last executing test programs: 11.089777392s ago: executing program 0 (id=317): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="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", 0xfc) 10.617955314s ago: executing program 0 (id=320): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 9.732393349s ago: executing program 0 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 9.707684329s ago: executing program 0 (id=352): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) getdents64(r0, 0xfffffffffffffffe, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/43, 0x60) getdents(r1, 0xfffffffffffffffd, 0x58) 9.5829828s ago: executing program 0 (id=354): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = memfd_create(&(0x7f0000000380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xb6\xe2\v', 0x0) write$binfmt_script(r2, &(0x7f0000000600)={'#! ', './file0/../file0'}, 0x14) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9.195077662s ago: executing program 0 (id=363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) 9.194788212s ago: executing program 32 (id=363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) 8.778213784s ago: executing program 3 (id=373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 8.699462995s ago: executing program 3 (id=375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.491027465s ago: executing program 3 (id=377): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(&(0x7f00000002c0)='rmdF\x17\x16\xbc\xec', 0x40, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mq_notify(r0, 0x0) 8.458281476s ago: executing program 3 (id=378): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x2a000, 0x30) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d627780820d1cbf7db710382aceb38a0ef8da65697e4298d1e02dcb8eb8c6b105d9600fdff00000000040000000000000000000000438ea359866cfe1a00", "be1d0000ae9ef30bea2a004000210000000000008000", [0x4000000, 0xe82]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 7.950861018s ago: executing program 3 (id=389): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = memfd_secret(0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x2284, &(0x7f0000000000)) 7.6232805s ago: executing program 3 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r2, r3) 7.522669961s ago: executing program 33 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r2, r3) 2.196079539s ago: executing program 6 (id=483): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000017c0)={{0x0, 0x0, 0xff, 0x2, 0xd14, 0xffffffffffffffff, 0x6, 0xfffffffa, 0x37, 0x5b1cf227, 0x4, 0xab9, 0x8, 0x0, 0xa000}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000027c0)={0x0, r3, "5160940a011ab65df4dcb8093eeec3bc483c39c3bec201c31626bfd7c7842d9db9595973ae812355e771f532576e2ea43287eae55ab61ccc5f43539985d53d8dde8f8876e493a45f96307059ee63c59956c03337abd2818200ee3a65df2a0becb47d1267cc38f504c649a1d4bd4a9c1d3be1cb2d54a2b55d8dae350189b918dc336ef27316a17dc60ba5540040da0ae76c40c4043ff8b58edf2ab3bea588674ae0ce69e51d83b414d08d6d0ed3b104084ecdd0c19a1d9246e6e65bdf14ee88dd0218d9513442db48df81728cccf5e47774cf385d3d57cda8b89bd30cd11e39cb89bd1570d23818135e3045d1b2f5d7a4470707296e1e0549cf8a74130f9b7219", "9e31b0cae976ec35f446006c57d7a500607aaf5bcd62517c63642db2e66d762e8f3383d66b94b5f4483b3884b277223abbb010f3b0453633492c79a9f7eb73dcbe7ffc116aba7e7ef1cfb48dc96b0e2fd1bf32aa7c3e0a1e10ac76f4900042c16109a99a34029ad2210bc27cbf133d62795564c0ee17e1eca341585dd3beb1268274217f96365ca062ed478581caefb69ea8a7c275935e491d5318d637e6481ed732a8236c92f957b9776b3f4a4a99b238f9fa79160d31fa2cf7f914db4c73c0af7aab48d0e27957480dbdf811e17463a582a260d30f33c4232a44618d8b088de86e99e809ebc670cbb7f6fec39d46740034f951e3b38b20d313ac19d9f5c1397a95e3cf970cde088d78f07c19110067dc217787cd0da5a45042981906de556aa730d90b75ab2b9088e65346b377ea432ff223f9c083257de087fd2a19fbabddb17b5fdce69a5db54762f199de90a2dd7066283111746a58d16403ecde29001830ec768f9e58f6135dfe70333ccc3a067f240a6cb15bc1719aa5385f35186cb111fa79baa7600c13441170fd8f5ba897803890eddeda89f525372bd4641052659b314c0659a603b8378018b12df8197fc9a9b32b245bcc5f37e48357f4c85c017e71effe3f5faf06b87793164fbd17a015522f08d57e187be002269a2c80d3e87a4700696b79643305fe352ccdce500ccde12427c8349e8516541f40de91062b9184e80e2270219af48418b567a7c583d497272ab57d68bd1d7c00ce7f31eb519b1ffcc0674e7f32704526108dd516b2a8fffd81c4107f3761a7201ed0718d5b16670b3757f1c8f730d55fa1722003d54bcf81a8ac700f70c4e2d50b07d522400e213011a8fda95f9ed1d15bc4842a6093df4844f1f0d55a778ab156a0b2fac93a03fa7601664f0aadd229ebd75752276222ee2affde935540bdbb68e8033767177c49fba85d597bc4d9c4f440723f2425cddcc84463c41365ae74a8b26fb97a887243e82dbe2ded6af960426a312bd657e332dd16204c534810d467d401e39a1536d1c63e311f7a682887a7641b377190210976fccac281861dd46c1216ec273e760491bac18b58fc8193698b78433e258cfdff1c546b4d91ed98f301da6775fd7fdff70c2fd4b0cbda7412aff39590d43d7fd0cf9a13a35cb5a6b49b9563ff2141e7076c8a814bef58a5e3bb16e58e8f0fb9eeebe3119b0bddee3896345a7e6a2f9e18b58a799ce8b55fee1d083cfe6185a8fe1f4ea2faa237ebd7391aefd1916cebbdef1d805d41cad164cd8bf629bc5dfcbbf926e42f92aafd43e7823503a3c1fed4c45c94dab832569af98ae0a7cd3fae5b6f12b52adfc8c6a31e418b70109c5d7b213b772211d5e1b175ed76399f93dff543ef2fc792a259955bd7e33cd0d09dda3e23349064b80d64c37d9964d3a523b0a0c82644b194fcecb7b781d2a3dd27631cff83fa019fcf02652c96b6d0f2a128ec8720c23c7fd98732e77ac1af148a3c5fcb5a23c42503e7b0197b7cc72d87b57624aab4b2f175a09283dc0fd7d4a7eb4a33ce18a191e27482eba230e04669b03b0b0f979f0e998474c1427712781edb5f0c7d0520239256df5cb82e15925954951d489718e883de200859d81d5e460f4c9f80123fc94778ad50cc97d08feeb0ce6f55e20461e9a2d65be60c91c79453acc21e1505f14b7063ea5880d3246aaa45d4cc59bd8d3d5e6f1bcbeec8fe505758197254fcb1238b2748a21e5059e04e6bf696efacc22b82646fb6b03c9909e15c92f9dc9abc8d30edadff455ebefb9db8d179754e2021f567fae4b0e11da1cb0df943eb1e76883d5ef7dba69f80a66cc7e113e8a9754882711fa61e2814dacee71a748abc9cc244b95dbed1a4e1f2a15dab1ea333998dd8e994b390b299f3c6e7959f13dc3a98d9bcc9f56d30e14aa3b50db4543576fef58a6e13e1a6e4d72371c6630c18337724fcb70067040f783a2fcb590ff2b817943146d1b5aef58a66836ace13728dfb33d2b5982e169c2f15aa5f42ddc8e67de20e104feed8b8965b3a50ba443aaa44a4b9bce9761b4ab57f37bd5e29f2f42ae2a5be68c3b0723d1f35be70b40e1c7c5b66ac192c7471fc6fa5fb13148be7885da51619348b3b17cf6ceb54d7b97e27f90d5a99720e3955030740c28b8698ff74b322b1a2075d92bff94dac31a7a4ba1a7f48a1b2ef8f7810dec32423b3e419a67fea68ec43fdfbc7a83e0324be8b26bd6fe85846b208091ebd16e2072c15321d1b9d998ea242bc30c4923c835c41fd505682f88736d649938e0eda51a7d92650913d9c984a574466a33808b5f4057864212024e3d4470dc3aa91899f8cf1bbaa0c7779b07c8f4cd7068aef1e34f6a0c7adacc398e236ab008a2e1f8104e72e8db6aec57002bd8779487877e46faa5bffceb04130344168d1664ae75952d32eb966fb33fbee3a25158cb4c37e4d854a093e5ded7e5509c6d33d7d56899d92fa9c63c084378bba80490f250d53ded25f36ae72adeac37aebe63ec1cd5939a220fd55f3662a39a38c01c52656c77dd208635f0ca384c67107d794c6a769bee50329364a366ab140e7d12a501720d4d66f41ef2208b845234b66be3e2eb0e7e90d8a2d259995e0bce965b0b7f37cc4ba461fcb1ae2f84d9ddf74023d078aa37d36654a3b33d9a4d7a1578dd2f9f8c7301785476ce43c18f1c40c47b621b12b3c87ea83c83f4df7af16f4dd1f1b453c4e357407ca481e926f30a983252d23b7c2cf895b613d7631d6fc92962a42fcbc9cc1ea57ab1cf5514d603d87fdcdad5b6d9fe56ee192e7140c65d998ca57008ccaf72b716663370b667455e0e5c3b536641a7b5010139b73df6f4a3d0c91c81698c6cc52fcee9ad4bad02ba85102d6395bb56e47fe6086a25ad52636f90507037e47d9b93e6a8275ef23c3bf235049bba7b4ad22c8cf53f703913d96047bb6853a416ad55077abdbadb08ccc3d65a3085d341557095694f45df3b8511316e72e0ee31ae4c798a8ce35bff1a672427915c42efa427cbcea55df5dd9c2ae6faf2f5e98b6adecee22691ce87f1ab1f6addde1d7976faf59273913b86c4b4bdbdf3c51f9f7d3db0ef25601cdd30bbf27485b6e6b5112a158eb604e9ff43cbfa88964b513250c54e8744c7b6a8ba0707be9d6e2ec5228f344674d96b303768fb3c1b2d3d1c10693c5662f22cf0f6b216ae3f1487403a2ea17dfc6573e7ae0d004f8acd72cc82814a8f5d11ee0fa795c8d96af44267c7b176cf1575c3419a31f367281955b841e882e95c70b2b3c711d5258da3137add5ed3a58bc9a05af7882a29dce06b0f20b0f46255dbdd6cebbec8e184880d7a52a5a8703665cf6bfb1da9043766794e28705f3190edf4332791e6c508a4f0c380e4bf1d24b5b368518fc3ac04c1d288e07e501835b5db7f19f69172d953287ce01e4579f6250ed12d032d2cb834d22c6b978689f4a857977ab79fbc2c94adc271d6c70eeae40667e8bfe3cec02a28e366cf599a58940c3a23244494c079a1a5e613f2d8d4bedd2f75d9968431aed6834bf0c2f5d5812a2fbba9741defe3abe558946e1bc164517ad2f8767a63127bc7ccdeb08a94ef701c1a00df3bcba7b61872a658adaccceb17624bb594933712f7d28980dbe3eb899bc1671cd91df207bc965b16f43a12ce5c407c81ddf22d25ca814382545bf31f0e6953c37d801e98101021eabba05cc0814db4cb5a4b10e4d2aa119f45bbe36879f11b4b0ca9f2bd6dbe0e78b9673e406792b7f266fced229c57778cd66c26e1ff5a96846f66700cb4a56d639f887ec9a4ef61a1f9d68d69c5d1e788f324d13dcba5036d5da29b8627ad00f0d5cfc3e3dcb8ac26129d1ac64c0eeb5153f236d320df0ce7851b0319cd0b329dfee85e6198650a1f379aa9f50c74a4f6297a9346deca954464525f184d7e418346970107eee4795777e2ff8319130973837bde319226d56cfc2159d79cf1d26d669f8eeec3d8049975771cea16ddc12d9d656365951e6a0a42f2c20c357716cff5b54f2bc0f4cc9328065b1e1815d2b189e65703c50e571ab0f2797d5ff922c18ec9dfeacd0b69934e4b02eb1aa15ab147dd9e5c7817169e364e9d78bc9410e0a4cb7f34f2bbf4726315ffab0f5630e7c53a29f2177977dd701a10580feb3b1d18a01c71e97774b0614fc17f3d6599dfb97b65ebb563b8432681d407bc7b7a67cf58f44d28e94e07a4b41bd9ae97fc3281c3c3f70b7eaf712ec79dee4730ce088609a5af24a0a2b8ec46fd9c0a3b6b5ac3a4b3dd8b8ef68cf89ab326e51aba1eec5e797463e1e7b1fca9347b83d504cb87feeea882968425840c80b1f4ffea186e6782461a421aa42d264a3d4e5c4b6cb60a9bb901e81ca959ff28c2c02ad0aa025c3282eb7eb4fe3be1d94548363a1c9576df7ee76a78da731ba24076bc83ee72ee47d1e6bd74c18dd37e413a3ea9bd567e39ebf4cdea955ef5f11b5db0f9f86e04b8a5cec3ccab316d61855b4614fcc490551af659c8cd80652dac415a6d3511e8087632840b45df9d3fdad9437d8f791bbf2adb3d3af2407fd7e19f6f505580164bf7296a3f029e4776a6a1de1ac023a2c17e3e34245ab197618987ad10b5a9c0043b99b361066e0bea2a45cecd9474acfb94f9cb25021f5c53b23177af0ae3427e68bcfd20f05376048908dca3bd43bd8c4529674f4554882f5c2884c5ea9b4bd2cb613ecc96c29ec2dcc0d0513e0aa54aa3152729afbf3040174880ea3a55146c241e1c07543403f425476510fa14a593115d70c329508b0a16c399c980a3a67ece5350b1e0bd729ecb637020076a511fd9f8cc2a70f2d7bb1b330c9c105ce56cfdb40957601c7bd017e92eee975dc17a5db438ce1f9df369a6fc62060aa213bc160fb2fcf0c3eb8345c2141be72b78fbdd84999ebc48490a9fc40c050c4948f67c2634c0893d435af282ea1098231e62b40e400865412bc0334ab2cecf8ba2e7b42a32a69760a13260dfc894e5efc3b22bb50190d1207e63ea1570ebe634811ed50c7e7b8651e0db8127db476876493e23cc65305782378dc0f47344731637faa52e677ee3f97051dde414c757ae6f32de3a00afeb5e508d1a0d8ed8d747a0447f53c7e005f6bccc4a52b3dbbddf18e1f7b31498ffeef73ae94001840d489e2a06f34522bfc285069dfbd865417f925f0164d78645ed4e3493bb4d989e7eeca73a1c136057974d1509677e79521ae89e6ee5c0b2b15f353e9032c9c8e0f3905455dc7926fa016748a1dd368eab7181929380889d701c762bf9f245f28ec5634ad29af96b2c9fc69a44ce7db96b7a8324fb3a10da2f7f3e5eb8a38ce28e9cebc42177caeb39c2b2b11b795fbf835fe0bdde1df2f0370c9e5d73cb3cfdb6cdf839f4afb057607e50593d3d82f054f1f"}) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 1.98486756s ago: executing program 6 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x14, 0x0, 0x400, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 1.470663222s ago: executing program 6 (id=506): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xb}, @private, 0xfffe, "66c5aff8a7eb3af1f6cec2e74200", 0x4, 0x0, 0x80}, 0x3c) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 1.379231343s ago: executing program 6 (id=509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 1.364294113s ago: executing program 1 (id=510): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$notify(0xffffffffffffffff, 0x402, 0x36) close_range(r0, r1, 0x0) 1.347342253s ago: executing program 1 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)='\f', 0x1}], 0x1, 0xfffff, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x0, 0x10000) 1.225471843s ago: executing program 5 (id=515): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f055", 0x2}], 0x1}, 0x4804) r2 = accept4(r0, 0x0, 0x0, 0x800) close(r2) 1.191296824s ago: executing program 5 (id=517): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04ea00000000000000020000002c0004802800018007000100637400001c00028008000140000000000800024000000067722d29ac802ad6000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd(0x8800a6) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 1.182529504s ago: executing program 6 (id=518): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x1}]}) socket(0x1, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x0, 0x4}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 1.179835644s ago: executing program 4 (id=519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.125803304s ago: executing program 4 (id=520): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) flock(r1, 0x1) flock(r1, 0x2) 1.125071024s ago: executing program 1 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x1044, &(0x7f0000002180)="$eJzsz8EJQjEMBuA8jc+ePHoUJ3AGl3Afp/Hgkoo2RfAsyIPvu7R/kwYS/NUqHu2TzjFHjrCNWNe1fX+b9lXI4631rlN/2YyWuc5rn3V4h5zyVdjVlMv9x+sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCI9AwAA//+eCQRV") 1.088231364s ago: executing program 2 (id=522): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000000c0)="bbc32b2bf89fda4eb8456f237c6b7d2b0de8249bfca95a80a2c7458df70a4154d8dc942173a157e26326b332c9086cf8134cf905812756bcb10d94966bc19a95e2a67cc38c7eef855a67b81cd7a36eac431d530845cfd2ee27a28e05ae8ae6cc5efc42fe786cb11b5965a3185d8b1bd067fe5ea1224c42acfa195735e98575d3e3568938f780d65bf95c04e8c52587f5a293d446d0fbd18b9ae12c885f8d245a1c017b5bbaa550c12044cc0ef5539890c3dce9241b146d7f7afbbb9f278993b68499efe6dfc5513050d2ec153378c564b8f6c00996", &(0x7f0000000280)=""/98}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) 1.068401914s ago: executing program 2 (id=523): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @empty}, 0x1c) r3 = dup2(r0, r0) write$tun(r3, 0x0, 0x46) 1.035306524s ago: executing program 2 (id=524): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 1.016961805s ago: executing program 2 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x4002, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r2, 0x0, 0x18) 999.595695ms ago: executing program 2 (id=526): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) 333.538668ms ago: executing program 6 (id=527): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000008000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 329.897588ms ago: executing program 1 (id=538): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 261.604788ms ago: executing program 4 (id=528): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) shutdown(r0, 0x0) listen(r0, 0xfffffffd) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e23, @empty}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 260.004759ms ago: executing program 5 (id=540): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) chdir(&(0x7f0000000000)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r1}, 0x18) 209.863199ms ago: executing program 4 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0a00ffff0000", 0x6}]) 156.128179ms ago: executing program 5 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 155.761239ms ago: executing program 1 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) 150.073679ms ago: executing program 5 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 116.442089ms ago: executing program 2 (id=534): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5e, &(0x7f0000000300)={[{@debug}, {@grpquota}, {@i_version}, {@data_err_ignore}]}, 0x1, 0x44b, &(0x7f00000006c0)="$eJzs281vG0UbAPBn7aR9274lKSof/YAGCqICkTRpgR44tAgkDiAhwaEcQ5JWoW6DmiDRKoKAUDmiShy4IY5I/AWc4IKAExJXuKNKFcqlhZPR2ruJ49hJnNh1iH8/aZWZ3XFmHu+OPbPjDaBnDUXEpxHx/4j4PSIGIiKpLzBU/XN3cX7i78X5iSTK5Tf/Sirl7izOT+RF89ftyzML1fyRBvXOXrt+abxUmrqa5UfmLr83Mnvt+rPTl8cvTl2cujJ25szpU6MvPD/2XFviTNt05/CHM0cPvfr2zdcnzt985+dvkyy8qIujTYbWOvhkmyvrtv016aSviw2hJcWISE9Xf6X/D0Qxlk/eQLzySVcbB3RUuVwu725+eKEM7GBJdLsFQHfkX/Tp/Dff7tHQY1u4fa46AUrjvptt1SN9UcjK9NfNb9spnW2dX/jnq3SLztyHAABY4ftz1b+rx3+FeLCm3NlsbWgwIg7ULG4cjIgHIiplH4qIh1usv36RZPX4p3CrxX/ZknT892K2trVy/JeP/mKwmOX2V+LvTy5Ml6ZORsR9EXEi+nen+dE16vjh5d8+b3ZsqGb8l25p/flYMGvHrb66G3ST43PjW4m51u2PIw73NYo/WVoJSCLiUEQcPra5Oqaf/uZos2Prx7+GNqwzlb+OeKp6/heiLv5csvb65Mj/ojR1ciS/Klb75dcbbzSrv9X4D3y5PGdrh/T87214/S/FP1gu1qzXzrZex40/Pms6p9ns9b8reauS3pXt+2B8bu7qaMSu5LVs/9nl/WPLr83zefk0/hPHG/f/+2P5nTgSEelF/EhEPBoRx7K2PxYRj0fE8TXi/+mlJ97dfPydlcY/uc75T2rX6zeRKF768bsVlQ62En96/k9XUieyPRv5/NtoA7f6/gEAAMB/QaHy2/+kMLyULhSGh6u/lz8Yewulmdm5Zy7MvH9lsvqMwGD0F/I7XQM190NHs2l9nh+ry5/K7ht/UdxTyQ9PzJQmux089Lh9Tfp/6s9it1sHdJzntaB36f/Qu/R/6F36P/SsRs//79lAGWAHaPT9/1EX2gHce8b/0Lta7f/VyYEpAewEvv+hd+n/0JO28lx/JxP5+sN2ac+KRLm8Xpm+7dLUziWisC2aIdGhRJc/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrk3wAAAP//+TvoKw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) getdents64(r0, &(0x7f0000000b40)=""/4095, 0x61c) 113.564979ms ago: executing program 4 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r1, &(0x7f0000001480)=""/4096, 0x1000, 0x2041, 0x0, 0x0) 48.1764ms ago: executing program 5 (id=536): bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) 47.84505ms ago: executing program 1 (id=537): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 0s ago: executing program 4 (id=539): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) eventfd(0x1) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 21.735361][ T29] audit: type=1400 audit(1731903416.803:81): avc: denied { read } for pid=2997 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 25.864269][ T29] audit: type=1400 audit(1731903420.923:82): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.865509][ T3302] cgroup: Unknown subsys name 'net' [ 25.886991][ T29] audit: type=1400 audit(1731903420.923:83): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.914367][ T29] audit: type=1400 audit(1731903420.953:84): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.047565][ T3302] cgroup: Unknown subsys name 'cpuset' [ 26.053698][ T3302] cgroup: Unknown subsys name 'rlimit' [ 26.181355][ T29] audit: type=1400 audit(1731903421.243:85): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.206799][ T29] audit: type=1400 audit(1731903421.243:86): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.227397][ T29] audit: type=1400 audit(1731903421.243:87): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.247845][ T29] audit: type=1400 audit(1731903421.243:88): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.265321][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.268266][ T29] audit: type=1400 audit(1731903421.243:89): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.301699][ T29] audit: type=1400 audit(1731903421.243:90): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.317392][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.324970][ T29] audit: type=1400 audit(1731903421.343:91): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.117596][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.146986][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.183517][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.242573][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.249695][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.256856][ T3313] bridge_slave_0: entered allmulticast mode [ 28.263246][ T3313] bridge_slave_0: entered promiscuous mode [ 28.269728][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.300421][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.307521][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.314708][ T3313] bridge_slave_1: entered allmulticast mode [ 28.321190][ T3313] bridge_slave_1: entered promiscuous mode [ 28.334479][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.341752][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.348970][ T3319] bridge_slave_0: entered allmulticast mode [ 28.355386][ T3319] bridge_slave_0: entered promiscuous mode [ 28.363833][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.370926][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.378096][ T3319] bridge_slave_1: entered allmulticast mode [ 28.384529][ T3319] bridge_slave_1: entered promiscuous mode [ 28.405795][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.431109][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.440398][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.447531][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.454663][ T3316] bridge_slave_0: entered allmulticast mode [ 28.461163][ T3316] bridge_slave_0: entered promiscuous mode [ 28.478248][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.487454][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.494559][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.501760][ T3316] bridge_slave_1: entered allmulticast mode [ 28.508162][ T3316] bridge_slave_1: entered promiscuous mode [ 28.521941][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.546270][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.598266][ T3313] team0: Port device team_slave_0 added [ 28.604994][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.615212][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.639132][ T3313] team0: Port device team_slave_1 added [ 28.644989][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.652090][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.659326][ T3312] bridge_slave_0: entered allmulticast mode [ 28.665759][ T3312] bridge_slave_0: entered promiscuous mode [ 28.681817][ T3319] team0: Port device team_slave_0 added [ 28.692246][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.699321][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.706532][ T3312] bridge_slave_1: entered allmulticast mode [ 28.712918][ T3312] bridge_slave_1: entered promiscuous mode [ 28.724177][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.731296][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.738456][ T3317] bridge_slave_0: entered allmulticast mode [ 28.744828][ T3317] bridge_slave_0: entered promiscuous mode [ 28.751688][ T3319] team0: Port device team_slave_1 added [ 28.772349][ T3316] team0: Port device team_slave_0 added [ 28.778099][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.785210][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.792448][ T3317] bridge_slave_1: entered allmulticast mode [ 28.798901][ T3317] bridge_slave_1: entered promiscuous mode [ 28.813682][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.820744][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.846711][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.857983][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.864965][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.890909][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.906807][ T3316] team0: Port device team_slave_1 added [ 28.918416][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.927902][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.934863][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.960813][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.974238][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.981219][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.007152][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.019212][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.029716][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.048833][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.070986][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.078026][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.106412][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.131435][ T3317] team0: Port device team_slave_0 added [ 29.143837][ T3313] hsr_slave_0: entered promiscuous mode [ 29.150268][ T3313] hsr_slave_1: entered promiscuous mode [ 29.160890][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.167891][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.193858][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.205287][ T3317] team0: Port device team_slave_1 added [ 29.217029][ T3312] team0: Port device team_slave_0 added [ 29.240614][ T3312] team0: Port device team_slave_1 added [ 29.253069][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.260096][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.286176][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.317615][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.324565][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.350715][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.363236][ T3319] hsr_slave_0: entered promiscuous mode [ 29.369305][ T3319] hsr_slave_1: entered promiscuous mode [ 29.375389][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.382963][ T3319] Cannot create hsr debugfs directory [ 29.394651][ T3316] hsr_slave_0: entered promiscuous mode [ 29.400764][ T3316] hsr_slave_1: entered promiscuous mode [ 29.407008][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.414575][ T3316] Cannot create hsr debugfs directory [ 29.432857][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.439847][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.465876][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.477190][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.484194][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.510123][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.585980][ T3312] hsr_slave_0: entered promiscuous mode [ 29.592066][ T3312] hsr_slave_1: entered promiscuous mode [ 29.598216][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.605753][ T3312] Cannot create hsr debugfs directory [ 29.618664][ T3317] hsr_slave_0: entered promiscuous mode [ 29.624809][ T3317] hsr_slave_1: entered promiscuous mode [ 29.630788][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.638361][ T3317] Cannot create hsr debugfs directory [ 29.757373][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.774619][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.783231][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.801379][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.825927][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.840843][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.852566][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.861558][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.877015][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.893810][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.902683][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.916507][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.943438][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.961960][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.970777][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.980302][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.013335][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.021934][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.031186][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.047357][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.054333][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.075164][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.103905][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.117612][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.127686][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.134726][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.148084][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.155220][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.180397][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.187529][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.196297][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.203429][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.227388][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.246801][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.269390][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.284457][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.298147][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.319455][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.326612][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.337484][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.344559][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.354652][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.373295][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.380410][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.390466][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.397563][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.432830][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.449804][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.466369][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.490732][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.497861][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.535641][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.551792][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.558878][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.596988][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.613210][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.623647][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.671942][ T3316] veth0_vlan: entered promiscuous mode [ 30.682982][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.698381][ T3316] veth1_vlan: entered promiscuous mode [ 30.724020][ T3316] veth0_macvtap: entered promiscuous mode [ 30.742444][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.750998][ T3316] veth1_macvtap: entered promiscuous mode [ 30.777111][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.788837][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.803104][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.811997][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.820839][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.829762][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.845042][ T3313] veth0_vlan: entered promiscuous mode [ 30.867962][ T3313] veth1_vlan: entered promiscuous mode [ 30.904145][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 30.904162][ T29] audit: type=1400 audit(1731903425.963:110): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.iKso0T/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.920642][ T3313] veth0_macvtap: entered promiscuous mode [ 30.934825][ T29] audit: type=1400 audit(1731903425.963:111): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.948570][ T3313] veth1_macvtap: entered promiscuous mode [ 30.962541][ T29] audit: type=1400 audit(1731903425.963:112): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.iKso0T/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.993924][ T29] audit: type=1400 audit(1731903425.963:113): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.012013][ T3317] veth0_vlan: entered promiscuous mode [ 31.015854][ T29] audit: type=1400 audit(1731903425.963:114): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.iKso0T/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.044075][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.047861][ T29] audit: type=1400 audit(1731903425.963:115): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.iKso0T/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.058289][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.062248][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.085716][ T29] audit: type=1400 audit(1731903425.963:116): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.104720][ T29] audit: type=1400 audit(1731903426.163:117): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.142827][ T3319] veth0_vlan: entered promiscuous mode [ 31.154189][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.156525][ T3317] veth1_vlan: entered promiscuous mode [ 31.183648][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.194286][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.204935][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.216138][ T29] audit: type=1400 audit(1731903426.273:118): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.240314][ T29] audit: type=1400 audit(1731903426.273:119): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.265159][ T3319] veth1_vlan: entered promiscuous mode [ 31.280296][ T3312] veth0_vlan: entered promiscuous mode [ 31.304155][ T3312] veth1_vlan: entered promiscuous mode [ 31.316876][ T3319] veth0_macvtap: entered promiscuous mode [ 31.326406][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.335324][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.344189][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.353000][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.366833][ T3319] veth1_macvtap: entered promiscuous mode [ 31.373559][ T3317] veth0_macvtap: entered promiscuous mode [ 31.382512][ T3317] veth1_macvtap: entered promiscuous mode [ 31.398793][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.409256][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.419264][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.429834][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.440715][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.449322][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.459802][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.469686][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.480159][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.490911][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.511061][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519811][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.528677][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.537548][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.550397][ T3312] veth0_macvtap: entered promiscuous mode [ 31.558327][ T3312] veth1_macvtap: entered promiscuous mode [ 31.565023][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.575634][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.585522][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.595974][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.605953][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.616475][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.627920][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.649978][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.660707][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.670538][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.681050][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.690880][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.701538][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.712617][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.722068][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.732629][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.742675][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.753198][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.763041][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.773591][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.783565][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.794234][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.805189][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.817693][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.826637][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.835358][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.844225][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.862059][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.872653][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.882547][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.892979][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.902900][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.913407][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.923394][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.933895][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.955753][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.994819][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.003673][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.012555][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.021359][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.052078][ T3469] loop2: detected capacity change from 0 to 512 [ 32.127390][ T3469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.140761][ T3469] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.234866][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.249528][ T3488] bridge: RTM_NEWNEIGH with invalid ether address [ 32.281050][ T3494] syz.2.17[3494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.281144][ T3494] syz.2.17[3494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.292688][ T3494] syz.2.17[3494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.362793][ T3506] loop1: detected capacity change from 0 to 512 [ 32.377678][ T3494] netlink: 'syz.2.17': attribute type 3 has an invalid length. [ 32.403152][ T3509] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 32.470255][ T3510] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 32.515018][ T3521] loop4: detected capacity change from 0 to 512 [ 32.529607][ T3521] ======================================================= [ 32.529607][ T3521] WARNING: The mand mount option has been deprecated and [ 32.529607][ T3521] and is ignored by this kernel. Remove the mand [ 32.529607][ T3521] option from the mount to silence this warning. [ 32.529607][ T3521] ======================================================= [ 32.596122][ T3524] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 32.624545][ T3524] SELinux: failed to load policy [ 32.636279][ T3521] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 32.644488][ T3521] System zones: 0-2, 18-18, 34-34 [ 32.655305][ T3521] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.27: bg 0: block 248: padding at end of block bitmap is not set [ 32.692133][ T3521] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.27: Failed to acquire dquot type 1 [ 32.750272][ T3532] syz.0.32[3532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.750488][ T3532] syz.0.32[3532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.773022][ T3532] syz.0.32[3532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.790337][ T3521] EXT4-fs (loop4): 1 truncate cleaned up [ 32.805205][ T3532] mmap: syz.0.32 (3532) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.809415][ T3521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.847404][ T3521] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.966191][ T3521] syz.4.27 (3521) used greatest stack depth: 9344 bytes left [ 32.979572][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.195376][ T3559] loop0: detected capacity change from 0 to 512 [ 33.220151][ T3559] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 33.232366][ T3559] System zones: 0-2, 18-18, 34-34 [ 33.240787][ T3559] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.39: bg 0: block 248: padding at end of block bitmap is not set [ 33.270201][ T3559] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.39: Failed to acquire dquot type 1 [ 33.289523][ T3559] EXT4-fs (loop0): 1 truncate cleaned up [ 33.297041][ T3571] syz.4.44 uses obsolete (PF_INET,SOCK_PACKET) [ 33.304341][ T3559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.324730][ T3559] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.393493][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.598451][ T3582] syzkaller0: entered promiscuous mode [ 33.603980][ T3582] syzkaller0: entered allmulticast mode [ 33.900415][ T3598] xt_hashlimit: max too large, truncated to 1048576 [ 34.029049][ T3605] vlan2: entered allmulticast mode [ 34.068155][ T3613] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 34.106518][ T3617] loop4: detected capacity change from 0 to 512 [ 34.118781][ T3617] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.132246][ T3617] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.159733][ T3617] EXT4-fs (loop4): 1 truncate cleaned up [ 34.165698][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.203645][ T3624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3624 comm=syz.0.67 [ 34.220334][ T3611] smc: net device bond0 applied user defined pnetid SYZ1 [ 34.253850][ T3631] syz.0.70[3631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.253995][ T3631] syz.0.70[3631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.280977][ T3611] smc: net device bond0 erased user defined pnetid SYZ1 [ 34.303821][ T3631] syz.0.70[3631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.305552][ T3628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 34.323393][ T3631] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 34.345177][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.385484][ T3636] syz.2.73[3636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.411078][ T3636] loop2: detected capacity change from 0 to 1024 [ 34.440679][ T3636] EXT4-fs: Ignoring removed oldalloc option [ 34.458680][ T3636] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 34.490335][ T3636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.525739][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.554625][ T3649] loop3: detected capacity change from 0 to 512 [ 34.566553][ T3649] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.593246][ T3649] EXT4-fs (loop3): 1 truncate cleaned up [ 34.605664][ T3649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.696570][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.721775][ T3660] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 34.748067][ T3664] process 'syz.2.81' launched '/dev/fd/3' with NULL argv: empty string added [ 34.907232][ T3670] loop2: detected capacity change from 0 to 8192 [ 34.921082][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 34.929941][ T3676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 34.939560][ T3676] Zero length message leads to an empty skb [ 34.945657][ T3670] loop2: p1 p2 p3 [ 34.950005][ T3670] loop2: p1 size 16128 extends beyond EOD, truncated [ 34.960473][ T3670] loop2: p2 size 2130728454 extends beyond EOD, truncated [ 34.968667][ T3670] loop2: p3 start 458783 is beyond EOD, truncated [ 35.493406][ T3691] loop3: detected capacity change from 0 to 8192 [ 35.514726][ T3691] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.628633][ T3715] netlink: 'syz.3.97': attribute type 10 has an invalid length. [ 35.639617][ T3715] team0: Failed to send options change via netlink (err -105) [ 35.647241][ T3715] team0: Port device netdevsim1 added [ 35.669223][ T3715] netlink: 'syz.3.97': attribute type 10 has an invalid length. [ 35.683079][ T3715] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 35.699485][ T3667] syz.2.84 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 35.710396][ T3667] CPU: 1 UID: 0 PID: 3667 Comm: syz.2.84 Not tainted 6.12.0-syzkaller #0 [ 35.718895][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 35.729048][ T3667] Call Trace: [ 35.732354][ T3667] [ 35.735417][ T3667] dump_stack_lvl+0xf2/0x150 [ 35.740046][ T3667] dump_stack+0x15/0x20 [ 35.744571][ T3667] dump_header+0x83/0x2d0 [ 35.748956][ T3667] oom_kill_process+0x341/0x4c0 [ 35.753950][ T3667] out_of_memory+0x9af/0xbe0 [ 35.758628][ T3667] ? css_next_descendant_pre+0x11c/0x140 [ 35.764317][ T3667] mem_cgroup_out_of_memory+0x13e/0x190 [ 35.769909][ T3667] try_charge_memcg+0x51b/0x810 [ 35.774849][ T3667] charge_memcg+0x50/0xc0 [ 35.779225][ T3667] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 35.785248][ T3667] __read_swap_cache_async+0x236/0x480 [ 35.790881][ T3667] swap_cluster_readahead+0x276/0x3f0 [ 35.796369][ T3667] swapin_readahead+0xe4/0x6f0 [ 35.801264][ T3667] ? __filemap_get_folio+0x420/0x5b0 [ 35.806560][ T3667] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 35.812141][ T3667] ? swap_cache_get_folio+0x77/0x210 [ 35.817471][ T3667] do_swap_page+0x31e/0x2550 [ 35.822069][ T3667] ? cgroup_rstat_updated+0x99/0x550 [ 35.827474][ T3667] ? __rcu_read_lock+0x36/0x50 [ 35.832312][ T3667] ? __pfx_default_wake_function+0x10/0x10 [ 35.838146][ T3667] handle_mm_fault+0x8c5/0x2aa0 [ 35.843097][ T3667] exc_page_fault+0x3b9/0x650 [ 35.847830][ T3667] asm_exc_page_fault+0x26/0x30 [ 35.852819][ T3667] RIP: 0033:0x7f576d91cd0a [ 35.857243][ T3667] Code: 48 89 54 24 10 83 c5 01 e8 33 b4 fe ff 48 8b 43 38 48 8b 54 24 10 41 83 c7 01 83 43 28 08 48 8d 48 f8 48 89 4b 38 48 89 50 f8 <45> 3b 7d 04 0f 82 68 fe ff ff e9 00 ff ff ff 0f 1f 80 00 00 00 00 [ 35.876910][ T3667] RSP: 002b:00007fff3b4045b0 EFLAGS: 00010202 [ 35.883007][ T3667] RAX: 0000001b32f1ac60 RBX: 00007f576e725720 RCX: 0000001b32f1ac58 [ 35.890980][ T3667] RDX: ffffffff81bed619 RSI: 0000000000000008 RDI: 00007f576e725720 [ 35.898973][ T3667] RBP: 0000000000000009 R08: 00007f576dbe0000 R09: 00007f576dbe2000 [ 35.907056][ T3667] R10: 0000000081bed61d R11: 0000000000000001 R12: ffffffff81bed389 [ 35.915038][ T3667] R13: 00007f576dbf6018 R14: 0000000000000008 R15: 0000000000000009 [ 35.922619][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 35.922655][ T29] audit: type=1326 audit(1731903430.983:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc634156e7 code=0x7ffc0000 [ 35.923088][ T3667] ? _copy_from_user+0x19/0xb0 [ 35.932221][ T29] audit: type=1326 audit(1731903430.983:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc633ba099 code=0x7ffc0000 [ 35.952222][ T3667] ? check_zeroed_user+0x139/0x190 [ 35.952259][ T3667] [ 35.953542][ T3667] memory: usage 307200kB, limit 307200kB, failcnt 114 [ 35.958835][ T29] audit: type=1326 audit(1731903431.023:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc634156e7 code=0x7ffc0000 [ 35.980707][ T3667] memory+swap: usage 311488kB, limit 9007199254740988kB, failcnt 0 [ 35.980783][ T3667] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 35.980797][ T3667] Memory cgroup stats for /syz2: [ 35.985781][ T3667] cache 90112 [ 35.986059][ T29] audit: type=1326 audit(1731903431.023:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc633ba099 code=0x7ffc0000 [ 35.989063][ T3667] rss 4096 [ 35.989073][ T3667] shmem 0 [ 35.995834][ T29] audit: type=1326 audit(1731903431.023:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 36.018904][ T3667] mapped_file 90112 [ 36.029514][ T3715] team0: Failed to send options change via netlink (err -105) [ 36.034066][ T3667] dirty 90112 [ 36.034077][ T3667] writeback 4096 [ 36.034085][ T3667] workingset_refault_anon 119 [ 36.034093][ T3667] workingset_refault_file 46 [ 36.039175][ T3715] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 36.042356][ T3667] swap 4390912 [ 36.067742][ T29] audit: type=1326 audit(1731903431.133:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc634156e7 code=0x7ffc0000 [ 36.068824][ T3667] swapcached 8192 [ 36.071554][ T29] audit: type=1326 audit(1731903431.133:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc633ba099 code=0x7ffc0000 [ 36.094672][ T3667] pgpgin 5355 [ 36.094682][ T3667] pgpgout 5331 [ 36.094689][ T3667] pgfault 6068 [ 36.094697][ T3667] pgmajfault 15 [ 36.094703][ T3667] inactive_anon 0 [ 36.098558][ T29] audit: type=1326 audit(1731903431.133:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 36.106030][ T3667] active_anon 8192 [ 36.114208][ T3715] team0: Port device netdevsim1 removed [ 36.117555][ T3667] inactive_file 0 [ 36.124912][ T3715] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 36.131168][ T3667] active_file 90112 [ 36.136228][ T29] audit: type=1326 audit(1731903431.173:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc634156e7 code=0x7ffc0000 [ 36.157978][ T3667] unevictable 0 [ 36.161578][ T29] audit: type=1326 audit(1731903431.173:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.0.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc633ba099 code=0x7ffc0000 [ 36.184919][ T3667] hierarchical_memory_limit 314572800 [ 36.184932][ T3667] hierarchical_memsw_limit 9223372036854771712 [ 36.184942][ T3667] total_cache 90112 [ 36.184951][ T3667] total_rss 4096 [ 36.184959][ T3667] total_shmem 0 [ 36.184966][ T3667] total_mapped_file 90112 [ 36.184974][ T3667] total_dirty 90112 [ 36.184982][ T3667] total_writeback 4096 [ 36.337775][ T3667] total_workingset_refault_anon 119 [ 36.342977][ T3667] total_workingset_refault_file 46 [ 36.348187][ T3667] total_swap 4390912 [ 36.352087][ T3667] total_swapcached 8192 [ 36.356256][ T3667] total_pgpgin 5355 [ 36.360097][ T3667] total_pgpgout 5331 [ 36.364077][ T3667] total_pgfault 6068 [ 36.368067][ T3667] total_pgmajfault 15 [ 36.372106][ T3667] total_inactive_anon 0 [ 36.376290][ T3667] total_active_anon 8192 [ 36.381037][ T3667] total_inactive_file 0 [ 36.385624][ T3667] total_active_file 90112 [ 36.390058][ T3667] total_unevictable 0 [ 36.394056][ T3667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.84,pid=3667,uid=0 [ 36.408649][ T3667] Memory cgroup out of memory: Killed process 3667 (syz.2.84) total-vm:89168kB, anon-rss:612kB, file-rss:16224kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 36.450413][ T3736] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.638157][ T3746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 36.673659][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 36.758465][ T3754] pim6reg1: entered promiscuous mode [ 36.763890][ T3754] pim6reg1: entered allmulticast mode [ 36.815161][ T3668] syz.2.84 (3668) used greatest stack depth: 7272 bytes left [ 36.861814][ T3758] loop1: detected capacity change from 0 to 512 [ 36.875276][ T3758] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.110: corrupted xattr block 95: invalid header [ 36.891463][ T3758] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.904702][ T3758] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.110: bg 0: block 7: invalid block bitmap [ 36.917731][ T3758] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 36.928580][ T3758] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.110: corrupted xattr block 95: invalid header [ 36.943726][ T3758] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 36.954492][ T3758] EXT4-fs (loop1): 1 orphan inode deleted [ 36.969009][ T3758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.109401][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.196116][ T3780] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 37.250301][ T3790] tmpfs: Bad value for 'uid' [ 37.254934][ T3790] tmpfs: Bad value for 'uid' [ 37.279856][ T3793] loop1: detected capacity change from 0 to 512 [ 37.287304][ T3793] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.310128][ T3793] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.125: iget: bad extra_isize 7 (inode size 256) [ 37.323255][ T3793] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.125: couldn't read orphan inode 15 (err -117) [ 37.335958][ T3793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.353879][ T3793] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 37.385531][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.397746][ T3799] Illegal XDP return value 4294967274 on prog (id 103) dev N/A, expect packet loss! [ 37.493544][ T3811] loop1: detected capacity change from 0 to 128 [ 37.520614][ T3811] msdos: Unknown parameter 'kfree' [ 37.554556][ T3811] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.562167][ T3821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.136'. [ 37.564192][ T3811] vhci_hcd: invalid port number 219 [ 37.576289][ T3811] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 37.764342][ T3838] loop4: detected capacity change from 0 to 1024 [ 37.778655][ T3838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.799169][ T3838] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.146: attempt to clear invalid blocks 1634560256 len 1 [ 37.820681][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.826268][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.838702][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.979047][ T3858] loop7: detected capacity change from 0 to 7 [ 37.985442][ T3858] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.993727][ T3858] Buffer I/O error on dev loop7, logical block 0, async page read [ 38.001603][ T3858] loop7: unable to read partition table [ 38.007278][ T3858] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 38.007278][ T3858] ) failed (rc=-5) [ 38.010954][ T3860] macvlan0: entered promiscuous mode [ 38.033866][ T3860] ipvlan0: entered promiscuous mode [ 38.044445][ T3862] loop4: detected capacity change from 0 to 1024 [ 38.045990][ T3860] ipvlan0: left promiscuous mode [ 38.056078][ T3860] macvlan0: left promiscuous mode [ 38.078309][ T3862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.103238][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.216385][ T3879] loop2: detected capacity change from 0 to 512 [ 38.240132][ T3879] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.255138][ T3879] EXT4-fs (loop2): mount failed [ 38.392047][ T3892] loop1: detected capacity change from 0 to 512 [ 38.399770][ T3892] EXT4-fs: Ignoring removed oldalloc option [ 38.406730][ T3892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.429552][ T3892] EXT4-fs (loop1): 1 truncate cleaned up [ 38.435679][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.500801][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.501713][ T3900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 38.518682][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.526165][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.543811][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.551481][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.631206][ T3908] loop0: detected capacity change from 0 to 512 [ 38.654280][ T3908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.667781][ T3908] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.750448][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.025500][ T3949] IPv6: Can't replace route, no match found [ 39.082154][ T3951] syzkaller0: entered promiscuous mode [ 39.087825][ T3951] syzkaller0: entered allmulticast mode [ 39.105196][ T3957] netem: incorrect gi model size [ 39.110323][ T3957] netem: change failed [ 39.123169][ T3962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'. [ 39.172804][ T3964] loop1: detected capacity change from 0 to 512 [ 39.183964][ T3964] EXT4-fs: Ignoring removed oldalloc option [ 39.230699][ T3964] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.198: Parent and EA inode have the same ino 15 [ 39.245926][ T3964] EXT4-fs (loop1): Remounting filesystem read-only [ 39.252706][ T3964] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 39.262411][ T3964] EXT4-fs (loop1): 1 orphan inode deleted [ 39.269089][ T3964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.281306][ T3964] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 39.292004][ T3964] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.378600][ T3986] loop1: detected capacity change from 0 to 512 [ 39.389577][ T3986] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.207: corrupted in-inode xattr: invalid ea_ino [ 39.406839][ T3986] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.207: couldn't read orphan inode 15 (err -117) [ 39.419882][ T3986] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.501180][ T3312] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 39.587556][ T3999] pim6reg1: entered promiscuous mode [ 39.592987][ T3999] pim6reg1: entered allmulticast mode [ 39.709992][ T4016] loop1: detected capacity change from 0 to 2048 [ 39.738301][ T4016] Alternate GPT is invalid, using primary GPT. [ 39.744632][ T4016] loop1: p1 p2 p3 [ 40.101693][ T4034] pim6reg1: entered promiscuous mode [ 40.107089][ T4034] pim6reg1: entered allmulticast mode [ 40.322079][ T4049] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.233'. [ 40.331581][ T4046] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.233'. [ 40.477149][ T4059] IPv6: Can't replace route, no match found [ 40.570434][ T4069] syz.4.244 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.880847][ T4106] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.888549][ T4106] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 40.965882][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 40.965900][ T29] audit: type=1326 audit(1731903436.023:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 40.995512][ T29] audit: type=1326 audit(1731903436.023:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.018835][ T29] audit: type=1326 audit(1731903436.033:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.042076][ T29] audit: type=1326 audit(1731903436.033:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.065414][ T29] audit: type=1326 audit(1731903436.033:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.088958][ T29] audit: type=1326 audit(1731903436.033:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.112292][ T29] audit: type=1326 audit(1731903436.033:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.135736][ T29] audit: type=1326 audit(1731903436.033:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.159011][ T29] audit: type=1326 audit(1731903436.033:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.182318][ T29] audit: type=1326 audit(1731903436.033:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc6341e719 code=0x7ffc0000 [ 41.327991][ T306] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfd [ 41.622048][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.629496][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.636917][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 41.644330][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.651818][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.659341][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.666772][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.674171][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.681606][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.689113][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.696636][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.704043][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.711469][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.718951][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.726351][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.733770][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.741234][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.748713][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.756109][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.763524][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.770986][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.778415][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.785819][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.793254][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.800783][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.808207][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.815723][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.823235][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.830668][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.838073][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.845535][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.852963][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.860377][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.867826][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.875276][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.882729][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.890225][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.897751][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.907874][ T1060] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.941435][ T4146] loop1: detected capacity change from 0 to 256 [ 41.953235][ T4146] vfat: Unknown parameter 'ÿÿÿÿÿ0x0000000000000000' [ 42.162429][ T4167] loop3: detected capacity change from 0 to 2048 [ 42.172476][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 42.197661][ T4165] bridge0: port 3(macvlan2) entered blocking state [ 42.204248][ T4165] bridge0: port 3(macvlan2) entered disabled state [ 42.211130][ T4165] macvlan2: entered allmulticast mode [ 42.216531][ T4165] bridge0: entered allmulticast mode [ 42.223073][ T4165] macvlan2: left allmulticast mode [ 42.228294][ T4165] bridge0: left allmulticast mode [ 42.234521][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.256911][ T4178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'. [ 42.276240][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.429882][ T4201] bpf_get_probe_write_proto: 2 callbacks suppressed [ 42.429898][ T4201] syz.2.300[4201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.432186][ T4197] loop4: detected capacity change from 0 to 2048 [ 42.445948][ T4201] syz.2.300[4201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.460283][ T4201] syz.2.300[4201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.477015][ T4197] loop4: p3 < > p4 < > [ 42.492696][ T4197] loop4: partition table partially beyond EOD, truncated [ 42.507117][ T4197] loop4: p3 start 4284289 is beyond EOD, truncated [ 42.525743][ T1060] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.533296][ T1060] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.543248][ T1060] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.586118][ C1] hrtimer: interrupt took 26967 ns [ 42.611922][ T4212] loop3: detected capacity change from 0 to 1024 [ 42.622499][ T4212] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.638888][ T4212] JBD2: no valid journal superblock found [ 42.644645][ T4212] EXT4-fs (loop3): Could not load journal inode [ 42.715404][ T4228] loop4: detected capacity change from 0 to 1024 [ 42.723157][ T4228] EXT4-fs: Ignoring removed orlov option [ 42.729113][ T4228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.742811][ T4230] loop2: detected capacity change from 0 to 512 [ 42.768872][ T4230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.783213][ T4228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.785793][ T4230] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.813948][ C1] ------------[ cut here ]------------ [ 42.819462][ C1] refcount_t: underflow; use-after-free. [ 42.825348][ C1] WARNING: CPU: 1 PID: 4230 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 42.834794][ C1] Modules linked in: [ 42.838734][ C1] CPU: 1 UID: 0 PID: 4230 Comm: syz.2.314 Not tainted 6.12.0-syzkaller #0 [ 42.847304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 42.857396][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 42.863604][ C1] Code: 72 ff ff ff e8 8b 75 71 ff 48 c7 c7 fe d8 b2 86 e8 ff 5c 8a ff c6 05 06 0e f4 04 01 90 48 c7 c7 e6 b0 1b 86 e8 cb 39 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 5c 75 71 ff 48 c7 c7 fb d8 b2 86 e8 [ 42.883316][ C1] RSP: 0018:ffffc900000e4b60 EFLAGS: 00010246 [ 42.889420][ C1] RAX: 6dc04bfa5c58f800 RBX: ffff8881034939e4 RCX: ffff888121f46300 [ 42.897498][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.905506][ C1] RBP: 0000000000000003 R08: ffffffff81120637 R09: 0000000000000000 [ 42.913553][ C1] R10: 0001ffffffffffff R11: ffff888121f46300 R12: ffff8881152fc468 [ 42.921594][ C1] R13: ffff8881140b8000 R14: ffff8881034939e4 R15: 0000000000000000 [ 42.929602][ C1] FS: 00007f576c6b76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 42.938585][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.945278][ C1] CR2: 0000000020003e40 CR3: 000000011fc10000 CR4: 00000000003506f0 [ 42.953291][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.961346][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.969378][ C1] Call Trace: [ 42.972687][ C1] [ 42.975550][ C1] ? __warn+0x141/0x350 [ 42.979794][ C1] ? report_bug+0x315/0x420 [ 42.984350][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 42.989970][ C1] ? handle_bug+0x60/0x90 [ 42.994349][ C1] ? exc_invalid_op+0x1a/0x50 [ 42.999097][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 43.004155][ C1] ? __warn_printk+0x167/0x1b0 [ 43.009016][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 43.014601][ C1] sk_skb_reason_drop+0xe9/0x290 [ 43.019642][ C1] j1939_session_put+0x157/0x2a0 [ 43.024609][ C1] j1939_xtp_rx_eoma+0x1f0/0x260 [ 43.029629][ C1] j1939_tp_recv+0x651/0xa80 [ 43.034262][ C1] j1939_can_recv+0x45f/0x550 [ 43.039009][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 43.044338][ C1] can_rcv_filter+0x225/0x4c0 [ 43.049105][ C1] can_receive+0x182/0x1f0 [ 43.053603][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 43.058295][ C1] can_rcv+0xe7/0x180 [ 43.062315][ C1] ? __pfx_can_rcv+0x10/0x10 [ 43.064742][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 43.066951][ C1] __netif_receive_skb+0x123/0x280 [ 43.066985][ C1] process_backlog+0x22e/0x440 [ 43.067017][ C1] __napi_poll+0x63/0x3c0 [ 43.067035][ C1] ? net_rx_action+0x376/0x7f0 [ 43.067056][ C1] net_rx_action+0x3a1/0x7f0 [ 43.075839][ T4242] netlink: 'syz.1.316': attribute type 11 has an invalid length. [ 43.080924][ C1] handle_softirqs+0xbf/0x280 [ 43.085667][ T4242] netlink: 'syz.1.316': attribute type 13 has an invalid length. [ 43.089997][ C1] irq_exit_rcu+0x3e/0x90 [ 43.099978][ T4242] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.107105][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 43.107164][ C1] [ 43.107170][ C1] [ 43.107177][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 43.107199][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x3d/0x60 [ 43.111987][ T4242] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.119695][ C1] Code: 86 e8 37 62 17 fc 48 83 3d 07 78 32 01 00 74 2b 48 89 df e8 05 07 00 00 90 41 f7 c6 00 02 00 00 74 01 fb 65 ff 0d eb 10 d1 7a <74> 08 5b 41 5e c3 cc cc cc cc 0f 1f 44 00 00 eb f1 90 0f 0b 66 2e [ 43.124016][ T4242] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.132674][ C1] RSP: 0018:ffffc900011f3a20 EFLAGS: 00000286 [ 43.132697][ C1] RAX: 0000000000000001 RBX: ffff888237d1ff80 RCX: ffffffff8531d239 [ 43.132711][ C1] RDX: 0000000000000948 RSI: 0000000000000000 RDI: ffff888237d1ff80 [ 43.132726][ C1] RBP: ffff888237d1ff80 R08: 0001ffff86644a4f R09: 0000000000000000 [ 43.132740][ C1] R10: 0001ffffffffffff R11: ffffffff810c2250 R12: ffff88811522e8e8 [ 43.132755][ C1] R13: 0000000000000246 R14: 0000000000000246 R15: ffff88811522e8b8 [ 43.138428][ T4242] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.141387][ C1] ? __pfx_lapic_next_event+0x10/0x10 [ 43.146875][ T4242] vxlan0: entered promiscuous mode [ 43.150338][ C1] ? _raw_spin_unlock_irqrestore+0x19/0x60 [ 43.265003][ C1] hrtimer_start_range_ns+0x53d/0x580 [ 43.270771][ C1] j1939_tp_schedule_txtimer+0x67/0xa0 [ 43.276285][ C1] j1939_sk_sendmsg+0x954/0xc00 [ 43.281192][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 43.286680][ C1] __sock_sendmsg+0x140/0x180 [ 43.291849][ C1] ____sys_sendmsg+0x312/0x410 [ 43.296662][ C1] __sys_sendmmsg+0x259/0x500 [ 43.301493][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 43.306366][ C1] x64_sys_call+0xa49/0x2d60 [ 43.311008][ C1] do_syscall_64+0xc9/0x1c0 [ 43.315547][ C1] ? clear_bhb_loop+0x55/0xb0 [ 43.320292][ C1] ? clear_bhb_loop+0x55/0xb0 [ 43.324991][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.330937][ C1] RIP: 0033:0x7f576da3e719 [ 43.335367][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.355022][ C1] RSP: 002b:00007f576c6b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 43.363629][ C1] RAX: ffffffffffffffda RBX: 00007f576dbf5f80 RCX: 00007f576da3e719 [ 43.371682][ C1] RDX: 0000000000000001 RSI: 0000000020003e40 RDI: 0000000000000004 [ 43.379711][ C1] RBP: 00007f576dab175e R08: 0000000000000000 R09: 0000000000000000 [ 43.387739][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.395762][ C1] R13: 0000000000000000 R14: 00007f576dbf5f80 R15: 00007fff3b404518 [ 43.403774][ C1] [ 43.406817][ C1] ---[ end trace 0000000000000000 ]--- [ 43.416112][ T4241] netlink: 'syz.0.317': attribute type 3 has an invalid length. [ 43.426456][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.454732][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.496014][ T4252] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.502470][ T4254] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.320'. [ 43.522659][ T4255] loop3: detected capacity change from 0 to 512 [ 43.530228][ T4252] Cannot find del_set index 0 as target [ 43.536992][ T4255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.567109][ T4255] EXT4-fs (loop3): 1 truncate cleaned up [ 43.580267][ T4255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.630941][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.641689][ T4264] netlink: 'syz.4.327': attribute type 6 has an invalid length. [ 43.716296][ T4272] loop2: detected capacity change from 0 to 512 [ 43.727147][ T4272] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.744205][ T4272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 43.757474][ T4272] System zones: 1-12 [ 43.762380][ T4272] EXT4-fs (loop2): 1 truncate cleaned up [ 43.770464][ T4272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.814700][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.865478][ T4282] cgroup: fork rejected by pids controller in /syz4 [ 43.947299][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 44.044823][ T4306] loop2: detected capacity change from 0 to 512 [ 44.051609][ T4306] EXT4-fs: inline encryption not supported [ 44.076183][ T4306] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.087823][ T4306] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 44.098040][ T4306] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.346: Corrupt directory, running e2fsck is recommended [ 44.114278][ T4306] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 44.122626][ T4306] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.346: corrupted in-inode xattr: invalid ea_ino [ 44.137822][ T4306] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.346: couldn't read orphan inode 15 (err -117) [ 44.150320][ T4306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.174363][ T4306] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.186013][ T4306] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 44.196213][ T4306] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.346: Corrupt directory, running e2fsck is recommended [ 44.218490][ T4306] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.230066][ T4306] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 44.240251][ T4306] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.346: Corrupt directory, running e2fsck is recommended [ 44.263408][ T4306] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.275115][ T4306] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 44.280729][ T4314] loop1: detected capacity change from 0 to 2048 [ 44.285216][ T4306] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.346: Corrupt directory, running e2fsck is recommended [ 44.308151][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.351542][ T4314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.361989][ T4323] loop0: detected capacity change from 0 to 1024 [ 44.376402][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.387561][ T4323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.396919][ T4306] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.412139][ T4306] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.346: path /70/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 44.422495][ T4323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.440450][ T4306] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 8: comm syz.2.346: path /70/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 44.466333][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.480789][ T3317] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 44.499722][ T3317] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 44.527163][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.537988][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.570212][ T4336] loop2: detected capacity change from 0 to 128 [ 44.582084][ T4336] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.596402][ T4336] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.630609][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.659141][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.758461][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.774123][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 44.791838][ T28] bridge_slave_1: left allmulticast mode [ 44.797596][ T28] bridge_slave_1: left promiscuous mode [ 44.803406][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.816959][ T28] bridge_slave_0: left allmulticast mode [ 44.822643][ T28] bridge_slave_0: left promiscuous mode [ 44.828503][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.974420][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.977067][ T4365] loop3: detected capacity change from 0 to 256 [ 44.994589][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.012559][ T28] bond0 (unregistering): Released all slaves [ 45.019098][ T4365] FAT-fs (loop3): Directory bread(block 64) failed [ 45.025702][ T4365] FAT-fs (loop3): Directory bread(block 65) failed [ 45.032817][ T4365] FAT-fs (loop3): Directory bread(block 66) failed [ 45.040014][ T4365] FAT-fs (loop3): Directory bread(block 67) failed [ 45.049786][ T4365] FAT-fs (loop3): Directory bread(block 68) failed [ 45.056350][ T4365] FAT-fs (loop3): Directory bread(block 69) failed [ 45.063505][ T4365] FAT-fs (loop3): Directory bread(block 70) failed [ 45.087173][ T4365] FAT-fs (loop3): Directory bread(block 71) failed [ 45.096117][ T4365] FAT-fs (loop3): Directory bread(block 72) failed [ 45.106948][ T4365] FAT-fs (loop3): Directory bread(block 73) failed [ 45.123017][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.130275][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.150302][ T4321] bridge_slave_0: entered allmulticast mode [ 45.163899][ T4321] bridge_slave_0: entered promiscuous mode [ 45.173196][ T4365] syz.3.367: attempt to access beyond end of device [ 45.173196][ T4365] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 45.191670][ T4385] loop1: detected capacity change from 0 to 128 [ 45.210226][ T28] hsr_slave_0: left promiscuous mode [ 45.225621][ T28] hsr_slave_1: left promiscuous mode [ 45.237865][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.245323][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.283239][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.290783][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.299804][ T4396] atomic_op ffff8881031a6928 conn xmit_atomic 0000000000000000 [ 45.319397][ T28] veth1_macvtap: left promiscuous mode [ 45.324966][ T28] veth0_macvtap: left promiscuous mode [ 45.330629][ T28] veth1_vlan: left promiscuous mode [ 45.336004][ T28] veth0_vlan: left promiscuous mode [ 45.451788][ T28] team0 (unregistering): Port device team_slave_1 removed [ 45.464822][ T28] team0 (unregistering): Port device team_slave_0 removed [ 45.506426][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.513775][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.521438][ T4321] bridge_slave_1: entered allmulticast mode [ 45.529019][ T4321] bridge_slave_1: entered promiscuous mode [ 45.583973][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.623112][ T4424] loop3: detected capacity change from 0 to 512 [ 45.632997][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.680835][ T4432] ref_ctr increment failed for inode: 0x18c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881048b5f80 [ 45.721665][ T4431] uprobe: syz.1.380:4431 failed to unregister, leaking uprobe [ 45.722051][ T4424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.745938][ T4321] team0: Port device team_slave_0 added [ 45.750192][ T4424] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.752830][ T4321] team0: Port device team_slave_1 added [ 45.812446][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.819491][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.845462][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.891128][ T4450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 45.906749][ T4424] loop3: detected capacity change from 512 to 511 [ 45.915119][ T4454] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.378: bg 0: block 16344: padding at end of block bitmap is not set [ 45.931564][ T4358] chnl_net:caif_netlink_parms(): no params data found [ 45.942551][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.949566][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.975587][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.986255][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 45.986270][ T29] audit: type=1326 audit(1731903441.003:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c007e719 code=0x7ffc0000 [ 46.015997][ T29] audit: type=1326 audit(1731903441.003:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c007e719 code=0x7ffc0000 [ 46.019279][ T4454] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.092818][ T4321] hsr_slave_0: entered promiscuous mode [ 46.099311][ T4321] hsr_slave_1: entered promiscuous mode [ 46.101850][ T3316] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /74/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=771883264, rec_len=0, size=2048 fake=0 [ 46.129784][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.137586][ T4321] Cannot create hsr debugfs directory [ 46.138866][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.171153][ T4467] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.387'. [ 46.181666][ T4462] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.387'. [ 46.215524][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.242193][ T29] audit: type=1400 audit(1731903441.303:1074): avc: denied { mounton } for pid=4474 comm="syz.1.391" path="/76/bus" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.283922][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.291038][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.299492][ T4358] bridge_slave_0: entered allmulticast mode [ 46.306625][ T4358] bridge_slave_0: entered promiscuous mode [ 46.321191][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.351573][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.358833][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.369467][ T29] audit: type=1400 audit(1731903441.433:1075): avc: denied { watch watch_reads } for pid=4487 comm="syz.1.394" path="/77/file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.383807][ T4491] loop2: detected capacity change from 0 to 128 [ 46.401784][ T4358] bridge_slave_1: entered allmulticast mode [ 46.408335][ T4358] bridge_slave_1: entered promiscuous mode [ 46.419423][ T4491] vfat: Unknown parameter 'ÿÿÿ0xffffffffffffffff00000000000000000000000ÿÿÿÿÿÿÿÿÿÿ' [ 46.443919][ T29] audit: type=1326 audit(1731903441.493:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c007e719 code=0x7ffc0000 [ 46.467362][ T29] audit: type=1326 audit(1731903441.493:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c007e719 code=0x7ffc0000 [ 46.490720][ T29] audit: type=1326 audit(1731903441.493:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c007e719 code=0x7ffc0000 [ 46.514193][ T29] audit: type=1326 audit(1731903441.493:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c007e719 code=0x7ffc0000 [ 46.537566][ T29] audit: type=1326 audit(1731903441.493:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c007e719 code=0x7ffc0000 [ 46.560942][ T29] audit: type=1326 audit(1731903441.493:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c007e719 code=0x7ffc0000 [ 46.601424][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.661397][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.683309][ T4358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.722548][ T4358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.767980][ T4519] pim6reg: entered allmulticast mode [ 46.789694][ T4519] pim6reg: left allmulticast mode [ 46.804560][ T4358] team0: Port device team_slave_0 added [ 46.807070][ T4523] loop1: detected capacity change from 0 to 1024 [ 46.812846][ T4358] team0: Port device team_slave_1 added [ 46.845973][ T4358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.852974][ T4358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.878952][ T4358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.892065][ T4358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.892544][ T4523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.899036][ T4358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.899066][ T4358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.949079][ T28] bridge_slave_1: left allmulticast mode [ 46.954757][ T28] bridge_slave_1: left promiscuous mode [ 46.960507][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.969865][ T28] bridge_slave_0: left allmulticast mode [ 46.975543][ T28] bridge_slave_0: left promiscuous mode [ 46.981404][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.056568][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.099601][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.109939][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.119955][ T28] bond0 (unregistering): Released all slaves [ 47.171466][ T4358] hsr_slave_0: entered promiscuous mode [ 47.181356][ T4358] hsr_slave_1: entered promiscuous mode [ 47.193388][ T4358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.201094][ T4358] Cannot create hsr debugfs directory [ 47.212982][ T28] hsr_slave_0: left promiscuous mode [ 47.219396][ T28] hsr_slave_1: left promiscuous mode [ 47.227323][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.234754][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.242338][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.249838][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.259059][ T28] veth1_macvtap: left promiscuous mode [ 47.264639][ T28] veth0_macvtap: left promiscuous mode [ 47.270406][ T28] veth1_vlan: left promiscuous mode [ 47.275911][ T28] veth0_vlan: left promiscuous mode [ 47.360881][ T28] team0 (unregistering): Port device team_slave_1 removed [ 47.371746][ T28] team0 (unregistering): Port device team_slave_0 removed [ 47.410958][ T4542] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.430060][ T4504] chnl_net:caif_netlink_parms(): no params data found [ 47.479658][ T4321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.492662][ T4321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.510302][ T4321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.526070][ T4321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.544073][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.551219][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.559944][ T4504] bridge_slave_0: entered allmulticast mode [ 47.566435][ T4504] bridge_slave_0: entered promiscuous mode [ 47.578855][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.585926][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.593712][ T4504] bridge_slave_1: entered allmulticast mode [ 47.601421][ T4504] bridge_slave_1: entered promiscuous mode [ 47.634341][ T4504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.656033][ T4504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.692439][ T4358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.704963][ T4504] team0: Port device team_slave_0 added [ 47.712135][ T4504] team0: Port device team_slave_1 added [ 47.718159][ T4358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.727981][ T4358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.778358][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.785532][ T4358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.810582][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.817671][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.843703][ T4504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.859848][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.861952][ T4569] tls_set_device_offload: netdev not found [ 47.866865][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.866895][ T4504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.925349][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.937298][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.955930][ T4504] hsr_slave_0: entered promiscuous mode [ 47.963646][ T4504] hsr_slave_1: entered promiscuous mode [ 47.969654][ T4504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.977974][ T4504] Cannot create hsr debugfs directory [ 47.987440][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.994515][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.002868][ T4571] netlink: 9 bytes leftover after parsing attributes in process `syz.1.423'. [ 48.011996][ T4571] 0·: renamed from hsr0 (while UP) [ 48.018616][ T4571] 0·: entered promiscuous mode [ 48.024105][ T4571] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 48.049875][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.061099][ T4573] Cannot find add_set index 0 as target [ 48.077670][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.084818][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.095235][ T4577] loop2: detected capacity change from 0 to 256 [ 48.102571][ T4577] FAT-fs (loop2): bogus number of FAT sectors [ 48.108722][ T4577] FAT-fs (loop2): Can't find a valid FAT filesystem [ 48.128395][ T28] bond0: (slave netdevsim1): Releasing backup interface [ 48.139190][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.213088][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.241427][ T4583] netlink: 52 bytes leftover after parsing attributes in process `syz.1.428'. [ 48.257799][ T4358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.306310][ T4358] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.339441][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.346674][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.374051][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.377165][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.381214][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.419413][ T28] bridge_slave_1: left allmulticast mode [ 48.425081][ T28] bridge_slave_1: left promiscuous mode [ 48.430804][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.441133][ T28] bridge_slave_0: left allmulticast mode [ 48.446977][ T28] bridge_slave_0: left promiscuous mode [ 48.452690][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.569161][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.579334][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.589323][ T28] bond0 (unregistering): Released all slaves [ 48.608006][ T4606] bridge0: port 3(vlan2) entered blocking state [ 48.614295][ T4606] bridge0: port 3(vlan2) entered disabled state [ 48.621050][ T4606] vlan2: entered allmulticast mode [ 48.628257][ T4606] vlan2: left allmulticast mode [ 48.642644][ T28] hsr_slave_0: left promiscuous mode [ 48.648571][ T28] hsr_slave_1: left promiscuous mode [ 48.655411][ T28] veth1_macvtap: left promiscuous mode [ 48.660936][ T28] veth0_macvtap: left promiscuous mode [ 48.666449][ T28] veth1_vlan: left promiscuous mode [ 48.671923][ T28] veth0_vlan: left promiscuous mode [ 48.759776][ T4614] loop1: detected capacity change from 0 to 2048 [ 48.776900][ T28] team0 (unregistering): Port device team_slave_1 removed [ 48.779183][ T4614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.796739][ T28] team0 (unregistering): Port device team_slave_0 removed [ 48.804857][ T4614] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.440: bg 0: block 234: padding at end of block bitmap is not set [ 48.821632][ T4614] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28 [ 48.834038][ T4614] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.834038][ T4614] [ 48.843783][ T4614] EXT4-fs (loop1): Total free blocks count 0 [ 48.849849][ T4614] EXT4-fs (loop1): Free/Dirty block details [ 48.855731][ T4614] EXT4-fs (loop1): free_blocks=0 [ 48.860811][ T4614] EXT4-fs (loop1): dirty_blocks=32 [ 48.865934][ T4614] EXT4-fs (loop1): Block reservation details [ 48.871990][ T4614] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 48.892467][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.900452][ T4504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.909947][ T4504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.920217][ T4504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.931003][ T4504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.955043][ T3340] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 49.011162][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.039286][ T4504] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.050600][ T4631] loop2: detected capacity change from 0 to 128 [ 49.066133][ T4358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.081667][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.088811][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.098451][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.105543][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.125251][ T4631] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.128794][ T4504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.147828][ T4504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.158768][ T4631] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.233999][ T4321] veth0_vlan: entered promiscuous mode [ 49.245997][ T4321] veth1_vlan: entered promiscuous mode [ 49.285536][ T4321] veth0_macvtap: entered promiscuous mode [ 49.294200][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.295995][ T4321] veth1_macvtap: entered promiscuous mode [ 49.320890][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.331560][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.341513][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.351985][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.365447][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.391190][ T4504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.409904][ T4660] loop2: detected capacity change from 0 to 1024 [ 49.423273][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.431700][ T4660] EXT4-fs: Ignoring removed orlov option [ 49.433843][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.439484][ T4660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.449235][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.466399][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.473997][ T4653] loop1: detected capacity change from 0 to 8192 [ 49.493397][ T4660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.495189][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.519191][ T4358] veth0_vlan: entered promiscuous mode [ 49.532934][ T4358] veth1_vlan: entered promiscuous mode [ 49.555028][ T4358] veth0_macvtap: entered promiscuous mode [ 49.563582][ T4358] veth1_macvtap: entered promiscuous mode [ 49.571652][ T4321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.580528][ T4321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.589279][ T4321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.598039][ T4321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.623453][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.634055][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.643906][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.654571][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.664441][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.674950][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.690286][ T4358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.699332][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.709871][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.713561][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.719674][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.719691][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.748984][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.759475][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.770223][ T4358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.785427][ T4358] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.794310][ T4358] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.803276][ T4358] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.812084][ T4358] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.941469][ T4504] veth0_vlan: entered promiscuous mode [ 49.955505][ T4685] ip6_vti0: entered promiscuous mode [ 49.961652][ T4685] vlan2: entered promiscuous mode [ 49.969882][ T4685] ip6_vti0: left promiscuous mode [ 49.991082][ T4504] veth1_vlan: entered promiscuous mode [ 50.011411][ T4504] veth0_macvtap: entered promiscuous mode [ 50.023325][ T4504] veth1_macvtap: entered promiscuous mode [ 50.037848][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.048452][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.058352][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.068815][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.072956][ T4689] netlink: 'syz.4.449': attribute type 3 has an invalid length. [ 50.078693][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.078713][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.086399][ T4689] netlink: 'syz.4.449': attribute type 3 has an invalid length. [ 50.096746][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.096762][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.102102][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.160971][ T4692] loop5: detected capacity change from 0 to 512 [ 50.173560][ T4695] loop2: detected capacity change from 0 to 1024 [ 50.182207][ T4689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.449'. [ 50.185946][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.191718][ T4695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.201653][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.218235][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.228721][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.238622][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.246626][ T4695] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 50.249094][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.260711][ T4692] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 50.268613][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.279524][ T4692] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 50.287014][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.291244][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.314444][ T4504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.323213][ T4504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.331905][ T4695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.344679][ T4504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.353445][ T4504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.364674][ T4695] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 50.375565][ T4692] EXT4-fs (loop5): 1 truncate cleaned up [ 50.382209][ T4692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.420354][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.429476][ T4692] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 50.474422][ T4358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.492071][ T4708] loop2: detected capacity change from 0 to 512 [ 50.503755][ T4708] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.535721][ T4708] EXT4-fs (loop2): 1 truncate cleaned up [ 50.564444][ T4710] loop1: detected capacity change from 0 to 512 [ 50.582931][ T4708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.603458][ T4710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.666095][ T4710] EXT4-fs (loop1): 1 truncate cleaned up [ 50.673628][ T4710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.689442][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.705265][ T4710] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: comm syz.1.456: inode #1073372648: comm syz.1.456: iget: illegal inode # [ 50.725947][ T4710] EXT4-fs error (device loop1): ext4_xattr_inode_iget:445: comm syz.1.456: error while reading EA inode 1073372648 err=-117 [ 50.742782][ T4728] loop5: detected capacity change from 0 to 256 [ 50.754909][ T4730] serio: Serial port ptm0 [ 50.760294][ T4710] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.456: corrupted xattr block 33: invalid header [ 50.782744][ T4710] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 50.828862][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.035552][ T4740] loop6: detected capacity change from 0 to 512 [ 51.060577][ T4740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.100257][ T4740] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.176277][ T4747] netlink: 24 bytes leftover after parsing attributes in process `syz.5.466'. [ 51.177300][ T4740] EXT4-fs error (device loop6): ext4_do_update_inode:5121: inode #19: comm syz.6.464: corrupted inode contents [ 51.220843][ T4740] EXT4-fs error (device loop6): ext4_dirty_inode:5984: inode #19: comm syz.6.464: mark_inode_dirty error [ 51.242874][ T4740] EXT4-fs error (device loop6): ext4_do_update_inode:5121: inode #19: comm syz.6.464: corrupted inode contents [ 51.264800][ T4740] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #19: comm syz.6.464: mark_inode_dirty error [ 51.293837][ T4740] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #19: comm syz.6.464: mark inode dirty (error -117) [ 51.311056][ T4740] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 51.321777][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 51.321794][ T29] audit: type=1326 audit(1731903446.383:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.355957][ T29] audit: type=1326 audit(1731903446.413:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.379419][ T29] audit: type=1326 audit(1731903446.413:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.403231][ T29] audit: type=1326 audit(1731903446.413:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.426744][ T29] audit: type=1326 audit(1731903446.413:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.450351][ T29] audit: type=1326 audit(1731903446.413:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.473808][ T29] audit: type=1326 audit(1731903446.413:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.497520][ T29] audit: type=1326 audit(1731903446.413:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.520951][ T29] audit: type=1326 audit(1731903446.413:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.544361][ T29] audit: type=1326 audit(1731903446.413:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f81a9e719 code=0x7ffc0000 [ 51.569328][ T4504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.658969][ T4769] loop1: detected capacity change from 0 to 164 [ 51.803073][ T4789] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.480'. [ 51.815620][ T4790] lo speed is unknown, defaulting to 1000 [ 51.825536][ T4790] lo speed is unknown, defaulting to 1000 [ 51.833803][ T4790] lo speed is unknown, defaulting to 1000 [ 51.844771][ T4790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.862334][ T4790] lo speed is unknown, defaulting to 1000 [ 51.877740][ T4790] lo speed is unknown, defaulting to 1000 [ 51.894479][ T4792] loop6: detected capacity change from 0 to 4096 [ 51.894759][ T4790] lo speed is unknown, defaulting to 1000 [ 51.911004][ T4790] lo speed is unknown, defaulting to 1000 [ 51.917262][ T4790] lo speed is unknown, defaulting to 1000 [ 51.923812][ T4792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.999262][ T4796] loop5: detected capacity change from 0 to 1024 [ 52.048513][ T4796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.073385][ T4504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.106958][ T4358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.169233][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 52.192272][ T4810] hub 9-0:1.0: USB hub found [ 52.203527][ T4810] hub 9-0:1.0: 8 ports detected [ 52.604593][ T4846] SELinux: security policydb version 18 (MLS) not backwards compatible [ 52.613304][ T4846] SELinux: failed to load policy [ 52.639407][ T4852] batadv0: entered promiscuous mode [ 52.645591][ T4852] batadv_slave_0: entered promiscuous mode [ 52.651546][ T4852] batadv_slave_0: left promiscuous mode [ 52.657541][ T4852] batadv0: left promiscuous mode [ 52.720419][ T4859] loop1: detected capacity change from 0 to 1024 [ 52.734368][ T4859] EXT4-fs: Ignoring removed orlov option [ 52.740179][ T4859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.753210][ T4861] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 52.801955][ T4859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.847096][ T4871] dccp_close: ABORT with 2 bytes unread [ 52.890739][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.517'. [ 52.899994][ T4878] capability: warning: `syz.4.519' uses deprecated v2 capabilities in a way that may be insecure [ 52.900629][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.993389][ T4890] pim6reg: entered allmulticast mode [ 53.009169][ T4890] pim6reg: left allmulticast mode [ 53.009198][ T4886] loop1: detected capacity change from 0 to 8192 [ 53.046932][ T4886] loop1: p1 p2 p4 [ 53.057515][ T4886] loop1: p4 size 16777216 extends beyond EOD, truncated [ 53.744531][ T4902] loop1: detected capacity change from 0 to 512 [ 53.756624][ T4902] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.538: corrupted in-inode xattr: invalid ea_ino [ 53.778911][ T4902] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.538: couldn't read orphan inode 15 (err -117) [ 53.799584][ T4902] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.873172][ T3312] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 53.960624][ T4920] loop2: detected capacity change from 0 to 512 [ 53.970994][ T4920] EXT4-fs: Ignoring removed i_version option [ 53.990398][ T4920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 54.008314][ T4920] System zones: 1-12 [ 54.021314][ T4920] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.534: bg 0: block 131: padding at end of block bitmap is not set [ 54.074472][ C1] ================================================================== [ 54.082594][ C1] BUG: KCSAN: data-race in can_send / can_send [ 54.088790][ C1] [ 54.091119][ C1] read-write to 0xffff8881045031f0 of 8 bytes by interrupt on cpu 0: [ 54.099199][ C1] can_send+0x576/0x5d0 [ 54.103412][ C1] bcm_can_tx+0x314/0x420 [ 54.107779][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 54.113110][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 54.118337][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 54.123395][ C1] handle_softirqs+0xbf/0x280 [ 54.128089][ C1] run_ksoftirqd+0x1c/0x30 [ 54.132521][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 54.137471][ C1] kthread+0x1d1/0x210 [ 54.141557][ C1] ret_from_fork+0x4b/0x60 [ 54.146007][ C1] ret_from_fork_asm+0x1a/0x30 [ 54.150790][ C1] [ 54.153118][ C1] read-write to 0xffff8881045031f0 of 8 bytes by interrupt on cpu 1: [ 54.161213][ C1] can_send+0x576/0x5d0 [ 54.165391][ C1] bcm_can_tx+0x314/0x420 [ 54.169742][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 54.175060][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 54.180309][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 54.185360][ C1] handle_softirqs+0xbf/0x280 [ 54.190052][ C1] do_softirq+0x5e/0x90 [ 54.194226][ C1] __local_bh_enable_ip+0x6e/0x70 [ 54.199267][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 54.204229][ C1] lock_sock_nested+0x10f/0x140 [ 54.209103][ C1] sockopt_lock_sock+0x42/0x50 [ 54.213896][ C1] do_ip_getsockopt+0xb57/0x11a0 [ 54.218859][ C1] ip_getsockopt+0x5c/0x170 [ 54.223392][ C1] tcp_getsockopt+0xaa/0xe0 [ 54.227970][ C1] sock_common_getsockopt+0x5b/0x70 [ 54.233192][ C1] do_sock_getsockopt+0x1ca/0x260 [ 54.238242][ C1] __sys_getsockopt+0x18a/0x200 [ 54.243107][ C1] __x64_sys_getsockopt+0x66/0x80 [ 54.248140][ C1] x64_sys_call+0x11cd/0x2d60 [ 54.252833][ C1] do_syscall_64+0xc9/0x1c0 [ 54.257353][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.263304][ C1] [ 54.265652][ C1] value changed: 0x00000000000004f1 -> 0x00000000000004f2 [ 54.272767][ C1] [ 54.275091][ C1] Reported by Kernel Concurrency Sanitizer on: [ 54.281263][ C1] CPU: 1 UID: 0 PID: 4321 Comm: syz-executor Tainted: G W 6.12.0-syzkaller #0 [ 54.291525][ C1] Tainted: [W]=WARN [ 54.295359][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 54.305419][ C1] ================================================================== [ 54.332136][ T4920] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 54.344935][ T4929] vlan2: entered allmulticast mode [ 54.352216][ T4920] EXT4-fs (loop2): 1 truncate cleaned up [ 54.358346][ T4920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.388789][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.