last executing test programs: 4.081504854s ago: executing program 0 (id=2513): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x7041, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x6, 0x10000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x500) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) unshare(0xc040400) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsm_list_modules(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000150000003d3600000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000002f6705625b3c4f4d00000000005fbe3c380000000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r6, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200cbc3c62cff26", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000314010000000000000022000900020073797a30000000000800410073697700140033006c6f000000000000000000000000000019fe7da5e1032113d50541fcd4451249e59fa0e1fe80a7d5cf634e0af9e923b823ad0690a702624385a4f382a809af70a21480a0e46a7b7877f121e8102db82bdfaebb18a2c8614be914cbf4b98e25dee0e290820e4d641fe7280c81db5267aeb54f52"], 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), 0x0, 0x0, 0xab, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") 3.897881609s ago: executing program 0 (id=2517): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0x0) 3.838683805s ago: executing program 0 (id=2519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x17, 0x0, 0x800000000000000) 3.809968967s ago: executing program 1 (id=2520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 3.754372572s ago: executing program 0 (id=2522): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x26, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@generic={0x7, 0x2, 0x7, 0x360, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @jmp={0x5, 0x0, 0xc, 0x0, 0x3, 0xfffffffffffffff8}, @cb_func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @exit, @func, @tail_call, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x1}, @func, @exit, @call={0x85, 0x0, 0x0, 0xbb}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) 3.726580054s ago: executing program 0 (id=2523): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001c0000000000007e000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.673869629s ago: executing program 1 (id=2525): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0x0) 3.639665161s ago: executing program 1 (id=2526): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1080406, &(0x7f0000000140)={[{@noquota}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5d9, &(0x7f0000000180)="$eJzs3c9vFFUcAPDvzG5b2qqtxETxYBqNQqK0tIDBHwe4E4I/bl6stBCkQENrtGhiSdCDifHigcSTB/G/UKJXTyYePHjxZEjQGC4aY9bM/uq23W23ZbeD3c8nWfbNvGnfG9pv5837sRNAzxrL/kkj9kXEfBIx0pBXjGrmWOW4u39+cCZ7JVEqvfZHEs9U99WOT6rvw9Uv/nck4sfvkthbWF/uwtLVC9Nzc7NXqtsTixfnJxaWrh48f3H63Oy52UtTz08dO3rk6LHJQ/d0fmlD+uT1t98d+eTUG1998U8y+fUvp5I4Hr+freQ1nkenjMVY/FUqfbh2f/b/eqzTheWkUP89WZGs3cH9K6nESF9EPBojUWj4aY7ER6/kWjegq0pJRAnoUYn4hx5VawfU7u3buw9Ou9wqAXbCnRNRvvtfH//FSt9gjJb7BobuJqv6eZp06W1LVsYP35+6nr2iS/1wQHPL1waqqbXxn5RjczT2lLeG7qar4j9rAZyuvmf7X91m+WNrtsU/7JzlaxHxWLP2/+bx/2ZD/L+1Mvy3JeIfAAAAAAAAOufWiYh4rtn4X1odm9sTTzbO//lpZYXg8Q6Uv/n4X3q7A8UATdw5EfHy6vm/a8fxRwvVcf4HK7MBk7Pn52YPRcRDEXEg+gay7ckNyjj46d4brfIa5/9lr6wOtbmAFent4sDqr5mZXpze7vkCK+5ci3i82Hr+T8wXyxN71s7/zf4ezLdZxt6nb55ulbd5/APdUvoyYn/T9T8rzYBk48/nmCi3ByZqrYL1nnj/s29alS/+IT/Z9X9o4/gfTRo/r2dha9+/PyIOLxVLrfJbxn+9sdG8/d+fvF6off/Me9OLi1cmI/qTk+v3T22tzrBb1eKhFi9Z/B94auP+v3r7vyEOByNiuc0yB2P411Z5rv+Qnyz+Z7Z0/d96Yurm6Letym+v/+9I+Zp+oLpH/x9srN0AzbueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/lEbEA5Gk4/V0mo6PRwxHxCMxlM5dXlh89uzldy7NZHnl5/+ntSf9jlS2k9rz/0cbtqfq24Xy04gOR8TDEfF5YbCcP37m8txM3icPAAAAAAAAAAAAAAAAAAAA94nhFuv/M78V8q4d0HXF6rt4h95TzLsCQG7EP/Qu8Q+9S/xD79pW/B/vfD2AnbfN67/hAtgFtP+hV/W1d9iebtcDyEO71//BLtcDAAAAAADoiFsvvXAjiYjlFwfLr0x/Na8+MKjfH3alNO8KALkxhxd6l6m/0LvanPwL7GJJPfV3qVl+69n/SXcqBAAAAAAAAAAAAACss3/frZ83Xf8P7ErW/0PvWrX+fyC/egA7z/p/6F3u8YHNVvFb/w8AAAAAAAAAAAAA+VtYunphem5u9kqPJArV+cr3S30kNkj0RUSrY2q/wPde1uGPm2UluQZIf/7hmcdfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJn/AgAA//8O5xoP") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa1000000f1000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100"], 0x48}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, r7, 0x0) 3.457405887s ago: executing program 1 (id=2527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c"], 0xdc}}, 0x0) 3.318405679s ago: executing program 1 (id=2528): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async) sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x7, 0x0, &(0x7f0000000640)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x5}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0xc3]}}, 0x5c) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000231000/0x4000)=nil, 0x4000, 0x2000006, 0x10, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x1472, &(0x7f0000000280)={0x0, 0x381d, 0x2, 0x2, 0x196, 0x0, r6}, &(0x7f0000000480), &(0x7f00000003c0)) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0x200}, 0x18) (async) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) 2.906535713s ago: executing program 0 (id=2530): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 2.677741433s ago: executing program 1 (id=2533): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 1.128638494s ago: executing program 2 (id=2576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x80003, 0x6b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000c8500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba75120c35dffdc8a4b7688d5d02fedf88434274b828fec979ea029405cd1e7cadc867ebdc98c4a523178715828c1a6361e60ff1f2968efc20d6888ac2a6f81e37cbc7f1e89f3421825cc278df26c8722e1672fc9672a8d0a60dded6f0765ac61f8a91acf0195abc177e56cc91a9c11ccf95d2a58de5494e66cfa1e758438ee4bb163ee05927e551e4d05b308a0eb01cea0e43", 0x480}], 0x2}, 0x0) 1.114744076s ago: executing program 2 (id=2577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0x0) 1.098859087s ago: executing program 2 (id=2579): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "645e92988becbef7e067bba6a91cdd5ecde179144f942f7d", "0157ae63cf50d5eb49c840959f7c926df5f188d5c332291817fa487a8b926fcd"}}}}}}, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 1.079210018s ago: executing program 2 (id=2581): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)="2e3e8c3a32f26d88f1c147f4d936b37b81ea26500384ba2632d0e679ed00d0576341dda2e8dd0e77ae389715d8ef6083c102a2413bcc509e1129faaf135bf28a6c0446cc7788c4d059518c9bde", 0x4d}, {&(0x7f00000004c0)="34f6b7fdcb43fd5ba09489f55c67173f1bbed3e3018b6b7b5cc23e1aac55865012e0d953ec5d135e2c9b62f2e561906d17406891f7bf4942ae36010b45b7723a465a5022bb101fe2b66ce392e95906f319748a98493c37210adef82f3b7c7e3fb3ab2475035eaae85fb5792bf6da588183823e88039565c5a7a27264151a0ad2ba0e1ac327", 0x85}, {&(0x7f0000000640)="a028b21f27e26baa0165c2318bbf9724ea193534a44fb2964f8e7ceb9aab725386973b0d693323aa2a301699958b6126444ee85280a7aadc2819bab7c4d02040a1d2119a3511aaba710d59051e51cf7496d8348c2a5a262b2035a00e0c845a3a4469674630e9912e36e5ce4b184cdd24f711c2757fb64eb59782c2678e81b0a83bfe74640d1617e07bf32546bca3e690a34b631f17a02627a778893dfb8b5b1ce1bd686ecf6814f97ff2abf57999add9ea1d6eaf0740cdb3c8dfd05b9af0f20c", 0xc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000800)="53e99fccd70e39d7b85f3c0a7eaf78df9c037df424bdf45afb0aa26982f24d9ac09198caa24429cb77c9196189c4511fe7f88a69851b721a0a020a5579d3405d30ebd5fc2234e7c1c937be03e4cd820bfaca3ab70fac47e35fc14c5db2d5ebf14521c2f636b25f19a05cdbbaeb811fc17c3889059005bdface2509393f7855835718d4ed209c9a11d1662008cbc905006b03c2c5d988f2186724b05a1141252da41eb4baf036c13e924591e4f91d2c17f95833643b251648f4338272d2e1fc187b20400c6e", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c00)="f9d6ca28172747b477cd9a4d74", 0xd}, {&(0x7f0000000c40)="7b72c64f5388a6ad8ba2a2a413a15490818134b74f8cb2dfac1f7c929d3886fda14011d3725c25fb41ecc64722a02d1b5975740e9d3c87f228ec559850256db1bdf2c3ff8af57f5bae921e99670a9dbf86c93a5d8c8fdcb103304e8f4ed450c18735dc42c41772f67984512d586602090286d043e4d149e34deb3ccddec2c791de5ed3a3b3c775d347fec9f90090da4effa0bc76eea77404b56fadc37b94df5a09b88317c7a64a3ec91ea6bec02f883d19bb0b2414d06fb97c65b006ca00869b25f3696edc27fc64ecaf81077039422e918b14bff4877b025863675dbe1a10b9", 0xe0}, {&(0x7f0000000d40)="6af0044871e2045b76e81f3b35e87389de2175086dc0fb212ff2fbf5228801c3f21c6c4c4853c548cdb2c9416eb81ff940be24bf79e4fd21dfc3c444e93172c12efd97737ff83ea86702c7b93e71ada62fd45a68715b826d602a2d18d689a62e6f8f741cf370d6216092d6f17dbb93ce12dca27825b2808fddebef", 0x7b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001340)="e0c2", 0x2}], 0x1}}], 0x5, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a92", 0xfffff, 0x11, 0x0, 0x0) 811.876661ms ago: executing program 4 (id=2584): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x31, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000df429de5b3db51aeaef99ef28d2ed44f233a92dc345ba44552e4fe085aba2c447cbc4e6eb15633c8cf83754bc4a524fc9c3bcf2ceada29903ce586b22bd0e7f0be", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000019c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r7, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRESOCT=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRESOCT=r0, @ANYRES8=r5], 0x5c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r8, &(0x7f0000000200), 0x175d9003) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r9}, 0x10) 671.172983ms ago: executing program 4 (id=2585): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000b00000000"], 0x58}, 0x1, 0x7}, 0x0) 670.525693ms ago: executing program 4 (id=2586): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000080000000000000000a2a7c808", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x3ff, 0x4) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 610.433028ms ago: executing program 4 (id=2587): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0xac}, {}, {0x6}]}) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xeaa8, 0x40a400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000180)=0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000080)={0x3, 0x1, 0xffff, 0x3ff, 0x7fffffff, 0x9}) perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x8, 0xb, 0x2, 0x1, 0x0, 0x6, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0xffff}, 0x9201, 0xe4, 0x80000001, 0x8, 0x1, 0x58, 0x800, 0x0, 0x7, 0x0, 0x81}, r3, 0xb, r3, 0xe) 220.925791ms ago: executing program 2 (id=2594): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0x0) 203.680843ms ago: executing program 2 (id=2595): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$eJzs3MtvG8UfAPDvrvPoO/n1Vx59QAMFEVFImrRAD0gIBFIvSEhwgGNIQ1XqtqgJEq0q2iJUjoi/ADgi8RdwggsCTiCucEdIFeqlhQMyWns3cWLXuHYdh/rzkdaZ2dfM7OxkZ3e8DmBgTWQfScS2iPglIsZq0dUrTNT+3Lx+cf7P6xfnk6hUXv1jtLrejesX54tVi+225pHJNCL9MIm9TdJdPH/h1Fy5vHAuj08vnX5nevH8hSdPnp47sXBi4czs0aNHDs888/TsU3eknFm5bux5/+y+3cfe+OTl+Uq8+f2XWX635cvry1Ez3nWaEzERlUqlkq6aO1L9fLTrvW8s2yPiSh5OhvqcGdpWioisuoar7X8sSrFSeWPx0gd9zRzQU9n1abRhbin/O5RkyzfVrQvcTRLtGgZUccXP7n+Lab36HhvBteezz4Vq+W/mU23JUGT37cl47Y691KP0t0XE65f/+jSboulzCACAO+vrrP/zRLP+Xxr31q23Ix9DGY+IgxGxMyL+HxG7IuKeiOq690XE/beZfnX86cpKvLH/89PmjgvXhqz/92w+trW6/7c8ajNeymPbq+UfTt46WV44lB+TyRgezeIzLdL45sWfP77Vsom6/l82ZekXfcE8H78PrXlAd3xuaa6bMte7diViz1Cz8ifLIwFJROyOiD0d7D87Zicf/2JfFt6xtXH5v5e/lcsd5Gi1yucRj9Xq/3KsKX8hqQ2R3Gp8cnpTlBcOTRdnRaMffrz6Sn18uC7cXfm7l9X/lqbnf17+ohkU47WLbe54ZCV49deP8n02NuVOz/+R5LVVybw3t7R0biZiZCQa58+ubFvEi/Wz8k8eiLiaDwTXt/+dEX9/lm+3NyKyk/iBiHgwIvbneX8oIh6OiAMtDsV3LzzyduuD1d/6P96q/iPGk/rx+g4CpVPfflXsbLkq838u7dX/kWpoMp/Tzv+/djN4J44hAAAAbHRpdQw6SaeWw2k6NVX7Dv+u2JKWzy4uHZyId88cr41Vj8dwWjzpGqt7HjqTPxsu4rNr4ocj4n/Vbxptrsan5s+Wt/e78DDgtt6i/Wd+69WXXoCN47be10p6lw9g/XlfEwZX2+1/uLf5ANaf6z8MLu0fBlez9n8p4mYfsgKss9u6/j/Xu3wA669V+/fID+5u7v9hcGn/MJAaX4kvfqOhkzf9VwI7j3W1+QAFSj3ac9T/aEcPApH2/dB1Hkg3Qjb254HRiGh3q0s9rdO15w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3z8BAAD//yxO2No=") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(r1) mq_timedreceive(r1, &(0x7f0000002a80)=""/4109, 0xfffffe51, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x400000000000180, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000800180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000000000007fd4c06aca002458306839b492e386e0bfe71e10b67cc2e853f2c72b2c30b2c26555ac9522b6c51140cf18b29ec1b65c04a1d5be4b38a9373a68931966484df295b53dcd00"/157], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001a40)="c81f3665b988", 0x6}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) socketpair(0x2b, 0x2, 0x280, &(0x7f0000001380)) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 92.403382ms ago: executing program 3 (id=2598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rmdir(0x0) 55.586425ms ago: executing program 3 (id=2599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000001480)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880"], 0x250}}, 0x0) 51.151515ms ago: executing program 3 (id=2600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x80003, 0x6b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000c8500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) 38.510627ms ago: executing program 3 (id=2601): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 20.088988ms ago: executing program 4 (id=2602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 19.333789ms ago: executing program 3 (id=2603): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 717.65µs ago: executing program 3 (id=2604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000001480)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100050408000004000000000000", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x242100, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000480)={0x2c, 0x8, r6, 0x2a, r7}, 0x10) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000220}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4008001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880"], 0x250}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 0s ago: executing program 4 (id=2605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)="2e3e8c3a32f26d88f1c147f4d936b37b81ea26500384ba2632d0e679ed00d0576341dda2e8dd0e77ae389715d8ef6083c102a2413bcc509e1129faaf135bf28a6c0446cc7788c4d059518c9bde", 0x4d}, {&(0x7f00000004c0)="34f6b7fdcb43fd5ba09489f55c67173f1bbed3e3018b6b7b5cc23e1aac55865012e0d953ec5d135e2c9b62f2e561906d17406891f7bf4942ae36010b45b7723a465a5022bb101fe2b66ce392e95906f319748a98493c37210adef82f3b7c7e3fb3ab2475035eaae85fb5792bf6da588183823e88039565c5a7a27264151a0ad2ba0e1ac327", 0x85}, {&(0x7f0000000640)="a028b21f27e26baa0165c2318bbf9724ea193534a44fb2964f8e7ceb9aab725386973b0d693323aa2a301699958b6126444ee85280a7aadc2819bab7c4d02040a1d2119a3511aaba710d59051e51cf7496d8348c2a5a262b2035a00e0c845a3a4469674630e9912e36e5ce4b184cdd24f711c2757fb64eb59782c2678e81b0a83bfe74640d1617e07bf32546bca3e690a34b631f17a02627a778893dfb8b5b1ce1bd686ecf6814f97ff2abf57999add9ea1d6eaf0740cdb3c8dfd05b9af0f20c", 0xc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000800)="53e99fccd70e39d7b85f3c0a7eaf78df9c037df424bdf45afb0aa26982f24d9ac09198caa24429cb77c9196189c4511fe7f88a69851b721a0a020a5579d3405d30ebd5fc2234e7c1c937be03e4cd820bfaca3ab70fac47e35fc14c5db2d5ebf14521c2f636b25f19a05cdbbaeb811fc17c3889059005bdface2509393f7855835718d4ed209c9a11d1662008cbc905006b03c2c5d988f2186724b05a1141252da41eb4baf036c13e924591e4f91d2c17f95833643b251648f4338272d2e1fc187b20400c6e", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c00)="f9d6ca28172747b477cd9a4d74", 0xd}, {&(0x7f0000000c40)="7b72c64f5388a6ad8ba2a2a413a15490818134b74f8cb2dfac1f7c929d3886fda14011d3725c25fb41ecc64722a02d1b5975740e9d3c87f228ec559850256db1bdf2c3ff8af57f5bae921e99670a9dbf86c93a5d8c8fdcb103304e8f4ed450c18735dc42c41772f67984512d586602090286d043e4d149e34deb3ccddec2c791de5ed3a3b3c775d347fec9f90090da4effa0bc76eea77404b56fadc37b94df5a09b88317c7a64a3ec91ea6bec02f883d19bb0b2414d06fb97c65b006ca00869b25f3696edc27fc64ecaf81077039422e918b14bff4877b025863675dbe1a10b9", 0xe0}, {&(0x7f0000000d40)="6af0044871e2045b76e81f3b35e87389de2175086dc0fb212ff2fbf5228801c3f21c6c4c4853c548cdb2c9416eb81ff940be24bf79e4fd21dfc3c444e93172c12efd97737ff83ea86702c7b93e71ada62fd45a68715b826d602a2d18d689a62e6f8f741cf370d6216092d6f17dbb93ce12dca27825b2808fddebef", 0x7b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001340)="e0c2", 0x2}], 0x1}}], 0x5, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a92", 0xfffff, 0x11, 0x0, 0x0) 0s ago: executing program 3 (id=2606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) socket(0x10, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x600, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000711f440", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = getpgid(0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES16=r2, @ANYRESOCT=r1], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) symlinkat(0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000a193ae59b4c840f0c800000000000000000000000020d0792f9cee53ea96f4de0fa3cf60a0448aa2c1166001e67f20315abfd1f89645d63824cfb14a5feffa39e3c114fb024103caee9e8ce35c7b9f92d476e24e765582f3aa4e6aedff40d46644b4cfa1d5de2bfd2dae6f451dd355b973a6f0a97aedc767e6b51339d73714d381881a19146280e01d09452965480a41a459e68cebcbf3686ddf7dc07f83aca4ecf2f3ed0c183f2cbf24e883cb990d27b4f427f36761c8ea7253734deda5258cebcc94fb505ebfae2adf44dbf211363f2a7b0d1d28bfe985664ebfad4c96fccd5829e6feb885d9daf285"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000000), &(0x7f00000004c0)=""/155}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000440)='sched_switch\x00', r6}, 0x18) (async) r7 = gettid() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206030000000000000000000000000011000300686173683a69702c6d61726b0000000005000400000013000900020073797a3200000000050001000700000005000500020000000c00078008"], 0x58}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb04}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r10, &(0x7f0000000300)=""/150, 0x96, 0x0) kernel console output (not intermixed with test programs): 450396][T10201] 9pnet_fd: Insufficient options for proto=fd [ 257.486096][T10205] loop0: detected capacity change from 0 to 764 [ 257.492688][T10205] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 257.629377][T10211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1823'. [ 257.667058][T10211] loop0: detected capacity change from 0 to 512 [ 257.673642][T10211] EXT4-fs: Invalid want_extra_isize 9 [ 257.752312][T10214] loop0: detected capacity change from 0 to 1024 [ 257.765167][T10214] EXT4-fs: Ignoring removed oldalloc option [ 257.801940][T10214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.805825][T10220] loop3: detected capacity change from 0 to 512 [ 257.861891][T10220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1827'. [ 257.916724][T10222] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1828'. [ 258.067688][T10235] 9pnet_fd: Insufficient options for proto=fd [ 258.081644][T10231] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1832'. [ 258.109446][T10237] loop4: detected capacity change from 0 to 764 [ 258.124124][T10237] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 258.542036][T10249] lo speed is unknown, defaulting to 1000 [ 258.624795][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.722103][T10255] loop3: detected capacity change from 0 to 512 [ 258.960314][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.061997][T10273] lo speed is unknown, defaulting to 1000 [ 259.195492][T10278] lo speed is unknown, defaulting to 1000 [ 259.738121][T10284] loop4: detected capacity change from 0 to 764 [ 259.769824][T10284] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 259.865907][T10291] bpf_get_probe_write_proto: 8 callbacks suppressed [ 259.865967][T10291] syz.2.1849[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.891664][T10294] loop0: detected capacity change from 0 to 512 [ 259.914000][T10292] loop3: detected capacity change from 0 to 2048 [ 259.920551][T10291] syz.2.1849[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.920685][T10291] syz.2.1849[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.947029][T10292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.953487][T10294] __nla_validate_parse: 2 callbacks suppressed [ 259.953505][T10294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1854'. [ 260.008743][T10292] siw: device registration error -23 [ 260.037860][T10306] 9pnet_fd: Insufficient options for proto=fd [ 260.821954][T10322] lo speed is unknown, defaulting to 1000 [ 260.995222][T10319] lo speed is unknown, defaulting to 1000 [ 261.038644][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.079044][T10332] loop0: detected capacity change from 0 to 512 [ 261.101132][T10332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1867'. [ 261.135781][T10336] loop0: detected capacity change from 0 to 764 [ 261.142387][T10338] syz.1.1866[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.142389][T10336] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 261.154450][T10338] syz.1.1866[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.160704][T10338] syz.1.1866[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.181649][T10339] lo speed is unknown, defaulting to 1000 [ 261.248845][T10347] loop1: detected capacity change from 0 to 1024 [ 261.259158][ T29] kauditd_printk_skb: 12805 callbacks suppressed [ 261.259193][ T29] audit: type=1326 audit(1729213429.005:74229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.291604][T10347] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1871'. [ 261.300239][ T29] audit: type=1326 audit(1729213429.035:74230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.324381][ T29] audit: type=1326 audit(1729213429.035:74231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.347977][ T29] audit: type=1326 audit(1729213429.035:74232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.371685][ T29] audit: type=1326 audit(1729213429.035:74233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.395485][ T29] audit: type=1326 audit(1729213429.035:74234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.419156][ T29] audit: type=1326 audit(1729213429.035:74235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.442791][ T29] audit: type=1326 audit(1729213429.035:74236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.466369][ T29] audit: type=1326 audit(1729213429.035:74237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.490059][ T29] audit: type=1326 audit(1729213429.035:74238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 261.771427][T10360] vlan2: entered allmulticast mode [ 261.781082][T10359] loop2: detected capacity change from 0 to 2048 [ 261.800651][T10364] loop4: detected capacity change from 0 to 512 [ 261.809427][T10359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.824342][T10364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1878'. [ 261.845139][T10359] siw: device registration error -23 [ 261.849074][T10366] syz.4.1879[10366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.850615][T10366] syz.4.1879[10366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.863032][T10366] syz.4.1879[10366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.893245][T10368] loop4: detected capacity change from 0 to 764 [ 261.911541][T10368] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 261.926831][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.986275][T10376] loop2: detected capacity change from 0 to 1024 [ 262.001213][T10381] loop4: detected capacity change from 0 to 512 [ 262.009541][T10376] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1884'. [ 262.039555][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 262.050219][T10381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.068938][T10381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.082770][T10381] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.371073][T10395] lo speed is unknown, defaulting to 1000 [ 262.390440][T10397] vlan2: entered allmulticast mode [ 262.508664][T10400] loop0: detected capacity change from 0 to 512 [ 262.556986][T10401] loop1: detected capacity change from 0 to 2048 [ 262.576507][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1890'. [ 262.588249][T10401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.641212][T10405] syz.0.1892[10405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.643835][T10401] siw: device registration error -23 [ 262.760092][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.842878][T10412] lo speed is unknown, defaulting to 1000 [ 262.854148][T10414] loop1: detected capacity change from 0 to 764 [ 262.874778][T10414] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 262.944791][T10419] loop2: detected capacity change from 0 to 1024 [ 262.958927][T10419] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1898'. [ 262.988737][T10422] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1899'. [ 263.123834][T10430] loop1: detected capacity change from 0 to 512 [ 263.133288][T10432] loop3: detected capacity change from 0 to 512 [ 263.148099][T10430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1903'. [ 263.166687][T10432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 263.227757][T10432] EXT4-fs (loop3): 1 truncate cleaned up [ 263.228082][T10435] 9pnet_fd: Insufficient options for proto=fd [ 263.233884][T10432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.569170][T10445] loop1: detected capacity change from 0 to 764 [ 263.582692][T10445] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 263.611005][T10448] loop0: detected capacity change from 0 to 1024 [ 263.627972][T10448] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1911'. [ 263.727169][T10459] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 263.733757][T10459] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 263.741499][T10459] vhci_hcd vhci_hcd.0: Device attached [ 263.762755][T10459] loop1: detected capacity change from 0 to 2048 [ 263.778663][T10459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.793267][T10467] 9pnet_fd: Insufficient options for proto=fd [ 263.812232][T10460] vhci_hcd: connection closed [ 263.812461][ T4677] vhci_hcd: stop threads [ 263.821571][ T4677] vhci_hcd: release socket [ 263.826018][ T4677] vhci_hcd: disconnect device [ 263.926658][T10477] loop2: detected capacity change from 0 to 764 [ 263.933491][T10477] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 263.982320][T10478] lo speed is unknown, defaulting to 1000 [ 264.037389][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.053369][T10482] loop2: detected capacity change from 0 to 1024 [ 264.078983][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.109167][T10487] vlan2: entered allmulticast mode [ 264.202096][T10495] 9pnet_fd: Insufficient options for proto=fd [ 264.341431][T10506] lo speed is unknown, defaulting to 1000 [ 264.468340][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.510996][T10508] loop3: detected capacity change from 0 to 764 [ 264.521211][T10508] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 264.678710][T10512] loop4: detected capacity change from 0 to 512 [ 264.693239][T10512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.717751][T10512] EXT4-fs (loop4): 1 truncate cleaned up [ 264.729073][T10512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.194609][T10525] lo speed is unknown, defaulting to 1000 [ 265.474230][T10533] __nla_validate_parse: 5 callbacks suppressed [ 265.474247][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 265.586907][T10536] bpf_get_probe_write_proto: 5 callbacks suppressed [ 265.586923][T10536] syz.2.1942[10536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.593724][T10536] syz.2.1942[10536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.639489][T10536] syz.2.1942[10536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.657787][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 265.679737][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 265.743903][T10543] 9pnet_fd: Insufficient options for proto=fd [ 265.746082][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.774380][T10545] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 265.780966][T10545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.784487][T10551] loop1: detected capacity change from 0 to 764 [ 265.788743][T10545] vhci_hcd vhci_hcd.0: Device attached [ 265.797134][T10551] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 265.823573][T10545] loop2: detected capacity change from 0 to 2048 [ 265.849922][T10553] loop0: detected capacity change from 0 to 1024 [ 265.862506][T10553] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1949'. [ 266.019222][T10557] lo speed is unknown, defaulting to 1000 [ 266.154367][T10545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.171055][T10562] loop0: detected capacity change from 0 to 2048 [ 266.274280][T10562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.351192][ T29] kauditd_printk_skb: 11254 callbacks suppressed [ 266.351206][ T29] audit: type=1326 audit(1729213434.095:85493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.2.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1facf8dff9 code=0x7ffc0000 [ 266.492608][T10549] vhci_hcd: connection closed [ 266.515827][ T1840] vhci_hcd: stop threads [ 266.525062][ T1840] vhci_hcd: release socket [ 266.529526][ T1840] vhci_hcd: disconnect device [ 266.573964][ T29] audit: type=1326 audit(1729213434.125:85494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.2.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1facf8dff9 code=0x7ffc0000 [ 266.597717][ T29] audit: type=1326 audit(1729213434.125:85495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.2.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1facf8dff9 code=0x7ffc0000 [ 266.621370][ T29] audit: type=1326 audit(1729213434.135:85496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.2.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1facf8dff9 code=0x7ffc0000 [ 266.644971][ T29] audit: type=1326 audit(1729213434.135:85497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.2.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1facf8dff9 code=0x7ffc0000 [ 266.708451][T10577] syz.4.1956[10577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.708580][T10577] syz.4.1956[10577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.730686][T10577] syz.4.1956[10577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.767081][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 266.791159][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 266.830487][T10580] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1953'. [ 266.840137][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.879674][T10585] loop4: detected capacity change from 0 to 512 [ 266.891620][T10589] 9pnet_fd: Insufficient options for proto=fd [ 266.897485][T10585] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.915911][T10590] loop0: detected capacity change from 0 to 1024 [ 266.918900][T10593] loop3: detected capacity change from 0 to 764 [ 266.922775][T10585] EXT4-fs (loop4): 1 truncate cleaned up [ 266.928868][T10593] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 266.937013][T10585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.950024][ T29] audit: type=1326 audit(1729213434.685:85498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 266.975321][ T29] audit: type=1326 audit(1729213434.695:85499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 266.999240][ T29] audit: type=1326 audit(1729213434.695:85500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 267.023061][ T29] audit: type=1326 audit(1729213434.695:85501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 267.046757][ T29] audit: type=1326 audit(1729213434.695:85502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.0.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 267.074636][T10590] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1961'. [ 267.089352][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.203240][T10608] loop2: detected capacity change from 0 to 2048 [ 267.216814][T10608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.235223][T10608] siw: device registration error -23 [ 267.303291][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.321234][T10612] syz.2.1969[10612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.321304][T10612] syz.2.1969[10612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.333046][T10612] syz.2.1969[10612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.346455][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 267.366886][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 267.437616][T10620] 9pnet_fd: Insufficient options for proto=fd [ 267.466350][T10622] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 267.466507][T10624] loop2: detected capacity change from 0 to 1024 [ 267.472911][T10622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 267.486928][T10622] vhci_hcd vhci_hcd.0: Device attached [ 267.511898][T10622] loop1: detected capacity change from 0 to 2048 [ 267.538212][T10622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.557447][T10625] vhci_hcd: connection closed [ 267.557686][ T4677] vhci_hcd: stop threads [ 267.566735][ T4677] vhci_hcd: release socket [ 267.571150][ T4677] vhci_hcd: disconnect device [ 267.606124][T10638] loop2: detected capacity change from 0 to 1024 [ 267.612876][T10638] EXT4-fs: Ignoring removed oldalloc option [ 267.627206][T10638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.751777][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.767911][T10643] syz.4.1981[10643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.957525][T10657] 9pnet_fd: Insufficient options for proto=fd [ 267.996749][T10659] loop0: detected capacity change from 0 to 1024 [ 268.044214][T10667] loop3: detected capacity change from 0 to 512 [ 268.051272][T10667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.068025][T10667] EXT4-fs (loop3): 1 truncate cleaned up [ 268.076863][T10667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.077002][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.199016][T10685] 9pnet_fd: Insufficient options for proto=fd [ 268.305833][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.355990][T10694] loop2: detected capacity change from 0 to 1024 [ 268.440806][T10702] loop2: detected capacity change from 0 to 512 [ 268.448998][T10702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 268.463611][T10702] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 268.619050][T10704] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2006: Unimplemented hash flags: 0x0001 [ 268.630642][T10704] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2006: Corrupt directory, running e2fsck is recommended [ 268.644644][T10704] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2006: Unimplemented hash flags: 0x0001 [ 268.656179][T10704] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2006: Corrupt directory, running e2fsck is recommended [ 268.794743][T10713] loop4: detected capacity change from 0 to 512 [ 268.801428][T10713] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.812664][T10713] EXT4-fs (loop4): 1 truncate cleaned up [ 268.818941][T10713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.922691][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.182501][T10724] lo speed is unknown, defaulting to 1000 [ 269.253246][T10727] loop0: detected capacity change from 0 to 1024 [ 269.292585][T10727] EXT4-fs: Ignoring removed oldalloc option [ 269.625316][T10733] lo speed is unknown, defaulting to 1000 [ 269.712881][T10727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.877486][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.341083][T10744] loop1: detected capacity change from 0 to 512 [ 270.348903][T10744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 270.407544][T10750] loop3: detected capacity change from 0 to 764 [ 270.414149][T10750] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 270.438763][T10744] EXT4-fs (loop1): 1 truncate cleaned up [ 270.444867][T10744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.545188][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.626530][T10759] loop3: detected capacity change from 0 to 1024 [ 270.656595][T10761] loop3: detected capacity change from 0 to 1024 [ 270.663266][T10761] EXT4-fs: Ignoring removed oldalloc option [ 270.677292][T10761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.944630][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.966107][T10767] loop0: detected capacity change from 0 to 512 [ 270.975164][T10767] __nla_validate_parse: 20 callbacks suppressed [ 270.975178][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2025'. [ 271.091927][T10774] loop0: detected capacity change from 0 to 512 [ 271.099832][T10774] EXT4-fs (loop0): 1 orphan inode deleted [ 271.105838][T10774] EXT4-fs (loop0): 1 truncate cleaned up [ 271.111786][T10774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.127892][T10774] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.2028: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=3852, size=1024 fake=0 [ 271.147575][T10774] EXT4-fs (loop0): Remounting filesystem read-only [ 271.171094][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.258470][T10778] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.2028'. [ 271.347859][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.434305][T10779] lo speed is unknown, defaulting to 1000 [ 271.514932][T10792] loop4: detected capacity change from 0 to 764 [ 271.531626][T10792] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 271.612685][T10798] loop4: detected capacity change from 0 to 1024 [ 271.623232][T10799] loop2: detected capacity change from 0 to 512 [ 271.643207][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 271.643223][ T29] audit: type=1326 audit(1729213439.385:85646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.673048][ T29] audit: type=1326 audit(1729213439.385:85647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.696781][ T29] audit: type=1326 audit(1729213439.385:85648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.720577][ T29] audit: type=1326 audit(1729213439.385:85649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.726391][T10799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2037'. [ 271.744165][ T29] audit: type=1326 audit(1729213439.385:85650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.776763][ T29] audit: type=1326 audit(1729213439.385:85651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.800638][ T29] audit: type=1326 audit(1729213439.385:85652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.814519][T10804] syzkaller0: entered allmulticast mode [ 271.824251][ T29] audit: type=1326 audit(1729213439.385:85653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.852730][T10804] bpf_get_probe_write_proto: 11 callbacks suppressed [ 271.852751][T10804] syz.2.2040[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.853572][ T29] audit: type=1326 audit(1729213439.385:85654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.869866][T10804] syz.2.2040[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.871613][ T29] audit: type=1326 audit(1729213439.385:85655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.4.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 271.932396][T10804] syz.2.2040[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.946640][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.974294][T10805] loop4: detected capacity change from 0 to 512 [ 271.989987][T10809] loop0: detected capacity change from 0 to 1024 [ 271.995138][T10805] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 271.997648][T10809] EXT4-fs: Ignoring removed oldalloc option [ 272.018858][T10804] syzkaller0 (unregistering): left allmulticast mode [ 272.027551][T10805] EXT4-fs (loop4): 1 truncate cleaned up [ 272.033740][T10805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.070471][T10809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.188327][T10815] loop2: detected capacity change from 0 to 1024 [ 272.197662][T10815] EXT4-fs: Ignoring removed oldalloc option [ 272.232874][T10815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.988400][T10830] lo speed is unknown, defaulting to 1000 [ 273.207715][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.244111][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.343884][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.394649][T10833] syz.3.2049[10833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.394734][T10833] syz.3.2049[10833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.413732][T10833] syz.3.2049[10833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.428731][T10833] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2049'. [ 273.450936][T10833] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2049'. [ 273.606206][T10838] loop1: detected capacity change from 0 to 512 [ 273.616905][T10838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2051'. [ 273.651759][T10840] loop1: detected capacity change from 0 to 1024 [ 273.686940][T10842] loop1: detected capacity change from 0 to 1024 [ 273.693714][T10842] EXT4-fs: Ignoring removed oldalloc option [ 273.709624][T10842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.751344][T10850] loop0: detected capacity change from 0 to 764 [ 273.758080][T10850] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 273.765428][T10848] loop2: detected capacity change from 0 to 512 [ 273.792481][T10848] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 273.874931][T10857] lo speed is unknown, defaulting to 1000 [ 273.972214][T10866] loop0: detected capacity change from 0 to 512 [ 273.979015][T10866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 273.990295][T10866] EXT4-fs (loop0): 1 truncate cleaned up [ 273.995021][T10859] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2048: Unimplemented hash flags: 0x0001 [ 274.007554][T10859] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2048: Corrupt directory, running e2fsck is recommended [ 274.026924][T10859] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2048: Unimplemented hash flags: 0x0001 [ 274.038862][T10859] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2048: Corrupt directory, running e2fsck is recommended [ 274.660116][T10879] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2061'. [ 274.706323][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 274.894291][T10891] lo speed is unknown, defaulting to 1000 [ 275.303358][T10906] lo speed is unknown, defaulting to 1000 [ 275.582517][T10910] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2073'. [ 275.594091][T10908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2072'. [ 275.616994][T10908] loop4: detected capacity change from 0 to 512 [ 275.623705][T10908] EXT4-fs: Invalid want_extra_isize 9 [ 275.742427][T10923] lo speed is unknown, defaulting to 1000 [ 275.974978][T10933] lo speed is unknown, defaulting to 1000 [ 276.333081][T10944] siw: device registration error -23 [ 276.389870][T10944] loop2: detected capacity change from 0 to 512 [ 276.435099][T10946] __nla_validate_parse: 2 callbacks suppressed [ 276.435120][T10946] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2085'. [ 276.468638][T10948] loop1: detected capacity change from 0 to 512 [ 276.488939][T10948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.507984][T10944] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.549762][T10948] EXT4-fs (loop1): 1 truncate cleaned up [ 276.592732][T10955] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2088'. [ 276.610260][T10956] loop4: detected capacity change from 0 to 1024 [ 276.669322][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 276.669339][ T29] audit: type=1326 audit(1729213444.415:85732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.726762][ T29] audit: type=1326 audit(1729213444.445:85733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.750636][ T29] audit: type=1326 audit(1729213444.445:85734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.774231][ T29] audit: type=1326 audit(1729213444.445:85735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.783329][T10962] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2090'. [ 276.797907][ T29] audit: type=1326 audit(1729213444.445:85736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.830698][ T29] audit: type=1326 audit(1729213444.445:85737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.854206][ T29] audit: type=1326 audit(1729213444.445:85738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.878016][ T29] audit: type=1326 audit(1729213444.445:85739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.901748][ T29] audit: type=1326 audit(1729213444.445:85740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 276.922654][T10968] lo speed is unknown, defaulting to 1000 [ 276.925314][ T29] audit: type=1326 audit(1729213444.445:85741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 277.201654][T10979] lo speed is unknown, defaulting to 1000 [ 277.475936][T10981] 9pnet_fd: Insufficient options for proto=fd [ 277.770839][T10991] loop0: detected capacity change from 0 to 512 [ 277.811678][T10994] loop4: detected capacity change from 0 to 1024 [ 277.821770][T10995] loop3: detected capacity change from 0 to 512 [ 277.848262][T10991] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2100'. [ 277.864342][T10995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.928197][T10995] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.984410][T11003] syz.2.2104[11003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.984510][T11003] syz.2.2104[11003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.008957][T11005] loop0: detected capacity change from 0 to 1024 [ 278.035496][T11003] syz.2.2104[11003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.037049][T11003] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2104'. [ 278.165664][T11005] EXT4-fs: Ignoring removed oldalloc option [ 278.172330][T11003] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2104'. [ 278.298986][T11016] lo speed is unknown, defaulting to 1000 [ 278.487591][T11003] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2104'. [ 278.538226][T11003] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2104'. [ 278.697239][T11021] 9pnet_fd: Insufficient options for proto=fd [ 278.789868][T11003] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2104'. [ 278.940020][T11003] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2104'. [ 279.140436][T11028] lo speed is unknown, defaulting to 1000 [ 279.766883][T11038] lo speed is unknown, defaulting to 1000 [ 280.166382][T11044] loop3: detected capacity change from 0 to 512 [ 280.258301][T11052] loop0: detected capacity change from 0 to 1024 [ 280.265112][T11052] EXT4-fs: Ignoring removed oldalloc option [ 280.461321][T11069] loop4: detected capacity change from 0 to 512 [ 280.655918][T11078] lo speed is unknown, defaulting to 1000 [ 281.105545][T11088] lo speed is unknown, defaulting to 1000 [ 281.138149][T11089] lo speed is unknown, defaulting to 1000 [ 281.478407][T11104] lo speed is unknown, defaulting to 1000 [ 281.777369][T11109] loop3: detected capacity change from 0 to 512 [ 281.784502][T11109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.801295][T11110] loop4: detected capacity change from 0 to 512 [ 281.824453][T11110] __nla_validate_parse: 7 callbacks suppressed [ 281.824471][T11110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2137'. [ 281.875215][T11109] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.000609][T11122] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2142'. [ 282.012223][T11125] loop4: detected capacity change from 0 to 764 [ 282.031557][ T29] kauditd_printk_skb: 5213 callbacks suppressed [ 282.031574][ T29] audit: type=1326 audit(1729213449.775:90955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.061573][ T29] audit: type=1326 audit(1729213449.775:90956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.085204][ T29] audit: type=1326 audit(1729213449.775:90957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.108889][ T29] audit: type=1326 audit(1729213449.775:90958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.132561][ T29] audit: type=1326 audit(1729213449.775:90959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.156279][ T29] audit: type=1326 audit(1729213449.775:90960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.179992][ T29] audit: type=1326 audit(1729213449.775:90961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.203578][ T29] audit: type=1326 audit(1729213449.775:90962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.227262][ T29] audit: type=1326 audit(1729213449.775:90963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.237586][T11125] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 282.250940][ T29] audit: type=1326 audit(1729213449.775:90964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 282.323477][T11131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2146'. [ 282.365847][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2147'. [ 282.375001][T11134] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2147'. [ 282.384035][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'. [ 282.611254][T11144] lo speed is unknown, defaulting to 1000 [ 282.809649][T11143] lo speed is unknown, defaulting to 1000 [ 283.028605][T11148] loop1: detected capacity change from 0 to 1024 [ 283.052253][T11152] loop0: detected capacity change from 0 to 512 [ 283.099380][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2153'. [ 283.297645][T11159] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2156'. [ 283.375872][T11161] loop0: detected capacity change from 0 to 764 [ 283.382673][T11161] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 283.389451][T11148] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2151'. [ 283.417673][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2159'. [ 283.485205][T11169] loop1: detected capacity change from 0 to 512 [ 283.493582][T11169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 283.603124][T11169] EXT4-fs (loop1): 1 truncate cleaned up [ 283.748372][T11184] lo speed is unknown, defaulting to 1000 [ 284.348704][T11198] loop4: detected capacity change from 0 to 1024 [ 284.522503][T11210] loop0: detected capacity change from 0 to 1024 [ 284.529669][T11210] EXT4-fs: Ignoring removed oldalloc option [ 284.567751][T11210] EXT4-fs mount: 18 callbacks suppressed [ 284.567772][T11210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.646023][T11220] loop2: detected capacity change from 0 to 512 [ 284.713919][T11217] lo speed is unknown, defaulting to 1000 [ 284.997836][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.110382][T11239] loop1: detected capacity change from 0 to 1024 [ 285.292159][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.427607][T11243] loop4: detected capacity change from 0 to 512 [ 285.478195][T11243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.493897][T11247] loop3: detected capacity change from 0 to 512 [ 285.518661][T11249] lo speed is unknown, defaulting to 1000 [ 285.682277][T11243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.801680][T11258] 9pnet_fd: Insufficient options for proto=fd [ 285.808276][T11256] loop0: detected capacity change from 0 to 1024 [ 285.818477][T11243] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.874521][T11256] EXT4-fs: Ignoring removed oldalloc option [ 285.928408][T11256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.998680][T11270] loop1: detected capacity change from 0 to 1024 [ 286.108899][T11278] loop3: detected capacity change from 0 to 512 [ 286.178457][T11278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.232185][T11278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.256805][T11278] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.264502][T11282] lo speed is unknown, defaulting to 1000 [ 286.947601][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.035390][ T29] kauditd_printk_skb: 18185 callbacks suppressed [ 287.035422][ T29] audit: type=1326 audit(1729213454.785:109151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.103658][T11293] loop0: detected capacity change from 0 to 512 [ 287.163810][T11293] __nla_validate_parse: 14 callbacks suppressed [ 287.163830][T11293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2204'. [ 287.201744][T11300] lo speed is unknown, defaulting to 1000 [ 287.310730][T11301] lo speed is unknown, defaulting to 1000 [ 287.333707][ T29] audit: type=1326 audit(1729213454.815:109152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.357531][ T29] audit: type=1326 audit(1729213454.815:109153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.381256][ T29] audit: type=1326 audit(1729213454.815:109154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.405004][ T29] audit: type=1326 audit(1729213454.815:109155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.428738][ T29] audit: type=1326 audit(1729213454.815:109156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.452497][ T29] audit: type=1326 audit(1729213454.815:109157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.476263][ T29] audit: type=1326 audit(1729213454.815:109158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.499990][ T29] audit: type=1326 audit(1729213454.815:109159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.523695][ T29] audit: type=1326 audit(1729213454.815:109160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11276 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fcbbddff9 code=0x7fc00000 [ 287.751763][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.762216][T11305] 9pnet_fd: Insufficient options for proto=fd [ 287.778699][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.811167][T11310] loop0: detected capacity change from 0 to 512 [ 287.818526][T11310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.846037][T11315] 9pnet_fd: Insufficient options for proto=fd [ 287.865650][T11313] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2212'. [ 288.049174][T11328] loop1: detected capacity change from 0 to 1024 [ 288.058042][T11310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.111723][T11310] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.248176][T11332] lo speed is unknown, defaulting to 1000 [ 288.673015][T11342] loop1: detected capacity change from 0 to 512 [ 288.706620][T11342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.910340][T11351] lo speed is unknown, defaulting to 1000 [ 288.997343][T11342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.517218][T11342] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.673859][T11356] lo speed is unknown, defaulting to 1000 [ 290.162280][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.187822][T11367] loop3: detected capacity change from 0 to 1024 [ 290.194865][T11367] EXT4-fs: Ignoring removed oldalloc option [ 290.224592][T11367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.277400][T11376] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2226'. [ 290.329483][T11374] loop0: detected capacity change from 0 to 512 [ 290.345377][T11374] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 290.460703][T11374] EXT4-fs (loop0): 1 truncate cleaned up [ 290.577038][T11374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.660491][T11384] lo speed is unknown, defaulting to 1000 [ 291.184985][T11393] lo speed is unknown, defaulting to 1000 [ 291.405172][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.551592][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.637228][T11404] lo speed is unknown, defaulting to 1000 [ 291.698505][T11401] loop1: detected capacity change from 0 to 1024 [ 291.978480][T11407] loop2: detected capacity change from 0 to 512 [ 292.024823][T11407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2235'. [ 292.078306][T11410] loop1: detected capacity change from 0 to 512 [ 292.106704][T11410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.246705][T11410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.290003][T11410] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.349503][T11419] lo speed is unknown, defaulting to 1000 [ 292.429794][ T29] kauditd_printk_skb: 4917 callbacks suppressed [ 292.429812][ T29] audit: type=1326 audit(1729213460.175:114077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.485164][ T29] audit: type=1326 audit(1729213460.205:114078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.509074][ T29] audit: type=1326 audit(1729213460.205:114079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.532816][ T29] audit: type=1326 audit(1729213460.205:114080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.556584][ T29] audit: type=1326 audit(1729213460.205:114081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.580389][ T29] audit: type=1326 audit(1729213460.205:114082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.604320][ T29] audit: type=1326 audit(1729213460.205:114083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.628061][ T29] audit: type=1326 audit(1729213460.205:114084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.651900][ T29] audit: type=1326 audit(1729213460.205:114085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.675818][ T29] audit: type=1326 audit(1729213460.205:114086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7fc00000 [ 292.835952][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.889641][T11427] lo speed is unknown, defaulting to 1000 [ 292.959805][T11431] loop1: detected capacity change from 0 to 512 [ 292.986382][T11431] EXT4-fs (loop1): 1 orphan inode deleted [ 292.992272][T11431] EXT4-fs (loop1): 1 truncate cleaned up [ 293.005848][T11431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.057996][T11431] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.2241: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=3852, size=1024 fake=0 [ 293.131664][T11431] EXT4-fs (loop1): Remounting filesystem read-only [ 293.174409][T11434] loop2: detected capacity change from 0 to 512 [ 293.189906][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.205744][T11434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.246148][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.262213][T11434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.285084][T11434] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.603707][T11449] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2246'. [ 293.769317][T11451] lo speed is unknown, defaulting to 1000 [ 293.846114][T11454] 9pnet_fd: Insufficient options for proto=fd [ 294.049928][T11456] loop0: detected capacity change from 0 to 1024 [ 294.250900][T11465] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2252'. [ 294.350625][T11469] lo speed is unknown, defaulting to 1000 [ 294.453706][T11470] lo speed is unknown, defaulting to 1000 [ 294.463432][T11474] 9pnet_fd: Insufficient options for proto=fd [ 294.479951][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.538685][T11477] syz.2.2257[11477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.538796][T11477] syz.2.2257[11477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.569125][T11477] syz.2.2257[11477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.925421][T11490] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 294.943365][T11490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 294.951055][T11490] vhci_hcd vhci_hcd.0: Device attached [ 294.972084][T11490] loop0: detected capacity change from 0 to 2048 [ 294.997643][T11490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.017680][T11491] vhci_hcd: connection closed [ 295.018061][ T28] vhci_hcd: stop threads [ 295.027122][ T28] vhci_hcd: release socket [ 295.031608][ T28] vhci_hcd: disconnect device [ 295.089747][T11502] siw: device registration error -23 [ 295.100132][T11502] loop2: detected capacity change from 0 to 512 [ 295.113506][T11505] 9pnet_fd: Insufficient options for proto=fd [ 295.120987][T11502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.133903][T11502] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.141630][T11511] loop1: detected capacity change from 0 to 1024 [ 295.153081][T11511] EXT4-fs: Ignoring removed oldalloc option [ 295.160836][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.169482][T11513] syz.4.2271[11513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.169846][T11513] syz.4.2271[11513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.181465][T11513] syz.4.2271[11513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.183114][T11511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.278871][T11519] syz.4.2272[11519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.279001][T11519] syz.4.2272[11519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.305462][T11519] syz.4.2272[11519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.337806][T11519] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2272'. [ 295.359791][T11519] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2272'. [ 295.402920][T11519] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2272'. [ 295.413617][T11519] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2272'. [ 295.444329][T11519] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2272'. [ 295.453742][T11519] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2272'. [ 296.222242][T11534] lo speed is unknown, defaulting to 1000 [ 296.254290][T11535] lo speed is unknown, defaulting to 1000 [ 296.462576][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.526501][T11545] loop2: detected capacity change from 0 to 1024 [ 296.533621][T11545] EXT4-fs: Ignoring removed oldalloc option [ 296.572321][T11546] lo speed is unknown, defaulting to 1000 [ 296.588188][T11545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.647797][T11552] lo speed is unknown, defaulting to 1000 [ 296.721192][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.744490][T11556] loop1: detected capacity change from 0 to 512 [ 296.752681][T11556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 296.766157][T11556] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 296.913963][T11558] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.2280: Unimplemented hash flags: 0x0001 [ 296.925533][T11558] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2280: Corrupt directory, running e2fsck is recommended [ 296.939156][T11558] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.2280: Unimplemented hash flags: 0x0001 [ 296.950715][T11558] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2280: Corrupt directory, running e2fsck is recommended [ 297.101144][T11560] siw: device registration error -23 [ 297.111421][T11560] loop3: detected capacity change from 0 to 512 [ 297.138164][T11560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.150893][T11560] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.169462][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.267567][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.389907][T11571] loop0: detected capacity change from 0 to 512 [ 297.414784][T11572] lo speed is unknown, defaulting to 1000 [ 297.510307][T11571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2284'. [ 297.571809][T11574] loop2: detected capacity change from 0 to 764 [ 297.646870][T11574] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 297.763665][T11574] 9pnet_fd: Insufficient options for proto=fd [ 297.849528][T11587] 9pnet_fd: Insufficient options for proto=fd [ 298.160659][T11593] lo speed is unknown, defaulting to 1000 [ 298.619514][T11601] lo speed is unknown, defaulting to 1000 [ 298.752646][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.896376][T11584] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 298.902994][T11584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.910694][T11584] vhci_hcd vhci_hcd.0: Device attached [ 298.929613][T11603] loop3: detected capacity change from 0 to 512 [ 299.005537][T11594] loop4: detected capacity change from 0 to 2048 [ 299.013187][T11607] syzkaller0: entered allmulticast mode [ 299.021241][T11607] syz.1.2294[11607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.026285][T11603] EXT4-fs (loop3): 1 orphan inode deleted [ 299.043536][T11603] EXT4-fs (loop3): 1 truncate cleaned up [ 299.049235][ T29] kauditd_printk_skb: 1921 callbacks suppressed [ 299.049323][ T29] audit: type=1326 audit(1729213466.765:116008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.079366][ T29] audit: type=1326 audit(1729213466.765:116009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.103339][ T29] audit: type=1326 audit(1729213466.765:116010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.108388][T11594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.127135][ T29] audit: type=1326 audit(1729213466.765:116011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.145058][T11603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.163892][ T29] audit: type=1326 audit(1729213466.765:116012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.199416][ T29] audit: type=1326 audit(1729213466.765:116013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.223216][ T29] audit: type=1326 audit(1729213466.765:116014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.247125][ T29] audit: type=1326 audit(1729213466.765:116015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.270858][ T29] audit: type=1326 audit(1729213466.765:116016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.294658][T11609] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 299.294619][ T29] audit: type=1326 audit(1729213466.765:116017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11606 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166784dff9 code=0x7ffc0000 [ 299.296268][T11595] vhci_hcd: connection closed [ 299.335342][T11607] syzkaller0 (unregistering): left allmulticast mode [ 299.340571][ T5484] vhci_hcd: stop threads [ 299.351285][ T5484] vhci_hcd: release socket [ 299.355817][ T5484] vhci_hcd: disconnect device [ 299.361721][T11609] EXT4-fs (loop3): Remounting filesystem read-only [ 299.377707][T11615] 9pnet_fd: Insufficient options for proto=fd [ 299.385459][ T3345] usb 9-1: new high-speed USB device number 5 using vhci_hcd [ 299.392895][ T3345] usb 9-1: enqueue for inactive port 0 [ 299.400000][ T3345] usb 9-1: enqueue for inactive port 0 [ 299.405786][ T3345] usb 9-1: enqueue for inactive port 0 [ 299.429335][T11618] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2298'. [ 299.440125][T11618] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2298'. [ 299.461472][T11618] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2298'. [ 299.472316][T11618] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2298'. [ 299.504358][ T3345] vhci_hcd: vhci_device speed not set [ 299.539328][T11618] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2298'. [ 299.549163][T11618] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2298'. [ 299.572843][T11616] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.2293'. [ 299.670971][T11635] loop0: detected capacity change from 0 to 512 [ 299.678097][T11635] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 299.691858][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 299.700918][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.708396][T11635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.719354][T11637] loop2: detected capacity change from 0 to 512 [ 299.725544][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.727665][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.733140][T11635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.754449][T11638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2303'. [ 299.765234][T11637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 299.780352][T11637] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 299.894452][T11650] loop0: detected capacity change from 0 to 512 [ 299.901884][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.928291][T11650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.941538][T11647] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2304: Unimplemented hash flags: 0x0001 [ 299.943041][T11650] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.953097][T11647] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2304: Corrupt directory, running e2fsck is recommended [ 299.979811][T11647] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2304: Unimplemented hash flags: 0x0001 [ 299.984347][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.991363][T11647] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2304: Corrupt directory, running e2fsck is recommended [ 300.036675][T11662] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2314'. [ 300.061121][T11668] loop3: detected capacity change from 0 to 764 [ 300.067841][T11668] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 300.075321][T11667] 9pnet_fd: Insufficient options for proto=fd [ 300.083920][T11670] loop4: detected capacity change from 0 to 2048 [ 300.097301][T11670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.150618][T11678] FAULT_INJECTION: forcing a failure. [ 300.150618][T11678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.163783][T11678] CPU: 1 UID: 0 PID: 11678 Comm: syz.3.2319 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 300.163816][T11678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.163832][T11678] Call Trace: [ 300.163840][T11678] [ 300.163923][T11678] dump_stack_lvl+0xf2/0x150 [ 300.163954][T11678] dump_stack+0x15/0x20 [ 300.164068][T11678] should_fail_ex+0x223/0x230 [ 300.164102][T11678] should_fail+0xb/0x10 [ 300.164169][T11678] should_fail_usercopy+0x1a/0x20 [ 300.164275][T11678] _copy_from_user+0x1e/0xd0 [ 300.164364][T11678] copy_msghdr_from_user+0x54/0x2a0 [ 300.164401][T11678] __sys_sendmsg+0x171/0x270 [ 300.164453][T11678] __x64_sys_sendmsg+0x46/0x50 [ 300.164492][T11678] x64_sys_call+0x2689/0x2d60 [ 300.164546][T11678] do_syscall_64+0xc9/0x1c0 [ 300.164565][T11678] ? clear_bhb_loop+0x55/0xb0 [ 300.164631][T11678] ? clear_bhb_loop+0x55/0xb0 [ 300.164672][T11678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.164713][T11678] RIP: 0033:0x7f4fcbbddff9 [ 300.164755][T11678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.164774][T11678] RSP: 002b:00007f4fca857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.164795][T11678] RAX: ffffffffffffffda RBX: 00007f4fcbd95f80 RCX: 00007f4fcbbddff9 [ 300.164812][T11678] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000005 [ 300.164866][T11678] RBP: 00007f4fca857090 R08: 0000000000000000 R09: 0000000000000000 [ 300.164880][T11678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.164893][T11678] R13: 0000000000000000 R14: 00007f4fcbd95f80 R15: 00007ffddede95a8 [ 300.164911][T11678] [ 300.169723][T11670] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 300.169760][T11670] EXT4-fs (loop4): This should not happen!! Data will be lost [ 300.169760][T11670] [ 300.169776][T11670] EXT4-fs (loop4): Total free blocks count 0 [ 300.169788][T11670] EXT4-fs (loop4): Free/Dirty block details [ 300.169799][T11670] EXT4-fs (loop4): free_blocks=0 [ 300.169854][T11670] EXT4-fs (loop4): dirty_blocks=0 [ 300.169869][T11670] EXT4-fs (loop4): Block reservation details [ 300.169883][T11670] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 300.221877][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.417325][T11687] loop1: detected capacity change from 0 to 1024 [ 300.444290][T11691] loop4: detected capacity change from 0 to 512 [ 300.450519][T11689] loop0: detected capacity change from 0 to 512 [ 300.491528][T11700] loop3: detected capacity change from 0 to 764 [ 300.507221][T11689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.513235][T11700] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 300.522468][T11689] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.551375][T11706] 9pnet_fd: Insufficient options for proto=fd [ 300.560382][T11708] loop1: detected capacity change from 0 to 1024 [ 300.577124][T11708] EXT4-fs: Ignoring removed oldalloc option [ 300.609771][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.623790][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.647904][T11708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.662011][T11721] loop2: detected capacity change from 0 to 512 [ 300.704980][T11724] loop3: detected capacity change from 0 to 512 [ 300.729380][T11724] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.2336: casefold flag without casefold feature [ 300.742816][T11727] loop4: detected capacity change from 0 to 1024 [ 300.755160][T11724] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2336: couldn't read orphan inode 15 (err -117) [ 300.784404][T11724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.812278][T11734] syzkaller0: entered allmulticast mode [ 300.818604][T11734] bpf_get_probe_write_proto: 2 callbacks suppressed [ 300.818618][T11734] syz.2.2341[11734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.825596][T11734] syz.2.2341[11734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.831844][T11738] 9pnet_fd: Insufficient options for proto=fd [ 300.837259][T11734] syz.2.2341[11734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.871328][T11734] syzkaller0 (unregistering): left allmulticast mode [ 300.879749][T11741] loop4: detected capacity change from 0 to 512 [ 300.907932][T11741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.920510][T11741] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.949310][ T9825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.969452][T11745] loop4: detected capacity change from 0 to 764 [ 300.976266][T11745] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 301.027518][T11749] FAULT_INJECTION: forcing a failure. [ 301.027518][T11749] name failslab, interval 1, probability 0, space 0, times 0 [ 301.040228][T11749] CPU: 1 UID: 0 PID: 11749 Comm: syz.2.2348 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 301.051033][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.061089][T11749] Call Trace: [ 301.064386][T11749] [ 301.067337][T11749] dump_stack_lvl+0xf2/0x150 [ 301.071937][T11749] dump_stack+0x15/0x20 [ 301.076093][T11749] should_fail_ex+0x223/0x230 [ 301.080835][T11749] ? resv_map_alloc+0x32/0x190 [ 301.085613][T11749] should_failslab+0x8f/0xb0 [ 301.090285][T11749] __kmalloc_cache_noprof+0x4b/0x2a0 [ 301.095623][T11749] resv_map_alloc+0x32/0x190 [ 301.100241][T11749] hugetlbfs_get_inode+0x6e/0x2b0 [ 301.105296][T11749] hugetlb_file_setup+0x188/0x3c0 [ 301.110334][T11749] ksys_mmap_pgoff+0x172/0x330 [ 301.115218][T11749] x64_sys_call+0x1884/0x2d60 [ 301.119936][T11749] do_syscall_64+0xc9/0x1c0 [ 301.124459][T11749] ? clear_bhb_loop+0x55/0xb0 [ 301.129235][T11749] ? clear_bhb_loop+0x55/0xb0 [ 301.134015][T11749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.139923][T11749] RIP: 0033:0x7f1facf8dff9 [ 301.144334][T11749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.164010][T11749] RSP: 002b:00007f1fabc07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 301.172474][T11749] RAX: ffffffffffffffda RBX: 00007f1fad145f80 RCX: 00007f1facf8dff9 [ 301.180447][T11749] RDX: 0000000000000000 RSI: 0000000000ff5000 RDI: 0000000020000000 [ 301.188442][T11749] RBP: 00007f1fabc07090 R08: ffffffffffffffff R09: 0000000000000000 [ 301.196412][T11749] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 301.204383][T11749] R13: 0000000000000000 R14: 00007f1fad145f80 R15: 00007ffefff78818 [ 301.212444][T11749] [ 301.233390][T11753] loop2: detected capacity change from 0 to 512 [ 301.297404][T11759] loop2: detected capacity change from 0 to 1024 [ 301.376294][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.398525][T11768] siw: device registration error -23 [ 301.409993][T11768] loop2: detected capacity change from 0 to 512 [ 301.553343][T11774] lo speed is unknown, defaulting to 1000 [ 301.581405][ T8583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.591422][T11768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.614572][T11768] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.657814][T11783] syzkaller0: entered allmulticast mode [ 301.674050][T11783] syz.0.2361[11783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.674127][T11783] syz.0.2361[11783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.690017][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.712107][T11783] syz.0.2361[11783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.719236][T11783] syzkaller0 (unregistering): left allmulticast mode [ 302.005231][T11790] loop2: detected capacity change from 0 to 512 [ 302.012195][T11789] loop3: detected capacity change from 0 to 764 [ 302.025099][T11789] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 302.044663][T11793] loop0: detected capacity change from 0 to 1024 [ 302.054868][T11797] loop1: detected capacity change from 0 to 1024 [ 302.061603][T11797] EXT4-fs: Ignoring removed oldalloc option [ 302.090259][T11797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.090611][T11801] loop0: detected capacity change from 0 to 512 [ 302.110722][T11801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.204226][T11801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.236689][T11801] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.287054][T11820] loop3: detected capacity change from 0 to 1024 [ 302.293877][T11820] EXT4-fs: Ignoring removed oldalloc option [ 302.328297][T11822] loop2: detected capacity change from 0 to 1024 [ 302.348163][T11822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.398415][T11830] loop4: detected capacity change from 0 to 512 [ 302.406355][T11820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.502575][ T8570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.519340][T11835] loop4: detected capacity change from 0 to 1024 [ 302.629375][ T9901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.679795][T11848] loop4: detected capacity change from 0 to 512 [ 302.686546][T11848] EXT4-fs: Invalid want_extra_isize 9 [ 302.759899][T11867] loop0: detected capacity change from 0 to 512 [ 302.767071][T11861] netlink: 'syz.4.2389': attribute type 10 has an invalid length. [ 302.779790][T11861] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.789686][T11861] bond0: (slave team0): Enslaving as an active interface with an up link [ 302.800257][T11861] netlink: 'syz.4.2389': attribute type 10 has an invalid length. [ 302.810892][T11861] bond0: (slave team0): Releasing backup interface [ 302.818085][T11867] EXT4-fs (loop0): 1 orphan inode deleted [ 302.823883][T11867] EXT4-fs (loop0): 1 truncate cleaned up [ 302.830074][T11867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.831863][T11861] bridge0: port 3(team0) entered blocking state [ 302.848914][T11861] bridge0: port 3(team0) entered disabled state [ 302.878523][T11867] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.2391: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=3852, size=1024 fake=0 [ 302.888851][T11861] team0: entered allmulticast mode [ 302.903137][T11861] team_slave_0: entered allmulticast mode [ 302.908951][T11861] team_slave_1: entered allmulticast mode [ 302.915427][T11861] team0: entered promiscuous mode [ 302.920581][T11861] team_slave_0: entered promiscuous mode [ 302.926353][T11861] team_slave_1: entered promiscuous mode [ 302.936579][T11867] EXT4-fs (loop0): Remounting filesystem read-only [ 302.969645][ T8577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.991689][T11882] syzkaller0: entered allmulticast mode [ 302.998776][T11882] syz.4.2398[11882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.998842][T11882] syz.4.2398[11882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.006269][T11884] syzkaller0: entered allmulticast mode [ 303.010679][T11882] syz.4.2398[11882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.024327][T11884] syz.2.2399[11884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.049071][T11882] syzkaller0 (unregistering): left allmulticast mode [ 303.189303][T11884] syzkaller0 (unregistering): left allmulticast mode [ 303.224818][T11892] siw: device registration error -23 [ 303.238571][T11892] loop4: detected capacity change from 0 to 512 [ 303.276892][T11892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.297880][T11892] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.340971][T11906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.365232][T11906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.379394][T11906] bond0 (unregistering): Released all slaves [ 303.421922][T11918] 9pnet_fd: Insufficient options for proto=fd [ 303.455712][T11920] syzkaller0: entered allmulticast mode [ 303.474451][T11924] FAULT_INJECTION: forcing a failure. [ 303.474451][T11924] name failslab, interval 1, probability 0, space 0, times 0 [ 303.487199][T11924] CPU: 1 UID: 0 PID: 11924 Comm: syz.1.2415 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 303.497996][T11924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.508269][T11924] Call Trace: [ 303.511556][T11924] [ 303.514490][T11924] dump_stack_lvl+0xf2/0x150 [ 303.519113][T11924] dump_stack+0x15/0x20 [ 303.523276][T11924] should_fail_ex+0x223/0x230 [ 303.527974][T11924] ? getname_flags+0x81/0x3b0 [ 303.532669][T11924] should_failslab+0x8f/0xb0 [ 303.537270][T11924] kmem_cache_alloc_noprof+0x4c/0x290 [ 303.542683][T11924] ? kmem_cache_free+0xdc/0x2d0 [ 303.547560][T11924] getname_flags+0x81/0x3b0 [ 303.552210][T11924] getname+0x17/0x20 [ 303.556149][T11924] __se_sys_quotactl+0x15b/0x660 [ 303.561153][T11924] __x64_sys_quotactl+0x55/0x70 [ 303.566013][T11924] x64_sys_call+0x2b7f/0x2d60 [ 303.570816][T11924] do_syscall_64+0xc9/0x1c0 [ 303.575326][T11924] ? clear_bhb_loop+0x55/0xb0 [ 303.580036][T11924] ? clear_bhb_loop+0x55/0xb0 [ 303.584785][T11924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.590784][T11924] RIP: 0033:0x7f166784dff9 [ 303.595204][T11924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.614825][T11924] RSP: 002b:00007f16664c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 303.623245][T11924] RAX: ffffffffffffffda RBX: 00007f1667a05f80 RCX: 00007f166784dff9 [ 303.631294][T11924] RDX: 0000000000000000 RSI: 0000000020000900 RDI: ffffffff80000202 [ 303.639272][T11924] RBP: 00007f16664c1090 R08: 0000000000000000 R09: 0000000000000000 [ 303.647314][T11924] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000001 [ 303.655301][T11924] R13: 0000000000000000 R14: 00007f1667a05f80 R15: 00007fff76319668 [ 303.663301][T11924] [ 303.672115][T11920] syzkaller0 (unregistering): left allmulticast mode [ 303.693730][T11926] loop3: detected capacity change from 0 to 1024 [ 303.723976][T11932] 9pnet_fd: Insufficient options for proto=fd [ 303.797032][T11941] 9pnet_fd: Insufficient options for proto=fd [ 303.845210][T11954] loop0: detected capacity change from 0 to 512 [ 303.863951][T11958] loop3: detected capacity change from 0 to 1024 [ 303.864797][T11955] loop1: detected capacity change from 0 to 1024 [ 303.871612][T11958] EXT4-fs: Ignoring removed oldalloc option [ 303.883765][T11955] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 303.894713][T11955] JBD2: no valid journal superblock found [ 303.900538][T11955] EXT4-fs (loop1): Could not load journal inode [ 303.902807][T11954] EXT4-fs (loop0): 1 orphan inode deleted [ 303.912583][T11954] EXT4-fs (loop0): 1 truncate cleaned up [ 303.944181][T11954] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.2428: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=3852, size=1024 fake=0 [ 304.004110][T11954] EXT4-fs (loop0): Remounting filesystem read-only [ 304.041232][T11974] syzkaller0: entered allmulticast mode [ 304.054783][T11974] syzkaller0 (unregistering): left allmulticast mode [ 304.165403][T11980] 9pnet_fd: Insufficient options for proto=fd [ 304.169470][ T29] kauditd_printk_skb: 900 callbacks suppressed [ 304.169487][ T29] audit: type=1326 audit(1729213471.915:116918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.0.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 304.201600][ T29] audit: type=1326 audit(1729213471.915:116919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.0.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 304.225376][ T29] audit: type=1326 audit(1729213471.915:116920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.0.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 304.249228][ T29] audit: type=1326 audit(1729213471.915:116921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.0.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 304.273138][ T29] audit: type=1326 audit(1729213471.915:116922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.0.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 304.303972][ T29] audit: type=1326 audit(1729213472.045:116923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1facf8dff9 code=0x7ffc0000 [ 304.327948][ T29] audit: type=1326 audit(1729213472.045:116924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1facf8dff9 code=0x7ffc0000 [ 304.358212][ T5480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.364800][T11988] loop2: detected capacity change from 0 to 512 [ 304.375331][T11988] EXT4-fs: Invalid want_extra_isize 9 [ 304.387857][T11990] loop4: detected capacity change from 0 to 512 [ 304.431245][ T5480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.447325][ T29] audit: type=1326 audit(1729213472.195:116925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 304.471137][ T29] audit: type=1326 audit(1729213472.195:116926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 304.494745][ T29] audit: type=1326 audit(1729213472.195:116927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae51e7dff9 code=0x7ffc0000 [ 304.520203][T11998] loop2: detected capacity change from 0 to 512 [ 304.530182][T11998] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.541453][T12000] netlink: 'syz.4.2447': attribute type 10 has an invalid length. [ 304.552304][T12000] geneve1: entered promiscuous mode [ 304.561886][T11998] EXT4-fs (loop2): 1 orphan inode deleted [ 304.567692][T11998] EXT4-fs (loop2): 1 truncate cleaned up [ 304.579015][T12000] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 304.590990][T11983] lo speed is unknown, defaulting to 1000 [ 304.601799][ T5480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.635601][T11998] loop2: detected capacity change from 512 to 11 [ 304.638993][T12007] loop4: detected capacity change from 0 to 256 [ 304.679808][ T5480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.694489][T11998] lo speed is unknown, defaulting to 1000 [ 304.701426][T12008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.715875][T12008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.743883][T11983] chnl_net:caif_netlink_parms(): no params data found [ 304.752693][T12017] loop0: detected capacity change from 0 to 2048 [ 304.800169][T12022] __nla_validate_parse: 32 callbacks suppressed [ 304.800187][T12022] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2455'. [ 304.815908][ T5480] bridge_slave_1: left allmulticast mode [ 304.821611][ T5480] bridge_slave_1: left promiscuous mode [ 304.827406][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.836019][ T5480] bridge_slave_0: left promiscuous mode [ 304.841769][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.862751][T12028] loop0: detected capacity change from 0 to 512 [ 304.881035][T12028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2457'. [ 304.973030][T12039] loop0: detected capacity change from 0 to 512 [ 304.991637][T12039] EXT4-fs (loop0): 1 orphan inode deleted [ 304.997475][T12039] EXT4-fs (loop0): 1 truncate cleaned up [ 305.008091][T12039] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.2462: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=3852, size=1024 fake=0 [ 305.027713][T12039] EXT4-fs (loop0): Remounting filesystem read-only [ 305.067905][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.079050][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.090216][ T5480] bond0 (unregistering): Released all slaves [ 305.120845][T12045] lo speed is unknown, defaulting to 1000 [ 305.138210][ T5480] hsr_slave_0: left promiscuous mode [ 305.143876][ T5480] hsr_slave_1: left promiscuous mode [ 305.149886][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.157421][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.163655][T12052] loop4: detected capacity change from 0 to 256 [ 305.171419][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.178668][T12052] FAT-fs (loop4): Directory bread(block 64) failed [ 305.178932][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.185385][T12052] FAT-fs (loop4): Directory bread(block 65) failed [ 305.199227][T12052] FAT-fs (loop4): Directory bread(block 66) failed [ 305.205797][T12052] FAT-fs (loop4): Directory bread(block 67) failed [ 305.205934][ T5480] bridge_slave_0: left allmulticast mode [ 305.212317][T12052] FAT-fs (loop4): Directory bread(block 68) failed [ 305.218027][ T5480] veth1_macvtap: left promiscuous mode [ 305.224491][T12052] FAT-fs (loop4): Directory bread(block 69) failed [ 305.229923][ T5480] veth0_macvtap: left promiscuous mode [ 305.236556][T12052] FAT-fs (loop4): Directory bread(block 70) failed [ 305.241988][ T5480] veth1_vlan: left promiscuous mode [ 305.248493][T12052] FAT-fs (loop4): Directory bread(block 71) failed [ 305.253627][ T5480] veth0_vlan: left promiscuous mode [ 305.260507][T12052] FAT-fs (loop4): Directory bread(block 72) failed [ 305.272294][T12052] FAT-fs (loop4): Directory bread(block 73) failed [ 305.275771][ T9901] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 305.292973][ T9901] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Out of memory [ 305.303167][ T9901] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 305.422121][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 305.432844][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 305.480306][T11983] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.487496][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.495108][T11983] bridge_slave_0: entered allmulticast mode [ 305.501716][T11983] bridge_slave_0: entered promiscuous mode [ 305.518131][T12054] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2468'. [ 305.530687][T11983] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.537821][T11983] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.545213][T11983] bridge_slave_1: entered allmulticast mode [ 305.552181][T11983] bridge_slave_1: entered promiscuous mode [ 305.574898][T12056] loop4: detected capacity change from 0 to 256 [ 305.589650][T12056] FAT-fs (loop4): Directory bread(block 64) failed [ 305.591870][T11983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.606680][T12056] FAT-fs (loop4): Directory bread(block 65) failed [ 305.613299][T12056] FAT-fs (loop4): Directory bread(block 66) failed [ 305.620412][T12056] FAT-fs (loop4): Directory bread(block 67) failed [ 305.623625][T11983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.629441][T12056] FAT-fs (loop4): Directory bread(block 68) failed [ 305.643185][T12056] FAT-fs (loop4): Directory bread(block 69) failed [ 305.649841][T12056] FAT-fs (loop4): Directory bread(block 70) failed [ 305.659491][T12056] FAT-fs (loop4): Directory bread(block 71) failed [ 305.667971][T12056] FAT-fs (loop4): Directory bread(block 72) failed [ 305.674672][T12056] FAT-fs (loop4): Directory bread(block 73) failed [ 305.684095][T11983] team0: Port device team_slave_0 added [ 305.693335][T11983] team0: Port device team_slave_1 added [ 305.722925][T11983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.730004][T11983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.756158][T11983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.767813][T11983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.774773][T11983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.801062][T11983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.824790][T12063] loop4: detected capacity change from 0 to 512 [ 305.845429][T12063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2472'. [ 305.857560][T11983] hsr_slave_0: entered promiscuous mode [ 305.872203][T12067] loop3: detected capacity change from 0 to 764 [ 305.879355][T11983] hsr_slave_1: entered promiscuous mode [ 305.885657][T11983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.892438][T12067] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 305.900297][T11983] Cannot create hsr debugfs directory [ 305.926602][T12072] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2475'. [ 305.946901][T12076] loop0: detected capacity change from 0 to 1024 [ 305.956090][ T5480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.013150][T12083] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2478'. [ 306.027021][T12059] lo speed is unknown, defaulting to 1000 [ 306.043089][ T5480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.058030][T12082] tap0: tun_chr_ioctl cmd 35111 [ 306.097644][T12089] loop3: detected capacity change from 0 to 1024 [ 306.105272][ T5480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.106050][T12089] EXT4-fs: Ignoring removed oldalloc option [ 306.193405][ T5480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.270037][T12096] loop4: detected capacity change from 0 to 8192 [ 306.310798][T12059] chnl_net:caif_netlink_parms(): no params data found [ 306.345475][T12096] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.397662][ T5480] bridge_slave_1: left allmulticast mode [ 306.403355][ T5480] bridge_slave_1: left promiscuous mode [ 306.409038][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.417423][ T5480] bridge_slave_0: left promiscuous mode [ 306.423182][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.659773][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.674341][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.687672][ T5480] bond0 (unregistering): Released all slaves [ 306.764534][T12110] lo speed is unknown, defaulting to 1000 [ 306.799940][T12059] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.807153][T12059] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.879914][T12059] bridge_slave_0: entered allmulticast mode [ 306.912164][T12115] loop4: detected capacity change from 0 to 1024 [ 306.930974][T12059] bridge_slave_0: entered promiscuous mode [ 306.966799][ T5480] hsr_slave_0: left promiscuous mode [ 306.979090][ T5480] hsr_slave_1: left promiscuous mode [ 306.987699][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.995410][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.022119][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.029619][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.041115][ T5480] bridge_slave_0: left allmulticast mode [ 307.046907][ T5480] veth1_macvtap: left promiscuous mode [ 307.052400][ T5480] veth0_macvtap: left promiscuous mode [ 307.058002][ T5480] veth1_vlan: left promiscuous mode [ 307.063282][ T5480] veth0_vlan: left promiscuous mode [ 307.165731][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 307.177821][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 307.226007][T11983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.234584][T12059] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.241828][T12059] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.249132][T12059] bridge_slave_1: entered allmulticast mode [ 307.257209][T12059] bridge_slave_1: entered promiscuous mode [ 307.263726][T12118] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2487'. [ 307.278236][T11983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.298421][T11983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.332074][T11983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.343300][T12059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.345660][T12122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2489'. [ 307.363593][T12059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.388882][T12059] team0: Port device team_slave_0 added [ 307.404533][T12059] team0: Port device team_slave_1 added [ 307.429691][T12059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.436751][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.462838][T12059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.480593][T12059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.487718][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.513731][T12059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.546597][T11983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.559087][T11983] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.560201][T12133] 9pnet_fd: Insufficient options for proto=fd [ 307.573991][T12059] hsr_slave_0: entered promiscuous mode [ 307.580655][T12059] hsr_slave_1: entered promiscuous mode [ 307.586994][T12059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.594726][T12059] Cannot create hsr debugfs directory [ 307.609807][T12137] loop4: detected capacity change from 0 to 512 [ 307.618169][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.618223][T12137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2496'. [ 307.625280][ T5482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.643384][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.650550][ T5482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.672424][T12139] program syz.4.2497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.699850][T12139] loop4: detected capacity change from 0 to 512 [ 307.787074][T11983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.794834][T12147] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2498'. [ 307.874637][T11983] veth0_vlan: entered promiscuous mode [ 307.916394][T11983] veth1_vlan: entered promiscuous mode [ 307.917992][T12163] 9pnet_fd: Insufficient options for proto=fd [ 307.959303][T11983] veth0_macvtap: entered promiscuous mode [ 307.965274][ C1] hrtimer: interrupt took 36341 ns [ 307.995328][T12059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.012067][T12059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.024420][T12059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 308.069098][T11983] veth1_macvtap: entered promiscuous mode [ 308.081078][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.091627][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.101727][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.112354][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.114074][T12169] 9pnet_fd: Insufficient options for proto=fd [ 308.122198][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.138798][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.149808][T11983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.158159][T12059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 308.198337][T12059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.209429][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.220006][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.229881][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.240325][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.250161][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.260661][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.272606][T11983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.289279][T12059] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.298090][T11983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.306925][T11983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.315668][T11983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.316820][T12167] bpf_get_probe_write_proto: 17 callbacks suppressed [ 308.316838][T12167] syz.4.2506[12167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.324380][T11983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.351534][T12167] syz.4.2506[12167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.351663][T12167] syz.4.2506[12167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.376015][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.394549][ T5482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.404296][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.411432][ T5482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.429558][T12185] loop3: detected capacity change from 0 to 256 [ 308.444639][T12185] FAT-fs (loop3): Directory bread(block 64) failed [ 308.452539][T12185] FAT-fs (loop3): Directory bread(block 65) failed [ 308.461953][T12185] FAT-fs (loop3): Directory bread(block 66) failed [ 308.468798][T12185] FAT-fs (loop3): Directory bread(block 67) failed [ 308.475425][T12185] FAT-fs (loop3): Directory bread(block 68) failed [ 308.482018][T12185] FAT-fs (loop3): Directory bread(block 69) failed [ 308.488806][T12185] FAT-fs (loop3): Directory bread(block 70) failed [ 308.500555][T12185] FAT-fs (loop3): Directory bread(block 71) failed [ 308.511451][T12187] loop0: detected capacity change from 0 to 512 [ 308.519231][T12185] FAT-fs (loop3): Directory bread(block 72) failed [ 308.529581][T12185] FAT-fs (loop3): Directory bread(block 73) failed [ 308.594625][T12059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.616335][T12187] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.621567][T12201] loop4: detected capacity change from 0 to 1024 [ 308.637794][T12201] EXT4-fs: Ignoring removed oldalloc option [ 308.759015][T12059] veth0_vlan: entered promiscuous mode [ 308.775772][T12223] 9pnet_fd: Insufficient options for proto=fd [ 308.778172][T12059] veth1_vlan: entered promiscuous mode [ 308.801416][T12059] veth0_macvtap: entered promiscuous mode [ 308.821097][T12059] veth1_macvtap: entered promiscuous mode [ 308.833171][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.843685][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.853562][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.864044][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.873910][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.884497][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.894421][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.904901][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.915950][T12059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.924214][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.934681][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.944628][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.955162][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.965013][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.975507][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.985360][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.995860][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.006885][T12059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.024256][T12059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.033056][T12059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.033954][T12235] loop1: detected capacity change from 0 to 1024 [ 309.041795][T12059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.056943][T12059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.073265][T12227] syzkaller0: entered allmulticast mode [ 309.090745][T12227] syz.0.2523[12227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.090816][T12227] syz.0.2523[12227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.104172][T12227] syz.0.2523[12227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.117242][T12227] syz.0.2523[12227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.129203][T12227] syz.0.2523[12227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.141428][T12227] syz.0.2523[12227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.159279][T12227] syzkaller0 (unregistering): left allmulticast mode [ 309.234376][T12250] 9pnet_fd: Insufficient options for proto=fd [ 309.462677][T12259] lo speed is unknown, defaulting to 1000 [ 309.516425][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 309.516444][ T29] audit: type=1326 audit(1729213477.265:117249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 309.546545][ T29] audit: type=1326 audit(1729213477.265:117250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfcfadff9 code=0x7ffc0000 [ 309.878590][T12268] FAULT_INJECTION: forcing a failure. [ 309.878590][T12268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.895530][T12268] CPU: 1 UID: 0 PID: 12268 Comm: syz.1.2533 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 309.906411][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.916488][T12268] Call Trace: [ 309.919782][T12268] [ 309.922824][T12268] dump_stack_lvl+0xf2/0x150 [ 309.927493][T12268] dump_stack+0x15/0x20 [ 309.931735][T12268] should_fail_ex+0x223/0x230 [ 309.936449][T12268] should_fail+0xb/0x10 [ 309.940640][T12268] should_fail_usercopy+0x1a/0x20 [ 309.945708][T12268] _copy_from_user+0x1e/0xd0 [ 309.950367][T12268] __copy_siginfo_from_user+0x41/0x2b0 [ 309.955898][T12268] ? send_sig_perf+0x9a/0xc0 [ 309.960530][T12268] ? __rcu_read_unlock+0x34/0x70 [ 309.965494][T12268] __x64_sys_rt_tgsigqueueinfo+0x7a/0x160 [ 309.971260][T12268] x64_sys_call+0x2a0d/0x2d60 [ 309.975973][T12268] do_syscall_64+0xc9/0x1c0 [ 309.980490][T12268] ? clear_bhb_loop+0x55/0xb0 [ 309.985198][T12268] ? clear_bhb_loop+0x55/0xb0 [ 309.990043][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.996118][T12268] RIP: 0033:0x7ff88f96dff9 [ 310.000617][T12268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.020302][T12268] RSP: 002b:00007ff88e5e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 310.028734][T12268] RAX: ffffffffffffffda RBX: 00007ff88fb25f80 RCX: 00007ff88f96dff9 [ 310.036714][T12268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.044691][T12268] RBP: 00007ff88e5e1090 R08: 0000000000000000 R09: 0000000000000000 [ 310.052668][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.060726][T12268] R13: 0000000000000000 R14: 00007ff88fb25f80 R15: 00007ffd46fbab88 [ 310.068794][T12268] [ 310.091568][T12271] lo speed is unknown, defaulting to 1000 [ 310.129149][T12278] SET target dimension over the limit! [ 310.233293][ T29] audit: type=1400 audit(1729213477.975:117251): avc: denied { read } for pid=12282 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 310.273794][T12284] loop4: detected capacity change from 0 to 8192 [ 310.325527][T12284] loop4: p1 < > p4 [ 310.329375][T12284] loop4: partition table partially beyond EOD, truncated [ 310.336693][T12284] loop4: p1 start 295168 is beyond EOD, truncated [ 310.545039][ T29] audit: type=1326 audit(1729213478.285:117252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbad8dff9 code=0x7ffc0000 [ 310.568955][ T29] audit: type=1326 audit(1729213478.285:117253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbad8dff9 code=0x7ffc0000 [ 310.592775][ T29] audit: type=1326 audit(1729213478.295:117254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7febbad8dff9 code=0x7ffc0000 [ 310.616545][ T29] audit: type=1326 audit(1729213478.295:117255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbad8dff9 code=0x7ffc0000 [ 310.640230][ T29] audit: type=1326 audit(1729213478.295:117256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7febbad8dff9 code=0x7ffc0000 [ 310.664170][ T29] audit: type=1326 audit(1729213478.295:117257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbad8dff9 code=0x7ffc0000 [ 310.687950][ T29] audit: type=1326 audit(1729213478.295:117258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7febbad8dff9 code=0x7ffc0000 [ 310.724121][T12292] __nla_validate_parse: 16 callbacks suppressed [ 310.724193][T12292] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2543'. [ 310.860699][T12307] vxcan1: tx address claim with dlc 1 [ 310.870791][T12307] loop2: detected capacity change from 0 to 512 [ 310.888168][T12307] ext4 filesystem being mounted at /7/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 310.893175][T12311] loop3: detected capacity change from 0 to 512 [ 310.906173][T12311] EXT4-fs: Invalid want_extra_isize 9 [ 310.934143][T12316] 9pnet_fd: Insufficient options for proto=fd [ 310.954156][T12319] loop2: detected capacity change from 0 to 512 [ 310.961259][T12321] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2556'. [ 310.962737][T12319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2555'. [ 311.055222][T12333] loop4: detected capacity change from 0 to 256 [ 311.065718][T12335] vxcan1: tx address claim with dlc 1 [ 311.068849][T12333] FAT-fs (loop4): Directory bread(block 64) failed [ 311.078168][T12333] FAT-fs (loop4): Directory bread(block 65) failed [ 311.085204][T12333] FAT-fs (loop4): Directory bread(block 66) failed [ 311.086599][T12335] loop3: detected capacity change from 0 to 512 [ 311.095789][T12333] FAT-fs (loop4): Directory bread(block 67) failed [ 311.104591][T12333] FAT-fs (loop4): Directory bread(block 68) failed [ 311.112227][T12333] FAT-fs (loop4): Directory bread(block 69) failed [ 311.118877][T12333] FAT-fs (loop4): Directory bread(block 70) failed [ 311.125502][T12333] FAT-fs (loop4): Directory bread(block 71) failed [ 311.131381][T12339] loop2: detected capacity change from 0 to 512 [ 311.132142][T12333] FAT-fs (loop4): Directory bread(block 72) failed [ 311.142812][T12339] EXT4-fs: Invalid want_extra_isize 9 [ 311.144974][T12333] FAT-fs (loop4): Directory bread(block 73) failed [ 311.173731][T12335] ext4 filesystem being mounted at /263/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 311.225045][T12345] loop3: detected capacity change from 0 to 1024 [ 311.232089][T12345] EXT4-fs: Ignoring removed oldalloc option [ 311.239922][T12347] loop2: detected capacity change from 0 to 512 [ 311.248340][T12347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2568'. [ 311.276947][T12349] batadv0: entered promiscuous mode [ 311.396414][T12364] siw: device registration error -23 [ 311.406887][T12364] loop4: detected capacity change from 0 to 512 [ 311.418803][T12364] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.563011][T12380] 9pnet_fd: Insufficient options for proto=fd [ 311.590841][T12382] lo speed is unknown, defaulting to 1000 [ 311.624236][T12382] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2583'. [ 311.689871][T12383] loop4: detected capacity change from 0 to 164 [ 311.699578][T12383] iso9660: Unknown parameter '€' [ 311.751584][T12385] bridge0: port 4(hsr0) entered blocking state [ 311.757902][T12385] bridge0: port 4(hsr0) entered disabled state [ 311.764309][T12385] hsr0: entered allmulticast mode [ 311.769440][T12385] hsr_slave_0: entered allmulticast mode [ 311.775076][T12385] hsr_slave_1: entered allmulticast mode [ 311.781350][T12385] hsr0: entered promiscuous mode [ 311.794109][T12385] loop4: detected capacity change from 0 to 128 [ 311.802588][T12385] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 312.016085][T12398] FAULT_INJECTION: forcing a failure. [ 312.016085][T12398] name failslab, interval 1, probability 0, space 0, times 0 [ 312.028836][T12398] CPU: 1 UID: 0 PID: 12398 Comm: syz.3.2590 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 312.039617][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.049674][T12398] Call Trace: [ 312.052957][T12398] [ 312.055916][T12398] dump_stack_lvl+0xf2/0x150 [ 312.060580][T12398] dump_stack+0x15/0x20 [ 312.064782][T12398] should_fail_ex+0x223/0x230 [ 312.069555][T12398] ? realloc_user_queue+0x7d/0x180 [ 312.074790][T12398] should_failslab+0x8f/0xb0 [ 312.079385][T12398] __kmalloc_noprof+0xa5/0x370 [ 312.084223][T12398] ? snd_timer_user_open+0x55/0x120 [ 312.089512][T12398] realloc_user_queue+0x7d/0x180 [ 312.094496][T12398] snd_timer_user_open+0xc3/0x120 [ 312.099531][T12398] ? __pfx_snd_timer_user_open+0x10/0x10 [ 312.105240][T12398] snd_open+0x225/0x280 [ 312.109406][T12398] chrdev_open+0x2f9/0x370 [ 312.113856][T12398] ? __pfx_chrdev_open+0x10/0x10 [ 312.118806][T12398] do_dentry_open+0x621/0xa20 [ 312.123496][T12398] vfs_open+0x38/0x1f0 [ 312.127623][T12398] path_openat+0x1ac2/0x1fa0 [ 312.132307][T12398] ? _parse_integer+0x27/0x30 [ 312.137027][T12398] do_filp_open+0xf7/0x200 [ 312.141466][T12398] do_sys_openat2+0xab/0x120 [ 312.146141][T12398] __x64_sys_openat+0xf3/0x120 [ 312.150937][T12398] x64_sys_call+0x1025/0x2d60 [ 312.155639][T12398] do_syscall_64+0xc9/0x1c0 [ 312.160200][T12398] ? clear_bhb_loop+0x55/0xb0 [ 312.164917][T12398] ? clear_bhb_loop+0x55/0xb0 [ 312.169607][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.175510][T12398] RIP: 0033:0x7f4fcbbddff9 [ 312.179931][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.199546][T12398] RSP: 002b:00007f4fca857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 312.207981][T12398] RAX: ffffffffffffffda RBX: 00007f4fcbd95f80 RCX: 00007f4fcbbddff9 [ 312.216069][T12398] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 312.224039][T12398] RBP: 00007f4fca857090 R08: 0000000000000000 R09: 0000000000000000 [ 312.232010][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.239991][T12398] R13: 0000000000000000 R14: 00007f4fcbd95f80 R15: 00007ffddede95a8 [ 312.248018][T12398] [ 312.345494][T12409] loop2: detected capacity change from 0 to 512 [ 312.356009][T12409] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 312.427024][T12416] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2597'. [ 312.469240][T12420] netlink: 532 bytes leftover after parsing attributes in process `syz.3.2599'. [ 312.490540][T12412] uprobe: syz.4.2587:12412 failed to unregister, leaking uprobe [ 312.510183][T12425] SET target dimension over the limit! [ 312.526127][T12427] SET target dimension over the limit! [ 312.542485][T12421] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2595: Unimplemented hash flags: 0x0001 [ 312.554050][T12421] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2595: Corrupt directory, running e2fsck is recommended [ 312.567951][T12433] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12433 comm=syz.3.2604 [ 312.568364][T12421] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.2595: Unimplemented hash flags: 0x0001 [ 312.592312][T12421] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2595: Corrupt directory, running e2fsck is recommended [ 312.596694][T12433] netlink: 532 bytes leftover after parsing attributes in process `syz.3.2604'. [ 312.627280][T12436] ================================================================== [ 312.635415][T12436] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 312.643140][T12436] [ 312.645469][T12436] write to 0xffff8881045ad510 of 8 bytes by task 12434 on cpu 0: [ 312.653189][T12436] mas_wr_store_entry+0x146b/0x2d00 [ 312.658388][T12436] mas_store_prealloc+0x6bf/0x960 [ 312.663411][T12436] commit_merge+0x441/0x740 [ 312.667949][T12436] vma_expand+0x211/0x360 [ 312.672289][T12436] vma_merge_new_range+0x2cf/0x3e0 [ 312.677406][T12436] mmap_region+0x887/0x16e0 [ 312.681910][T12436] do_mmap+0x718/0xb60 [ 312.685976][T12436] vm_mmap_pgoff+0x133/0x290 [ 312.690565][T12436] ksys_mmap_pgoff+0xd0/0x330 [ 312.695247][T12436] x64_sys_call+0x1884/0x2d60 [ 312.699946][T12436] do_syscall_64+0xc9/0x1c0 [ 312.704447][T12436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.710350][T12436] [ 312.712682][T12436] read to 0xffff8881045ad510 of 8 bytes by task 12436 on cpu 1: [ 312.720329][T12436] mtree_range_walk+0x1b4/0x460 [ 312.725179][T12436] mas_walk+0x16e/0x320 [ 312.729334][T12436] lock_vma_under_rcu+0x95/0x260 [ 312.734365][T12436] exc_page_fault+0x150/0x650 [ 312.739064][T12436] asm_exc_page_fault+0x26/0x30 [ 312.743932][T12436] [ 312.746246][T12436] value changed: 0x00007f4fca815fff -> 0x00007f4fca7f4fff [ 312.753346][T12436] [ 312.755679][T12436] Reported by Kernel Concurrency Sanitizer on: [ 312.761820][T12436] CPU: 1 UID: 0 PID: 12436 Comm: syz.3.2606 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 312.772592][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.782648][T12436] ==================================================================