T13542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.148230][T13550] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.170819][T13562] loop5: detected capacity change from 0 to 512 [ 173.259004][T13572] loop0: detected capacity change from 0 to 512 [ 173.265788][T13572] EXT4-fs: Ignoring removed oldalloc option [ 173.285780][T13572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 173.297972][T13576] loop8: detected capacity change from 0 to 512 [ 173.304438][T13572] System zones: 1-12 [ 173.309805][T13576] EXT4-fs: Ignoring removed bh option [ 173.315839][T13572] EXT4-fs (loop0): 1 truncate cleaned up [ 173.321981][T13572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.335980][T13576] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 173.350152][T13576] EXT4-fs (loop8): 1 truncate cleaned up [ 173.357947][T13576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.468032][T12911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.552964][T13586] loop7: detected capacity change from 0 to 1024 [ 173.564317][T13588] loop8: detected capacity change from 0 to 1024 [ 173.578371][T13586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.592240][ T29] audit: type=1400 audit(1745917965.841:5546): avc: denied { link } for pid=13585 comm="syz.7.4042" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 173.613882][T13595] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.4043'. [ 173.617094][T13586] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4042: bg 0: block 88: padding at end of block bitmap is not set [ 173.625826][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4043'. [ 173.640646][T13588] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.660749][ T29] audit: type=1400 audit(1745917965.861:5547): avc: denied { link } for pid=13585 comm="syz.7.4042" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.683019][T13588] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.719508][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.783499][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4046'. [ 173.807212][T13588] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4044: bg 0: block 393: padding at end of block bitmap is not set [ 173.832974][T13588] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 173.846942][T13588] EXT4-fs (loop8): This should not happen!! Data will be lost [ 173.846942][T13588] [ 173.910255][T12911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.979302][T13604] loop8: detected capacity change from 0 to 512 [ 174.002367][T13604] EXT4-fs (loop8): orphan cleanup on readonly fs [ 174.021397][ T8608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.063651][T13604] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4047: bg 0: block 248: padding at end of block bitmap is not set [ 174.120242][T13604] Quota error (device loop8): write_blk: dquota write failed [ 174.127816][T13604] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4047: Failed to acquire dquot type 1 [ 174.157789][T13604] EXT4-fs (loop8): 1 truncate cleaned up [ 174.165241][T13604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.189898][T13604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.229818][T13614] loop5: detected capacity change from 0 to 512 [ 174.249270][T13617] loop0: detected capacity change from 0 to 1024 [ 174.259936][T13617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.267996][T13614] EXT4-fs: Ignoring removed oldalloc option [ 174.276872][T13617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.313677][T13618] loop7: detected capacity change from 0 to 2048 [ 174.348075][T13618] loop7: p1 < > p4 [ 174.358759][T13618] loop7: p4 size 8388608 extends beyond EOD, truncated [ 174.409819][T13631] loop5: detected capacity change from 0 to 128 [ 174.452372][T13634] usb usb1: usbfs: process 13634 (syz.2.4060) did not claim interface 0 before use [ 174.533158][T13640] loop7: detected capacity change from 0 to 512 [ 174.550689][T13644] loop2: detected capacity change from 0 to 128 [ 174.560095][T13644] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 174.574086][T13640] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.587583][T13644] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 174.595525][T13644] FAT-fs (loop2): Filesystem has been set read-only [ 174.617803][T13640] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 174.761748][T13650] loop2: detected capacity change from 0 to 1024 [ 174.801071][T13650] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.944161][ T4110] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set [ 174.988592][ T4110] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 175.002979][ T4110] EXT4-fs (loop2): This should not happen!! Data will be lost [ 175.002979][ T4110] [ 175.020085][T13668] loop5: detected capacity change from 0 to 512 [ 175.027956][T13668] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.059933][T13670] loop2: detected capacity change from 0 to 164 [ 175.068324][T13668] loop5: detected capacity change from 0 to 512 [ 175.265058][T13685] xt_hashlimit: max too large, truncated to 1048576 [ 175.511029][T13712] loop8: detected capacity change from 0 to 512 [ 175.541173][T13712] EXT4-fs: Ignoring removed oldalloc option [ 175.555538][T13712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 175.564654][T13712] System zones: 1-12 [ 175.570018][T13712] EXT4-fs (loop8): 1 truncate cleaned up [ 175.627579][T13727] SELinux: syz.5.4099 (13727) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 175.805837][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.814415][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.831943][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.841262][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.850340][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.859475][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.868178][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.876007][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.883819][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.891655][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.899602][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.908666][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.917583][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.925360][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.934353][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.943439][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.952427][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.961541][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.970504][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.979335][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.987185][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 175.995000][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.002786][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.010658][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.019537][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.028597][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.037570][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.045304][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.054234][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.063261][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.072112][ T8811] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 176.081533][ T8811] hid-generic 0000:0000:20000000.000A: hidraw0: HID v0.01 Device [syz0] on syz1 [ 176.377532][T13767] loop5: detected capacity change from 0 to 2048 [ 176.431062][T13776] loop5: detected capacity change from 0 to 512 [ 176.489092][T13783] loop8: detected capacity change from 0 to 128 [ 176.749946][T13796] loop5: detected capacity change from 0 to 128 [ 176.804842][T13794] xt_hashlimit: max too large, truncated to 1048576 [ 177.027136][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 177.027152][ T29] audit: type=1326 audit(1745917969.271:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.058353][T13818] __nla_validate_parse: 2 callbacks suppressed [ 177.058372][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4136'. [ 177.074628][ T29] audit: type=1326 audit(1745917969.301:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.074663][ T29] audit: type=1326 audit(1745917969.301:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.074697][ T29] audit: type=1326 audit(1745917969.301:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.074808][ T29] audit: type=1326 audit(1745917969.301:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.169242][ T29] audit: type=1326 audit(1745917969.301:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.184024][T13818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 177.192942][ T29] audit: type=1326 audit(1745917969.301:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.192981][ T29] audit: type=1326 audit(1745917969.301:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.193008][ T29] audit: type=1326 audit(1745917969.301:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.193056][ T29] audit: type=1326 audit(1745917969.301:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.5.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6cc1e969 code=0x7ffc0000 [ 177.206904][T13822] netlink: 'syz.2.4139': attribute type 1 has an invalid length. [ 177.350269][T13830] loop7: detected capacity change from 0 to 128 [ 177.359742][T13830] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 177.369308][T13828] loop8: detected capacity change from 0 to 1024 [ 177.376722][T13828] EXT4-fs: Ignoring removed bh option [ 177.398709][T13830] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 177.406686][T13830] FAT-fs (loop7): Filesystem has been set read-only [ 177.431314][T13832] loop2: detected capacity change from 0 to 8192 [ 177.439300][T13832] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.453329][T13828] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 177.468036][T13833] loop5: detected capacity change from 0 to 512 [ 177.609705][T13854] loop5: detected capacity change from 0 to 1024 [ 177.620841][T13854] EXT4-fs: Ignoring removed i_version option [ 177.634745][T13854] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.643819][T13854] EXT4-fs: Ignoring removed nobh option [ 177.649480][T13854] EXT4-fs: Ignoring removed bh option [ 177.789253][T13874] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4158'. [ 177.827672][T13878] loop0: detected capacity change from 0 to 128 [ 177.834517][T13878] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 177.867131][T13878] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 177.875027][T13878] FAT-fs (loop0): Filesystem has been set read-only [ 177.916975][T13878] bio_check_eod: 207 callbacks suppressed [ 177.917003][T13878] syz.0.4160: attempt to access beyond end of device [ 177.917003][T13878] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 178.185967][T13901] loop2: detected capacity change from 0 to 512 [ 178.192697][T13901] EXT4-fs: Ignoring removed oldalloc option [ 178.208012][T13901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 178.217026][T13899] loop0: detected capacity change from 0 to 128 [ 178.217701][T13901] System zones: 1-12 [ 178.255094][T13901] EXT4-fs (loop2): 1 truncate cleaned up [ 178.278950][T13903] xt_hashlimit: max too large, truncated to 1048576 [ 178.410450][T13905] syz.0.4179: attempt to access beyond end of device [ 178.410450][T13905] loop0: rw=2049, sector=545, nr_sectors = 496 limit=128 [ 178.467948][T13912] loop8: detected capacity change from 0 to 512 [ 178.477468][T13912] EXT4-fs (loop8): 1 orphan inode deleted [ 178.483732][T13912] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.512626][ T4132] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:44: Failed to release dquot type 1 [ 178.540758][T13918] loop8: detected capacity change from 0 to 1024 [ 178.548015][T13918] EXT4-fs: Ignoring removed oldalloc option [ 178.554093][T13918] EXT4-fs: Ignoring removed orlov option [ 178.561558][T13918] EXT4-fs (loop8): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 178.673430][T13929] bond1: entered promiscuous mode [ 178.678573][T13929] bond1: entered allmulticast mode [ 178.684900][T13929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.716331][T13929] bond1 (unregistering): Released all slaves [ 178.821931][T13947] loop8: detected capacity change from 0 to 128 [ 178.859713][T13952] netlink: 'syz.5.4200': attribute type 1 has an invalid length. [ 178.879740][T13952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.020264][T13954] syz.8.4187: attempt to access beyond end of device [ 179.020264][T13954] loop8: rw=2049, sector=929, nr_sectors = 112 limit=128 [ 179.037031][T13963] loop5: detected capacity change from 0 to 8192 [ 179.301580][T13980] netlink: 'syz.8.4202': attribute type 1 has an invalid length. [ 179.324749][T13981] loop7: detected capacity change from 0 to 512 [ 179.342851][T13980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.401099][T13981] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.520964][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4205'. [ 179.544772][T13994] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 179.682300][T14003] xt_hashlimit: max too large, truncated to 1048576 [ 179.832115][T14013] bond_slave_1: entered promiscuous mode [ 179.839323][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4214'. [ 179.850032][T14013] bond_slave_1 (unregistering): left promiscuous mode [ 179.866520][T14015] loop7: detected capacity change from 0 to 128 [ 179.883314][T14015] EXT4-fs: Ignoring removed nobh option [ 179.890873][T14015] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.920407][T14005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.929065][T14005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.939092][T14015] EXT4-fs (loop7): shut down requested (0) [ 179.946729][T14018] loop0: detected capacity change from 0 to 128 [ 179.972794][T14021] tipc: Started in network mode [ 179.979079][T14021] tipc: Node identity e2001587fcb, cluster identity 4711 [ 179.987412][T14021] tipc: Enabled bearer , priority 0 [ 180.008871][T14021] tipc: Disabling bearer [ 180.032609][T14032] ALSA: seq fatal error: cannot create timer (-19) [ 180.073380][T14042] loop8: detected capacity change from 0 to 1024 [ 180.083915][T14044] veth0_macvtap: left promiscuous mode [ 180.097755][T14042] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4217: Failed to acquire dquot type 0 [ 180.116682][T14042] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 180.133782][T14044] macvtap0: refused to change device tx_queue_len [ 180.141515][T14041] loop0: detected capacity change from 0 to 512 [ 180.160241][T14041] journal_path: Lookup failure for './file0' [ 180.167726][T14041] EXT4-fs: error: could not find journal device path [ 180.168253][T14042] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #13: comm syz.8.4217: corrupted inode contents [ 180.192084][T14042] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #13: comm syz.8.4217: mark_inode_dirty error [ 180.209524][T14042] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #13: comm syz.8.4217: corrupted inode contents [ 180.225490][T14042] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.4217: mark_inode_dirty error [ 180.237867][T14042] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #13: comm syz.8.4217: corrupted inode contents [ 180.251064][T14042] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 180.261065][T14042] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #13: comm syz.8.4217: corrupted inode contents [ 180.261801][T14058] macsec0: entered allmulticast mode [ 180.273137][T14042] EXT4-fs error (device loop8): ext4_truncate:4255: inode #13: comm syz.8.4217: mark_inode_dirty error [ 180.273289][T14042] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 180.273714][T14042] EXT4-fs (loop8): 1 truncate cleaned up [ 180.317390][T14062] veth1_macvtap: entered allmulticast mode [ 180.323389][T14062] macsec0: entered promiscuous mode [ 180.331743][T14042] EXT4-fs: Ignoring removed orlov option [ 180.337677][T14042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.347109][T14042] EXT4-fs (loop8): can't enable nombcache during remount [ 180.599527][T14101] loop2: detected capacity change from 0 to 1024 [ 180.617554][T14101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.671857][T14101] EXT4-fs (loop2): shut down requested (0) [ 180.719822][T14123] loop5: detected capacity change from 0 to 128 [ 180.821833][ T4110] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 180.838442][T14134] xt_hashlimit: max too large, truncated to 1048576 [ 181.052192][T14175] loop5: detected capacity change from 0 to 1024 [ 181.112577][T14174] loop0: detected capacity change from 0 to 512 [ 181.120755][T14174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 181.130782][T14174] System zones: 1-12 [ 181.135361][T14174] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #2: comm syz.0.4243: corrupted xattr block 255: invalid header [ 181.150385][T14174] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 181.160585][T14174] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #2: comm syz.0.4243: corrupted xattr block 255: invalid header [ 181.177026][T14174] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 181.194889][T14194] loop5: detected capacity change from 0 to 512 [ 181.202207][T14194] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 181.215378][T14194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 181.224187][T14194] System zones: 1-12 [ 181.228449][T14194] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 181.511457][T14226] loop7: detected capacity change from 0 to 512 [ 181.518152][T14226] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.525204][T14226] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 181.536832][T14226] EXT4-fs (loop7): 1 truncate cleaned up [ 181.644482][T14229] loop2: detected capacity change from 0 to 128 [ 181.712962][T14231] loop7: detected capacity change from 0 to 736 [ 181.782908][T14231] rock: directory entry would overflow storage [ 181.789179][T14231] rock: sig=0x5850, size=36, remaining=14 [ 182.009834][T14233] syz.2.4255: attempt to access beyond end of device [ 182.009834][T14233] loop2: rw=2049, sector=537, nr_sectors = 504 limit=128 [ 182.042221][T11561] rock: directory entry would overflow storage [ 182.048500][T11561] rock: sig=0x5850, size=36, remaining=14 [ 182.119733][T14240] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 182.208205][T14245] loop8: detected capacity change from 0 to 512 [ 182.233012][T14245] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.307948][T14255] loop0: detected capacity change from 0 to 128 [ 182.328584][T14255] ext4 filesystem being mounted at /409/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.408161][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 182.408177][ T29] audit: type=1400 audit(1745917974.651:5678): avc: denied { write } for pid=14258 comm="syz.7.4266" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.459886][ T29] audit: type=1400 audit(1745917974.681:5679): avc: denied { ioctl } for pid=14258 comm="syz.7.4266" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.486414][ T29] audit: type=1400 audit(1745917974.701:5680): avc: denied { read write } for pid=11561 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.512058][ T29] audit: type=1400 audit(1745917974.701:5681): avc: denied { open } for pid=11561 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.537705][ T29] audit: type=1400 audit(1745917974.701:5682): avc: denied { ioctl } for pid=11561 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.572974][ T29] audit: type=1400 audit(1745917974.751:5683): avc: denied { cmd } for pid=14257 comm="syz.8.4265" path="socket:[43904]" dev="sockfs" ino=43904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 182.596065][ T29] audit: type=1400 audit(1745917974.781:5684): avc: denied { read write } for pid=8608 comm="syz-executor" name="loop0" dev="devtmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.619393][ T29] audit: type=1400 audit(1745917974.781:5685): avc: denied { open } for pid=8608 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.642650][ T29] audit: type=1400 audit(1745917974.781:5686): avc: denied { ioctl } for pid=8608 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=526 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.667309][ T29] audit: type=1400 audit(1745917974.781:5687): avc: denied { map_create } for pid=14261 comm="syz.2.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 182.694614][T14267] loop0: detected capacity change from 0 to 1024 [ 182.708239][T14267] EXT4-fs: Ignoring removed nobh option [ 182.736255][T14262] loop2: detected capacity change from 0 to 512 [ 182.740480][T14269] loop8: detected capacity change from 0 to 512 [ 182.765763][T14269] netlink: 'syz.8.4270': attribute type 2 has an invalid length. [ 182.773643][T14269] netlink: 'syz.8.4270': attribute type 1 has an invalid length. [ 182.781493][T14269] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.4270'. [ 182.814912][T14262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 182.823130][T14262] System zones: 1-12 [ 182.827496][T14262] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #2: comm syz.2.4267: corrupted xattr block 255: invalid header [ 182.849086][T14262] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 182.857856][T14262] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #2: comm syz.2.4267: corrupted xattr block 255: invalid header [ 182.887908][T14279] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 182.956157][T14262] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 182.963453][T14285] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 183.313466][T14316] loop0: detected capacity change from 0 to 512 [ 183.323173][T14314] loop2: detected capacity change from 0 to 2048 [ 183.366531][T14316] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 183.471598][T14326] Direct I/O collision with buffered writes! File: /file2 Comm: syz.2.4288 [ 183.891001][ T4132] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.950083][ T4132] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.999577][ T4132] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.073133][ T4132] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.110354][T14345] IPVS: stopping master sync thread 14349 ... [ 184.126919][T14349] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 184.197132][ T4132] bridge_slave_1: left allmulticast mode [ 184.202928][ T4132] bridge_slave_1: left promiscuous mode [ 184.208849][ T4132] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.218609][ T4132] bridge_slave_0: left allmulticast mode [ 184.224395][ T4132] bridge_slave_0: left promiscuous mode [ 184.230259][ T4132] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.358475][T14358] loop0: detected capacity change from 0 to 1024 [ 184.443830][ T4132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.455456][T14358] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.4303: Allocating blocks 385-513 which overlap fs metadata [ 184.471806][ T4132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.497771][ T4132] bond0 (unregistering): Released all slaves [ 184.515772][T14358] EXT4-fs (loop0): pa ffff8881005a5a80: logic 16, phys. 129, len 24 [ 184.523815][T14358] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 184.535016][ T4132] bond1 (unregistering): Released all slaves [ 184.697223][ T4132] hsr_slave_0: left promiscuous mode [ 184.703197][ T4132] hsr_slave_1: left promiscuous mode [ 184.704505][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4306'. [ 184.718544][ T4132] veth1_macvtap: left promiscuous mode [ 184.724128][ T4132] veth0_macvtap: left promiscuous mode [ 184.731963][ T4132] veth1_vlan: left promiscuous mode [ 184.738040][ T4132] veth0_vlan: left promiscuous mode [ 184.772732][T14372] loop0: detected capacity change from 0 to 512 [ 184.789730][T14372] EXT4-fs: Ignoring removed orlov option [ 184.818709][T14372] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 184.829853][T14372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 184.839838][T14372] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.4308: corrupted in-inode xattr: e_value size too large [ 184.862821][T14372] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4308: couldn't read orphan inode 15 (err -117) [ 184.914803][ T4132] team0 (unregistering): Port device team_slave_1 removed [ 184.949954][ T4132] team0 (unregistering): Port device team_slave_0 removed [ 185.080206][T14378] loop0: detected capacity change from 0 to 128 [ 185.087222][T14378] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.116563][T14378] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.171875][T14366] bond1: entered promiscuous mode [ 185.178272][T14366] bond1: entered allmulticast mode [ 185.183921][T14366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.203122][T14366] bond1 (unregistering): Released all slaves [ 185.254741][T14381] vlan2: entered promiscuous mode [ 185.259921][T14381] bridge0: entered promiscuous mode [ 185.265286][T14381] vlan2: entered allmulticast mode [ 185.270450][T14381] bridge0: entered allmulticast mode [ 185.516592][T14381] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.523892][T14381] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.540499][T14385] loop7: detected capacity change from 0 to 512 [ 185.600826][T14385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 185.610614][T14385] System zones: 1-12 [ 185.620075][T14385] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #2: comm syz.7.4312: corrupted xattr block 255: invalid header [ 185.680271][T14385] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 185.694828][T14381] bridge_slave_0: left promiscuous mode [ 185.700609][T14381] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.736899][T14385] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #2: comm syz.7.4312: corrupted xattr block 255: invalid header [ 185.766426][T14381] bridge_slave_1: left allmulticast mode [ 185.772139][T14381] bridge_slave_1: left promiscuous mode [ 185.777854][T14381] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.787897][T14385] SELinux: (dev loop7, type ext4) getxattr errno 117 [ 185.874579][T14381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.898310][T14381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.935721][T14381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.972969][T14381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.033085][T14381] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.042174][T14381] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.051307][T14381] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.060479][T14381] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.119094][T14381] hsr1: left allmulticast mode [ 186.123929][T14381] syz_tun: left allmulticast mode [ 186.130396][T14381] batadv_slave_0: left allmulticast mode [ 186.231692][T14381] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.240827][T14381] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.250046][T14381] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.259042][T14381] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.295476][T14381] vlan2: left promiscuous mode [ 186.300377][T14381] bridge0: left promiscuous mode [ 186.305802][T14381] vlan2: left allmulticast mode [ 186.310682][T14381] bridge0: left allmulticast mode [ 186.369500][T14341] chnl_net:caif_netlink_parms(): no params data found [ 186.433768][T14341] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.441127][T14341] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.460518][T14341] bridge_slave_0: entered allmulticast mode [ 186.475359][T14341] bridge_slave_0: entered promiscuous mode [ 186.514304][T14341] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.521510][T14341] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.531242][T14407] loop2: detected capacity change from 0 to 128 [ 186.611759][T14341] bridge_slave_1: entered allmulticast mode [ 186.651353][T14341] bridge_slave_1: entered promiscuous mode [ 186.738251][T14422] loop0: detected capacity change from 0 to 512 [ 186.752441][T14422] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.753299][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 186.777341][T14422] EXT4-fs (loop0): 1 truncate cleaned up [ 186.787052][T14341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.827090][T14341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.856572][T14341] team0: Port device team_slave_0 added [ 186.868334][T14427] loop0: detected capacity change from 0 to 1024 [ 186.876254][T14341] team0: Port device team_slave_1 added [ 186.882104][T14427] EXT4-fs: Ignoring removed orlov option [ 186.893655][T14427] /dev/loop0: Can't open blockdev [ 186.980214][T14341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.987263][T14341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.013484][T14341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.054598][T14341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.061627][T14341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.087725][T14341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.105219][T14429] netlink: 1312 bytes leftover after parsing attributes in process `syz.2.4328'. [ 187.174288][T14341] hsr_slave_0: entered promiscuous mode [ 187.180814][T14341] hsr_slave_1: entered promiscuous mode [ 187.187782][T14341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.196025][T14341] Cannot create hsr debugfs directory [ 187.410238][T14453] pim6reg: entered allmulticast mode [ 187.428210][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 187.428225][ T29] audit: type=1400 audit(1745917979.671:5857): avc: denied { shutdown } for pid=14449 comm="syz.0.4335" lport=54234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.458474][T14453] pim6reg: left allmulticast mode [ 187.479984][T14341] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 187.502255][T14341] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 187.517372][T14341] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 187.534538][T14341] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 187.601366][ T29] audit: type=1400 audit(1745917979.841:5858): avc: denied { write } for pid=14459 comm="syz.7.4339" path="socket:[45415]" dev="sockfs" ino=45415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.660846][ T29] audit: type=1400 audit(1745917979.891:5859): avc: denied { create } for pid=14461 comm="syz.7.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.681999][ T29] audit: type=1400 audit(1745917979.891:5860): avc: denied { create } for pid=14461 comm="syz.7.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 187.702371][ T29] audit: type=1400 audit(1745917979.891:5861): avc: denied { connect } for pid=14461 comm="syz.7.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.723680][ T29] audit: type=1400 audit(1745917979.901:5862): avc: denied { write } for pid=14461 comm="syz.7.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 187.750350][T14341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.759533][T14463] infiniband syz1: set down [ 187.764143][T14463] infiniband syz1: added ipvlan0 [ 187.772974][T14341] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.801910][ T4132] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.809057][ T4132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.824334][T14463] RDS/IB: syz1: added [ 187.828956][T14463] smc: adding ib device syz1 with port count 1 [ 187.844278][T14463] smc: ib device syz1 port 1 has pnetid [ 187.859439][ T4132] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.866523][ T4132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.973262][T14341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.985160][T14341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.179646][T14483] loop2: detected capacity change from 0 to 1024 [ 188.192967][T14483] EXT4-fs: Ignoring removed bh option [ 188.199828][T14483] EXT4-fs: Ignoring removed orlov option [ 188.272014][T14483] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.4349: Allocating blocks 385-513 which overlap fs metadata [ 188.288323][T14483] EXT4-fs (loop2): pa ffff8881005a5af0: logic 16, phys. 129, len 24 [ 188.296366][T14483] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 188.333423][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4350'. [ 188.380818][T14341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.439373][T14499] netlink: 340 bytes leftover after parsing attributes in process `syz.2.4351'. [ 188.614272][T14341] veth0_vlan: entered promiscuous mode [ 188.633939][T14341] veth1_vlan: entered promiscuous mode [ 188.658288][ T29] audit: type=1400 audit(1745917980.901:5863): avc: denied { mount } for pid=14513 comm="syz.7.4354" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 188.683161][T14341] veth0_macvtap: entered promiscuous mode [ 188.702900][T14341] veth1_macvtap: entered promiscuous mode [ 188.740132][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.750747][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.760733][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.771674][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.793497][T14341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.794055][ T29] audit: type=1400 audit(1745917980.901:5864): avc: denied { mounton } for pid=14513 comm="syz.7.4354" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 188.806291][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.823722][ T29] audit: type=1400 audit(1745917980.941:5865): avc: denied { unmount } for pid=11561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 188.832733][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.832769][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.832833][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.886642][ T29] audit: type=1400 audit(1745917980.971:5866): avc: denied { create } for pid=14519 comm="syz.0.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.926323][T14341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.962908][T14341] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.971857][T14341] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.980867][T14341] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.989623][T14341] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.005621][T14529] syzkaller0: entered allmulticast mode [ 189.031994][T14529] syzkaller0 (unregistering): left allmulticast mode [ 189.171817][T14542] ref_ctr increment failed for inode: 0x92b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103430580 [ 189.194794][T14541] uprobe: syz.0.4365:14541 failed to unregister, leaking uprobe [ 189.568655][T14569] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4377'. [ 189.703417][T14588] loop2: detected capacity change from 0 to 164 [ 189.829445][T14598] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 189.971668][T14612] loop0: detected capacity change from 0 to 512 [ 190.019569][T14612] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.035783][T14612] EXT4-fs (loop0): mount failed [ 190.107874][T14617] netlink: 536 bytes leftover after parsing attributes in process `syz.2.4399'. [ 190.145677][T14617] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4399'. [ 190.271038][T14623] pim6reg1: entered promiscuous mode [ 190.276444][T14623] pim6reg1: entered allmulticast mode [ 190.489530][T14629] net_ratelimit: 27 callbacks suppressed [ 190.489550][T14629] netlink: zone id is out of range [ 190.500511][T14629] netlink: zone id is out of range [ 190.505727][T14629] netlink: zone id is out of range [ 190.510894][T14629] netlink: zone id is out of range [ 190.516132][T14629] netlink: zone id is out of range [ 190.521290][T14629] netlink: zone id is out of range [ 190.526441][T14629] netlink: zone id is out of range [ 190.531582][T14629] netlink: zone id is out of range [ 190.536741][T14629] netlink: zone id is out of range [ 190.541918][T14629] netlink: zone id is out of range [ 191.154140][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4410'. [ 191.189431][T14640] IPVS: Unknown mcast interface: vcan0 [ 191.341619][T14644] loop0: detected capacity change from 0 to 2048 [ 191.624221][T14659] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4419'. [ 191.656531][T14662] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 191.669361][T14662] SELinux: failed to load policy [ 191.686513][T14662] loop5: detected capacity change from 0 to 128 [ 191.704328][T14669] loop7: detected capacity change from 0 to 512 [ 191.714306][T14669] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 191.738250][T14669] EXT4-fs (loop7): 1 truncate cleaned up [ 191.744551][T14669] EXT4-fs mount: 54 callbacks suppressed [ 191.744568][T14669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.815655][T14678] loop5: detected capacity change from 0 to 512 [ 191.902100][T14693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4434'. [ 191.911219][T14693] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4434'. [ 191.920610][T14693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4434'. [ 192.014313][T14704] loop5: detected capacity change from 0 to 128 [ 192.077235][T14710] loop9: detected capacity change from 0 to 512 [ 192.113253][T14710] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 192.220097][T14710] EXT4-fs (loop9): 1 truncate cleaned up [ 192.235150][T14710] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.308007][T14341] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.530472][T11561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.545320][T14739] loop2: detected capacity change from 0 to 512 [ 192.552614][T14739] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.560751][T14739] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.574915][T14728] ================================================================== [ 192.583052][T14728] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 192.591692][T14728] [ 192.594073][T14728] write to 0xffff888116a72768 of 8 bytes by task 14733 on cpu 1: [ 192.601942][T14728] shmem_file_splice_read+0x444/0x5d0 [ 192.607379][T14728] splice_direct_to_actor+0x26c/0x680 [ 192.612778][T14728] do_splice_direct+0xda/0x150 [ 192.617563][T14728] do_sendfile+0x380/0x640 [ 192.622013][T14728] __x64_sys_sendfile64+0x105/0x150 [ 192.627245][T14728] x64_sys_call+0xb39/0x2fb0 [ 192.631859][T14728] do_syscall_64+0xd0/0x1a0 [ 192.636387][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.642302][T14728] [ 192.644627][T14728] write to 0xffff888116a72768 of 8 bytes by task 14728 on cpu 0: [ 192.652346][T14728] shmem_file_splice_read+0x444/0x5d0 [ 192.657744][T14728] splice_direct_to_actor+0x26c/0x680 [ 192.663122][T14728] do_splice_direct+0xda/0x150 [ 192.667900][T14728] do_sendfile+0x380/0x640 [ 192.672330][T14728] __x64_sys_sendfile64+0x105/0x150 [ 192.677549][T14728] x64_sys_call+0xb39/0x2fb0 [ 192.682145][T14728] do_syscall_64+0xd0/0x1a0 [ 192.686656][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.692553][T14728] [ 192.694877][T14728] value changed: 0x00000000008e2000 -> 0x0000000000665000 [ 192.702088][T14728] [ 192.704411][T14728] Reported by Kernel Concurrency Sanitizer on: [ 192.710576][T14728] CPU: 0 UID: 0 PID: 14728 Comm: syz.0.4447 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 192.723082][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.733142][T14728] ================================================================== [ 192.749424][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 192.749437][ T29] audit: type=1400 audit(1745917984.991:5956): avc: denied { write } for pid=3291 comm="syz-executor" path="pipe:[2350]" dev="pipefs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 192.779233][T14739] EXT4-fs (loop2): 1 truncate cleaned up [ 192.785316][T14739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.799226][ T29] audit: type=1400 audit(1745917985.041:5957): avc: denied { bind } for pid=14741 comm="syz.7.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.819065][ T29] audit: type=1400 audit(1745917985.041:5958): avc: denied { write } for pid=14741 comm="syz.7.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.838905][ T29] audit: type=1400 audit(1745917985.041:5959): avc: denied { write } for pid=14738 comm="+}[@" path="/258/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 192.918587][ T29] audit: type=1400 audit(1745917985.111:5960): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 192.940679][ T29] audit: type=1400 audit(1745917985.111:5961): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.962689][ T29] audit: type=1400 audit(1745917985.111:5962): avc: denied { append } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 192.985168][ T29] audit: type=1400 audit(1745917985.111:5963): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.007722][ T29] audit: type=1400 audit(1745917985.111:5964): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.102459][ T4132] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.160860][ T4132] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.173666][T14728] syz_tun (unregistering): left promiscuous mode [ 193.257091][ T4132] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.310295][T14739] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.338362][ T4132] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.388877][ T4132] bridge_slave_1: left allmulticast mode [ 193.394609][ T4132] bridge_slave_1: left promiscuous mode [ 193.400310][ T4132] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.408035][ T4132] bridge_slave_0: left allmulticast mode [ 193.413669][ T4132] bridge_slave_0: left promiscuous mode [ 193.419374][ T4132] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.508601][ T4132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.518433][ T4132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.528225][ T4132] bond0 (unregistering): Released all slaves [ 193.598157][ T4132] hsr_slave_0: left promiscuous mode [ 193.603747][ T4132] hsr_slave_1: left promiscuous mode [ 193.609921][ T4132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.617392][ T4132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.624860][ T4132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.632446][ T4132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.642807][ T4132] veth1_macvtap: left promiscuous mode [ 193.648499][ T4132] veth1_vlan: left promiscuous mode [ 193.653771][ T4132] veth0_vlan: left promiscuous mode [ 193.696837][ T4110] smc: removing ib device syz1 [ 193.717230][ T4132] team0 (unregistering): Port device team_slave_1 removed [ 193.727101][ T4132] team0 (unregistering): Port device team_slave_0 removed [ 193.734816][ T4142] smc: removing ib device syz! [ 194.009339][ T4132] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.059031][ T4132] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.117931][ T4132] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.178207][ T4132] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.640083][ T4132] bridge_slave_1: left allmulticast mode [ 194.645827][ T4132] bridge_slave_1: left promiscuous mode [ 194.651651][ T4132] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.659854][ T4132] bridge_slave_0: left allmulticast mode [ 194.665581][ T4132] bridge_slave_0: left promiscuous mode [ 194.671539][ T4132] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.917838][ T4132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.927961][ T4132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.937683][ T4132] bond0 (unregistering): Released all slaves [ 194.945634][ T4132] bond0 (unregistering): Released all slaves [ 194.953943][ T4132] bond1 (unregistering): Released all slaves [ 194.998649][ T4132] tipc: Left network mode [ 195.007078][ T4132] hsr_slave_0: left promiscuous mode [ 195.012847][ T4132] hsr_slave_1: left promiscuous mode [ 195.018752][ T4132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.026170][ T4132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.033785][ T4132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.041246][ T4132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.049118][ T4132] batadv_slave_0: left promiscuous mode [ 195.056780][ T4132] hsr_slave_0: left promiscuous mode [ 195.062464][ T4132] hsr_slave_1: left promiscuous mode [ 195.069856][ T4132] hsr_slave_0: left promiscuous mode [ 195.078965][ T4132] veth1_macvtap: left promiscuous mode [ 195.084547][ T4132] veth0_macvtap: left promiscuous mode [ 195.090276][ T4132] veth1_vlan: left promiscuous mode [ 195.096417][ T4132] veth0_vlan: left promiscuous mode [ 195.102253][ T4132] veth1_macvtap: left allmulticast mode [ 195.165956][ T4132] team0 (unregistering): Port device team_slave_1 removed [ 195.175598][ T4132] team0 (unregistering): Port device team_slave_0 removed [ 195.813526][ T4132] IPVS: stop unused estimator thread 0...