last executing test programs: 2m17.695965155s ago: executing program 4 (id=21): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, 0x0, 0x2000c8c0) read$nci(r1, &(0x7f00000000c0)=""/31, 0x1f) 2m16.824510133s ago: executing program 4 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) 2m16.698587162s ago: executing program 4 (id=62): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m16.649315552s ago: executing program 4 (id=63): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 2m16.339316201s ago: executing program 4 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001"], 0xfdef) 2m16.02224777s ago: executing program 4 (id=82): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m15.98972609s ago: executing program 32 (id=82): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m16.140631348s ago: executing program 2 (id=2135): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 1m16.088834628s ago: executing program 2 (id=2136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x6acf, &(0x7f0000000940)={0x0, 0x215}, &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001c80)={0x8, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f0000000e00)=""/184, 0xb8}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/204, 0xcc}, {&(0x7f0000001040)=""/209, 0xd2}, {&(0x7f0000000540)=""/52, 0xfffffffffffffe14}, {&(0x7f0000000700)=""/25, 0x19}], &(0x7f0000000540)}, 0x20) 1m15.952125268s ago: executing program 2 (id=2141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usbip_server_init(0x3) writev(r1, &(0x7f0000002b00)=[{&(0x7f0000001a80)="ee3bee466f711573ffca025d369c61f4ee33040ad4e7efa0ed354d58c8082be0fb0a4b3f0214007a25f8e95604b6e017", 0x30}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000000"], 0x24}}, 0x0) 1m15.371647556s ago: executing program 2 (id=2175): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m15.340489406s ago: executing program 2 (id=2177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x550, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x596, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) 1m15.183016445s ago: executing program 2 (id=2182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 1m15.182535266s ago: executing program 33 (id=2182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 1m14.551157574s ago: executing program 5 (id=2199): setgid(0xee00) setresuid(0x0, 0xee00, 0xee00) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0xeb}], 0x1, 0x12000, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) 1m13.33346577s ago: executing program 5 (id=2209): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) 1m13.33318048s ago: executing program 5 (id=2212): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800000000003}, 0x1000, 0x5dd8, 0x3, 0x5, 0x40000000, 0x8, 0xfff8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioperm(0x0, 0x6, 0xd644) 1m13.1838314s ago: executing program 5 (id=2215): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m13.15580089s ago: executing program 5 (id=2220): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 1m13.017911569s ago: executing program 5 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f48) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 1m12.948364119s ago: executing program 34 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f48) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 51.466318478s ago: executing program 0 (id=2946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 51.444038257s ago: executing program 0 (id=2947): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="5c7a633c03f87b4c"], 0xffc9) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 51.402135978s ago: executing program 0 (id=2950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 51.232326067s ago: executing program 0 (id=2957): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d9e14ef01060000e9009600fdff0000000000842d6dc700000000000000000400", "d30002000000000080eeff000000901a0000000000000000000000003afa00", [0x0, 0x3ff]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 51.074238577s ago: executing program 0 (id=2964): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000006c0)="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", 0x29a}], 0x1}}], 0x1, 0x0) 50.715441026s ago: executing program 0 (id=2975): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28012, r0, 0xe25f5000) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000352000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) 50.659306606s ago: executing program 35 (id=2975): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28012, r0, 0xe25f5000) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000352000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) 46.710837384s ago: executing program 8 (id=3136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000005c0)={'filter\x00', 0x4}, 0x68) 46.688379884s ago: executing program 8 (id=3138): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090200000000000000000100000008000600ac1414aa08000b0077daa387"], 0x24}}, 0x0) 46.644788514s ago: executing program 8 (id=3139): r0 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 46.546709383s ago: executing program 8 (id=3142): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCbFCQuLQDYk3imLXUZwsTcghPXJHohIn+BO4cUDqiQM3bnDjUg5IBSJQg8Rh0IyniZvEdWiTeGt/PtJ45r1x/H3PznvP8xznBTC0rkTETkRciIgPI2KyyE+KLW62t+x+j3a3F/Z2txeSSNMP/pHk57O86PiZzEvFY45HxPe/E/Hj5Gjc1ubWyny9Xlsr0lPrjdWp1ubW9eVSkTM7NzM3/faNt2ZPra6vNX7z8NvL7/3gd7/9woM/7nz9p1mxKj+7lJ/rrMdpale9HJWOvNGIeO8sgvXJaPH7w4sna22fiojX8/Y/GSP5qwkADLI0nYx0sjMNAAy67Pq/EkmpWswFVKJUqlbbc3ivxkSp3mytX5tsbtxejHwO63KUSx8t12vTxVzh5SgnWXomPz5Izx5K34iIVyLi52MX83R1oVlf7OcbHwAYYi8dGv//PdYe/wGAATfe7wIAAOfO+A8Aw8f4DwDD5/8Y/307EAAGhOt/ABg+xn8AGD49x/+751MOAOBcfO/997Mt3Sv+//Xix5sb36x8fH2x1lqpNjYWqgvNtdXqUrO5VK9VF9K01+PVm83VmTf3k63NrVuN5sbt9VvLjfml2q1a+YzrAwD09spr9/+cRMTOOxfzLTrWcjBWw2ArPZE6ZqEeYGCN9LsAQN/4Pg8MrxNc45sGgAHX68q/658I3bP4K7yorn7W/D8Mq1K/CwD0zbPN/3/r1MsBnD/z/zC80jSx5j8ADBlz/MCzfP7/wyg+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVcm3pFTN1wLfyW5L1WrEpYi4HOXko+V6bToiXo6IP42Vx7L0TL8LDQA8p9LfkmL9r6uTb1QOn72Q/Gcs30fET375wS/uzK+vr81k+f/cz1+/V+TPXuhHBQCATjePZrXH6WLfcSH/aHd74fF2nkV8+G57cdEs7l6xtc+Mxmi+H49yREz8KynSbdn7lZFTiL9zNyI+c1D/Ox0RKvkcSHvl08Pxs9iXziD+wfOfRJqm6UH80hPxS3nZsn05fy4+fQplgWFz/912P5m1u4u721kTK9pfKa7k++Pb/3jeQz2/x/3f3pH+r7Tf/40ciZ/kbf7KfvrpJXn45u+/eyQznWyfuxvxudHj4if78ZMu/e8bJ6zjXz7/xde7nUt/FXE1jo/f1si72an1xupUa3Pr+nJjfqm2VLs9Ozs3Mzf99o23ZqfyOer27R+Oi/H3d6693C1+Vv+JLvHHe9T/Kyes/6//++GPvvSU+F/78vGv/6tPiZ+NiV89Yfz5iZvHLd+9H3+xS/17vf7XThj/wV+3Fk94VwDgHLQ2t1bm6/XaWo+D7L1mr/s4eDEPYifinIN+YzziE1F3B90O+t0zAWftoNH3uyQAAAAAAAAAAAAAAEA3rc2tlbE4268T9buOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7/BQAA//+TAtDE") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket(0x10, 0x803, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 46.318822863s ago: executing program 8 (id=3152): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r0, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) 44.716105528s ago: executing program 8 (id=3232): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) sendmsg$can_j1939(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 44.715832858s ago: executing program 36 (id=3232): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) sendmsg$can_j1939(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 1.446874304s ago: executing program 9 (id=5121): r0 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) 1.225966624s ago: executing program 7 (id=5132): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.179297283s ago: executing program 7 (id=5135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000340), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c00024000000000000078260c0002400005"], 0x140}}, 0x0) 1.130031753s ago: executing program 7 (id=5140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xe) recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/58, 0x3a}, 0x80}], 0x1, 0x102, 0x0) 1.065622563s ago: executing program 6 (id=5145): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x80000000) 1.041938713s ago: executing program 1 (id=5147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 995.987843ms ago: executing program 6 (id=5148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x40000) 982.906753ms ago: executing program 6 (id=5149): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1, 0x0, 0x0, 0x7, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7b}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x1000000}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x100, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 970.336623ms ago: executing program 1 (id=5150): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 953.328913ms ago: executing program 6 (id=5151): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000f40), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x67) 895.040693ms ago: executing program 6 (id=5153): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 894.772383ms ago: executing program 1 (id=5154): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f0000000540)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}], [{@subj_user={'subj_user', 0x3d, '@.%*'}}, {@subj_role}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'sched_switch\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}, 0x3, 0x45c, &(0x7f0000000f00)="$eJzs281vFOUfAPDvTF+AH/DrivjCi1pFY+NLSwGVgwc1mnjAxEQPemzaQpCFGloTIETBGDwZY+LdePRf8KQXYzyZeNW7ISGGC+BpzezM0N1ld2nLLovu55NM+zwzz8zzfHfm2X1mnt0AhtZk9ieJ2BYRv0fERJ5tLjCZ/7t+9fz8javn55Oo1d75K6mXu3b1/HxZtNxva5GZSiPSz5LY06be5bPnTsxVq4uni/zMyskPZ5bPnnv++Mm5Y4vHFk8dOHz40MHZl1488EJP4szadG33x0t7d735/ldvHfkiWzdext8SR49Mdtv4VK3W4+oGa3tDOhkdYENYl5GIyE7XWL3/T8RIrJ68iXjj04E2DuirWq1W29p584Ua8B+WRHNel4dhUX7QZ/e/5dI6CHilf8OPgbvyan4DlMV9vVjyLaORFmXGWu5ve2kyIt678Pc32RL9eQ4BANDkh2z881y78V8aDzaU+38xN1SJiPsiYkdE3B8ROyPigYh62Yci4uF11t86SXLr+Ce9vKHA1igb/71czG01j//K0V9URorc9nr8Y8nR49XF/cVrMhVjm7L8bJc6fnz9ty87bWsc/2VLVn85FizacXl0U/M+C3Mrc3cSc6MrFyN2j7aLP7k5E5BExK6I2L3BOo4/893eTttuH38XPZhnqn0b8XR+/i9ES/ylpPv85MzmqC7unymvilv98uultzvVf0fx90B2/v/X9vq/GX8laZyvXV5/HZf++LzjPc0ar/9K4z7Z9T+evFtPjxfrzsytrJyejRhPjuSNblx/YHXfMl+Wz+Kf2te+/++I1VdiT0RkF/EjEfFoRDxWtP3xiHgiIvZ1if/n1578YOPx91cW/8K6zv9qYjxa17RPjJz46fumSiu3xH+j+/k/VE9NFWvW8v63lnZt7GoGAACAf580IrZFkk7fTKfp9HT+ffmdEWl1aXnl2aNLH51ayH8jUImxtHzSNdHwPHS2uK3P8xcjIv9qQbn9YPHc+OuRLfX89PxSdWHQwcOQ29qh/2f+HBl064C+83stGF76Pwwv/R+Gl/4Pw6tN/98yiHYAd1+7z/9PBtAO4O5r6f+m/WCIuP+H4aX/w/DS/2EoLW+J2/9IvmuiPNIGd++WGD2TH7r3R74LiRi7J5qRJzb3/siR3gNxSfQtMcA3JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB76JwAA//+ELt19") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r1, &(0x7f0000001a40), 0x0}, 0x20) 880.872953ms ago: executing program 1 (id=5157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0xffe, &(0x7f0000000080)={0x0, 0x1311, 0x0, 0x1, 0x337}, &(0x7f0000ff0000), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000100)=""/68, 0x44}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 819.236392ms ago: executing program 1 (id=5159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(&(0x7f00000001c0)={0x20071026}, 0x0) 818.930073ms ago: executing program 1 (id=5160): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = io_uring_setup(0x6f94, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2}) pause() close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 709.816092ms ago: executing program 3 (id=5163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 709.299222ms ago: executing program 3 (id=5164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x0) 623.047402ms ago: executing program 3 (id=5165): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "21c2087d"}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "a562ff321beb3f036b9fd27aeff89c8e79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) 622.835142ms ago: executing program 3 (id=5166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xc6}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0) 618.394962ms ago: executing program 9 (id=5167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, r2) 600.236122ms ago: executing program 9 (id=5168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 578.087112ms ago: executing program 9 (id=5169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_usb_connect(0x6, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 565.528392ms ago: executing program 3 (id=5170): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 69.66795ms ago: executing program 6 (id=5171): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 69.532021ms ago: executing program 3 (id=5172): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x2a020400) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 69.42975ms ago: executing program 7 (id=5173): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) 39.40586ms ago: executing program 7 (id=5174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6e03ac64962092fe}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 39.19072ms ago: executing program 9 (id=5175): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0xfd}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 7.21244ms ago: executing program 7 (id=5176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 0s ago: executing program 9 (id=5177): sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): ted [ 114.863855][T10546] loop3: p150 start 6684676 is beyond EOD, truncated [ 114.870592][T10546] loop3: p151 start 6684676 is beyond EOD, truncated [ 114.877286][T10546] loop3: p152 start 6684676 is beyond EOD, truncated [ 114.884026][T10546] loop3: p153 start 6684676 is beyond EOD, truncated [ 114.890703][T10546] loop3: p154 start 6684676 is beyond EOD, truncated [ 114.897426][T10546] loop3: p155 start 6684676 is beyond EOD, truncated [ 114.904177][T10546] loop3: p156 start 6684676 is beyond EOD, truncated [ 114.910851][T10546] loop3: p157 start 6684676 is beyond EOD, truncated [ 114.917646][T10546] loop3: p158 start 6684676 is beyond EOD, truncated [ 114.924414][T10546] loop3: p159 start 6684676 is beyond EOD, truncated [ 114.931095][T10546] loop3: p160 start 6684676 is beyond EOD, truncated [ 114.937899][T10546] loop3: p161 start 6684676 is beyond EOD, truncated [ 114.944629][T10546] loop3: p162 start 6684676 is beyond EOD, truncated [ 114.951304][T10546] loop3: p163 start 6684676 is beyond EOD, truncated [ 114.958021][T10546] loop3: p164 start 6684676 is beyond EOD, truncated [ 114.964727][T10546] loop3: p165 start 6684676 is beyond EOD, truncated [ 114.971478][T10546] loop3: p166 start 6684676 is beyond EOD, truncated [ 114.978191][T10546] loop3: p167 start 6684676 is beyond EOD, truncated [ 114.984943][T10546] loop3: p168 start 6684676 is beyond EOD, truncated [ 114.991644][T10546] loop3: p169 start 6684676 is beyond EOD, truncated [ 114.998317][T10546] loop3: p170 start 6684676 is beyond EOD, truncated [ 115.005071][T10546] loop3: p171 start 6684676 is beyond EOD, truncated [ 115.011778][T10546] loop3: p172 start 6684676 is beyond EOD, truncated [ 115.018459][T10546] loop3: p173 start 6684676 is beyond EOD, truncated [ 115.025190][T10546] loop3: p174 start 6684676 is beyond EOD, truncated [ 115.031886][T10546] loop3: p175 start 6684676 is beyond EOD, truncated [ 115.038581][T10546] loop3: p176 start 6684676 is beyond EOD, truncated [ 115.045278][T10546] loop3: p177 start 6684676 is beyond EOD, truncated [ 115.051999][T10546] loop3: p178 start 6684676 is beyond EOD, truncated [ 115.058676][T10546] loop3: p179 start 6684676 is beyond EOD, truncated [ 115.065386][T10546] loop3: p180 start 6684676 is beyond EOD, truncated [ 115.072080][T10546] loop3: p181 start 6684676 is beyond EOD, truncated [ 115.078754][T10546] loop3: p182 start 6684676 is beyond EOD, truncated [ 115.085565][T10546] loop3: p183 start 6684676 is beyond EOD, truncated [ 115.092436][T10546] loop3: p184 start 6684676 is beyond EOD, truncated [ 115.099275][T10546] loop3: p185 start 6684676 is beyond EOD, truncated [ 115.105972][T10546] loop3: p186 start 6684676 is beyond EOD, truncated [ 115.112691][T10546] loop3: p187 start 6684676 is beyond EOD, truncated [ 115.119370][T10546] loop3: p188 start 6684676 is beyond EOD, truncated [ 115.126070][T10546] loop3: p189 start 6684676 is beyond EOD, truncated [ 115.132779][T10546] loop3: p190 start 6684676 is beyond EOD, truncated [ 115.139482][T10546] loop3: p191 start 6684676 is beyond EOD, truncated [ 115.146194][T10546] loop3: p192 start 6684676 is beyond EOD, truncated [ 115.152900][T10546] loop3: p193 start 6684676 is beyond EOD, truncated [ 115.159624][T10546] loop3: p194 start 6684676 is beyond EOD, truncated [ 115.166441][T10546] loop3: p195 start 6684676 is beyond EOD, truncated [ 115.173223][T10546] loop3: p196 start 6684676 is beyond EOD, truncated [ 115.179928][T10546] loop3: p197 start 6684676 is beyond EOD, truncated [ 115.186662][T10546] loop3: p198 start 6684676 is beyond EOD, truncated [ 115.193467][T10546] loop3: p199 start 6684676 is beyond EOD, truncated [ 115.200152][T10546] loop3: p200 start 6684676 is beyond EOD, truncated [ 115.206919][T10546] loop3: p201 start 6684676 is beyond EOD, truncated [ 115.213605][T10546] loop3: p202 start 6684676 is beyond EOD, truncated [ 115.220278][T10546] loop3: p203 start 6684676 is beyond EOD, truncated [ 115.226975][T10546] loop3: p204 start 6684676 is beyond EOD, truncated [ 115.233706][T10546] loop3: p205 start 6684676 is beyond EOD, truncated [ 115.240403][T10546] loop3: p206 start 6684676 is beyond EOD, truncated [ 115.247186][T10546] loop3: p207 start 6684676 is beyond EOD, truncated [ 115.253891][T10546] loop3: p208 start 6684676 is beyond EOD, truncated [ 115.260579][T10546] loop3: p209 start 6684676 is beyond EOD, truncated [ 115.267302][T10546] loop3: p210 start 6684676 is beyond EOD, truncated [ 115.274070][T10546] loop3: p211 start 6684676 is beyond EOD, truncated [ 115.280903][T10546] loop3: p212 start 6684676 is beyond EOD, truncated [ 115.287656][T10546] loop3: p213 start 6684676 is beyond EOD, truncated [ 115.294369][T10546] loop3: p214 start 6684676 is beyond EOD, truncated [ 115.301043][T10546] loop3: p215 start 6684676 is beyond EOD, truncated [ 115.307999][T10546] loop3: p216 start 6684676 is beyond EOD, truncated [ 115.314703][T10546] loop3: p217 start 6684676 is beyond EOD, truncated [ 115.321434][T10546] loop3: p218 start 6684676 is beyond EOD, truncated [ 115.328130][T10546] loop3: p219 start 6684676 is beyond EOD, truncated [ 115.334842][T10546] loop3: p220 start 6684676 is beyond EOD, truncated [ 115.341541][T10546] loop3: p221 start 6684676 is beyond EOD, truncated [ 115.348232][T10546] loop3: p222 start 6684676 is beyond EOD, truncated [ 115.354933][T10546] loop3: p223 start 6684676 is beyond EOD, truncated [ 115.361678][T10546] loop3: p224 start 6684676 is beyond EOD, truncated [ 115.368376][T10546] loop3: p225 start 6684676 is beyond EOD, truncated [ 115.375088][T10546] loop3: p226 start 6684676 is beyond EOD, truncated [ 115.381893][T10546] loop3: p227 start 6684676 is beyond EOD, truncated [ 115.388569][T10546] loop3: p228 start 6684676 is beyond EOD, truncated [ 115.395264][T10546] loop3: p229 start 6684676 is beyond EOD, truncated [ 115.401979][T10546] loop3: p230 start 6684676 is beyond EOD, truncated [ 115.408657][T10546] loop3: p231 start 6684676 is beyond EOD, truncated [ 115.415368][T10546] loop3: p232 start 6684676 is beyond EOD, truncated [ 115.422164][T10546] loop3: p233 start 6684676 is beyond EOD, truncated [ 115.428847][T10546] loop3: p234 start 6684676 is beyond EOD, truncated [ 115.435747][T10546] loop3: p235 start 6684676 is beyond EOD, truncated [ 115.442503][T10546] loop3: p236 start 6684676 is beyond EOD, truncated [ 115.449276][T10546] loop3: p237 start 6684676 is beyond EOD, truncated [ 115.456174][T10546] loop3: p238 start 6684676 is beyond EOD, truncated [ 115.462991][T10546] loop3: p239 start 6684676 is beyond EOD, truncated [ 115.469783][T10546] loop3: p240 start 6684676 is beyond EOD, truncated [ 115.476506][T10546] loop3: p241 start 6684676 is beyond EOD, truncated [ 115.483217][T10546] loop3: p242 start 6684676 is beyond EOD, truncated [ 115.489901][T10546] loop3: p243 start 6684676 is beyond EOD, truncated [ 115.496666][T10546] loop3: p244 start 6684676 is beyond EOD, truncated [ 115.503432][T10546] loop3: p245 start 6684676 is beyond EOD, truncated [ 115.510110][T10546] loop3: p246 start 6684676 is beyond EOD, truncated [ 115.516836][T10546] loop3: p247 start 6684676 is beyond EOD, truncated [ 115.523528][T10546] loop3: p248 start 6684676 is beyond EOD, truncated [ 115.530201][T10546] loop3: p249 start 6684676 is beyond EOD, truncated [ 115.536960][T10546] loop3: p250 start 6684676 is beyond EOD, truncated [ 115.543748][T10546] loop3: p251 start 6684676 is beyond EOD, truncated [ 115.550487][T10546] loop3: p252 start 6684676 is beyond EOD, truncated [ 115.557331][T10546] loop3: p253 start 6684676 is beyond EOD, truncated [ 115.564100][T10546] loop3: p254 start 6684676 is beyond EOD, truncated [ 115.570772][T10546] loop3: p255 start 6684676 is beyond EOD, truncated [ 115.694654][T10596] sd 0:0:1:0: device reset [ 115.762243][T10602] netlink: 'syz.1.2835': attribute type 1 has an invalid length. [ 115.947529][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 115.947548][ T29] audit: type=1400 audit(1737390019.734:2937): avc: denied { ioctl } for pid=10622 comm="syz.3.2846" path="socket:[27978]" dev="sockfs" ino=27978 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.015274][T10626] team0: Device ipvlan0 failed to register rx_handler [ 116.095710][T10628] __nla_validate_parse: 4 callbacks suppressed [ 116.095730][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2848'. [ 116.194742][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.228608][ T29] audit: type=1400 audit(1737390020.014:2938): avc: denied { validate_trans } for pid=10644 comm="syz.3.2856" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 116.279512][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2859'. [ 116.288734][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2859'. [ 116.357881][T10666] netem: change failed [ 116.427572][ T29] audit: type=1400 audit(1737390020.214:2939): avc: denied { mount } for pid=10670 comm="syz.3.2869" name="/" dev="configfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.450389][ T29] audit: type=1400 audit(1737390020.214:2940): avc: denied { search } for pid=10670 comm="syz.3.2869" name="/" dev="configfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.472677][ T29] audit: type=1400 audit(1737390020.214:2941): avc: denied { read } for pid=10670 comm="syz.3.2869" name="/" dev="configfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.494741][ T29] audit: type=1400 audit(1737390020.214:2942): avc: denied { open } for pid=10670 comm="syz.3.2869" path="/" dev="configfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.555673][ T29] audit: type=1326 audit(1737390020.344:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01455d29 code=0x7ffc0000 [ 116.585644][ T29] audit: type=1326 audit(1737390020.344:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01455d29 code=0x7ffc0000 [ 116.630362][ T29] audit: type=1326 audit(1737390020.344:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fac01455d29 code=0x7ffc0000 [ 116.654053][ T29] audit: type=1326 audit(1737390020.344:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01455d29 code=0x7ffc0000 [ 116.812572][T10708] ref_ctr_offset mismatch. inode: 0x1ed offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 116.945568][T10726] xt_CT: No such helper "syz0" [ 116.999568][T10731] loop3: detected capacity change from 0 to 2048 [ 117.058338][T10731] loop3: p1 < > p4 [ 117.068932][T10731] loop3: p4 size 8388608 extends beyond EOD, truncated [ 117.223733][T10763] loop3: detected capacity change from 0 to 512 [ 117.260529][T10763] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.2911: casefold flag without casefold feature [ 117.296032][T10763] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2911: couldn't read orphan inode 15 (err -117) [ 117.300271][T10771] loop0: detected capacity change from 0 to 2048 [ 117.316253][T10763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.343770][T10771] loop0: p1 < > p4 [ 117.348607][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.352024][T10771] loop0: p4 size 8388608 extends beyond EOD, truncated [ 117.582411][T10802] syz.3.2926: attempt to access beyond end of device [ 117.582411][T10802] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 117.689403][T10809] xt_CT: No such helper "syz0" [ 117.695321][T10807] loop0: detected capacity change from 0 to 512 [ 117.739904][T10807] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.2930: casefold flag without casefold feature [ 117.757807][T10821] ref_ctr_offset mismatch. inode: 0xc93 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 117.770788][T10807] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2930: couldn't read orphan inode 15 (err -117) [ 117.784837][T10807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.857039][ T9113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.358231][T10870] loop0: detected capacity change from 0 to 512 [ 118.366111][T10870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.379258][T10870] EXT4-fs (loop0): 1 truncate cleaned up [ 118.385873][T10870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.441538][T10870] loop0: detected capacity change from 512 to 64 [ 118.450435][T10870] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=15 [ 118.459822][T10870] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop0 ino=15 [ 118.469281][T10870] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -12) [ 118.493998][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.522114][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.537383][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.551032][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.564881][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.580548][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.595892][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.609809][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.624744][ T9113] EXT4-fs warning (device loop0): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 118.832283][ T9113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.076172][T10934] loop3: detected capacity change from 0 to 128 [ 119.083014][T10934] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 119.094818][T10934] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 119.102810][T10934] FAT-fs (loop3): Filesystem has been set read-only [ 119.114081][T10934] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 119.135257][ T3298] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 119.205105][T10949] netlink: 'syz.7.2989': attribute type 3 has an invalid length. [ 119.296661][T10963] futex_wake_op: syz.6.2997 tries to shift op by 35; fix this program [ 119.349958][T10925] chnl_net:caif_netlink_parms(): no params data found [ 119.441483][T10975] netlink: 8 bytes leftover after parsing attributes in process `+}'. [ 119.472023][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.479149][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.490159][T10925] bridge_slave_0: entered allmulticast mode [ 119.500469][T10925] bridge_slave_0: entered promiscuous mode [ 119.507342][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.514500][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.524176][T10925] bridge_slave_1: entered allmulticast mode [ 119.530730][T10925] bridge_slave_1: entered promiscuous mode [ 119.531047][T10979] loop3: detected capacity change from 0 to 512 [ 119.567378][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.604697][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.654877][T10925] team0: Port device team_slave_0 added [ 119.662888][T10925] team0: Port device team_slave_1 added [ 119.686867][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.693881][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.719879][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.737320][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.744338][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.770288][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.803165][T10925] hsr_slave_0: entered promiscuous mode [ 119.810417][T10925] hsr_slave_1: entered promiscuous mode [ 119.817385][T10925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.836738][T10925] Cannot create hsr debugfs directory [ 119.962880][T10925] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 119.985616][T10925] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 120.015091][T10925] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 120.037382][T10925] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 120.058680][T11036] netlink: 'syz.1.3027': attribute type 13 has an invalid length. [ 120.076561][T11040] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 120.102230][T11040] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.102318][T11039] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.114186][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.144070][T10925] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.169082][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.176217][ T6470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.189453][T11044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3031'. [ 120.204536][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.211668][ T6470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.331653][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3039'. [ 120.340613][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3039'. [ 120.354460][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.418171][T11078] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3045'. [ 120.480333][T11090] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 120.480527][T11086] IPVS: stopping master sync thread 11090 ... [ 120.545132][T11101] pim6reg: entered allmulticast mode [ 120.574539][T11101] pim6reg: left allmulticast mode [ 120.637345][T10925] veth0_vlan: entered promiscuous mode [ 120.651134][T10925] veth1_vlan: entered promiscuous mode [ 120.678648][T10925] veth0_macvtap: entered promiscuous mode [ 120.697621][T10925] veth1_macvtap: entered promiscuous mode [ 120.710800][T11123] syz.3.3062[11123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.710957][T11123] syz.3.3062[11123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.723256][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.735645][T11123] syz.3.3062[11123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.745249][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.745278][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.745293][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.745328][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.745341][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.745355][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.818083][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.852755][T10925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.873590][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.884164][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.894747][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.905568][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.915429][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.925931][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.935868][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.946369][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.960239][T10925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.973849][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 120.973866][ T29] audit: type=1400 audit(1737390024.764:3247): avc: denied { create } for pid=11135 comm="syz.6.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.001464][T10925] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.006501][ T29] audit: type=1400 audit(1737390024.794:3248): avc: denied { write } for pid=11135 comm="syz.6.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.010189][T10925] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.039169][T10925] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.047965][T10925] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.227739][T11153] openvswitch: netlink: Message has 12 unknown bytes. [ 121.263874][ T29] audit: type=1326 audit(1737390025.054:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 121.317910][ T29] audit: type=1326 audit(1737390025.084:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 121.341639][ T29] audit: type=1326 audit(1737390025.084:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 121.365275][ T29] audit: type=1326 audit(1737390025.084:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 121.388881][ T29] audit: type=1326 audit(1737390025.084:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 121.412522][ T29] audit: type=1326 audit(1737390025.084:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 121.436282][ T29] audit: type=1326 audit(1737390025.084:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 121.459911][ T29] audit: type=1326 audit(1737390025.084:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.3.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 121.611033][T11171] loop3: detected capacity change from 0 to 1024 [ 121.626219][T11171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.643463][T11171] EXT4-fs error (device loop3): ext4_check_all_de:656: inode #12: block 7: comm syz.3.3083: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 121.683108][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.394495][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 122.467751][T11246] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.534914][T11250] loop8: detected capacity change from 0 to 512 [ 122.543264][T11250] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.3116: casefold flag without casefold feature [ 122.557794][T11250] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3116: couldn't read orphan inode 15 (err -117) [ 122.570314][T11250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.627381][T10925] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.719768][T11284] tipc: Started in network mode [ 122.724855][T11284] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 122.733978][T11284] tipc: Enabling of bearer rejected, failed to enable media [ 122.745264][T11287] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 122.755139][T11282] IPVS: stopping master sync thread 11287 ... [ 122.864437][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.872011][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.879422][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.886902][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.894476][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.901904][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.909334][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.916833][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.924256][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.931715][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.939117][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.946556][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.953998][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.961506][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.968942][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.976419][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.983857][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 122.992130][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 123.033804][T11315] loop8: detected capacity change from 0 to 512 [ 123.040395][T11315] EXT4-fs: Ignoring removed i_version option [ 123.055814][T11323] SELinux: policydb version 0 does not match my version range 15-33 [ 123.068077][T11323] SELinux: failed to load policy [ 123.073826][T11315] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.088376][T11315] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.109581][T11315] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 123.152013][T11315] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #4: comm syz.8.3142: corrupted inode contents [ 123.165526][T11315] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #4: comm syz.8.3142: mark_inode_dirty error [ 123.179212][T11315] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #4: comm syz.8.3142: corrupted inode contents [ 123.194889][T11315] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #4: comm syz.8.3142: mark_inode_dirty error [ 123.207228][T11315] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3142: Failed to acquire dquot type 1 [ 123.220463][T11315] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 123.246562][T10925] EXT4-fs error (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 123.272216][T10925] EXT4-fs error (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 123.299444][T10925] EXT4-fs error (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 123.313421][T10925] EXT4-fs error (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 123.329038][T10925] EXT4-fs error (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 123.330584][T11345] 9pnet: p9_errstr2errno: server reported unknown error [ 123.450291][T11360] netlink: 'syz.1.3161': attribute type 21 has an invalid length. [ 123.484026][T11366] netem: change failed [ 123.529691][T11374] ip6gre1: entered allmulticast mode [ 123.610025][T11388] xt_hashlimit: max too large, truncated to 1048576 [ 123.617312][T11388] No such timeout policy "syz1" [ 123.705756][T11401] syz.6.3180[11401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.705893][T11401] syz.6.3180[11401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.717817][T11401] syz.6.3180[11401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.854324][T11423] syz.7.3191[11423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.865977][T11423] syz.7.3191[11423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.894108][T11423] syz.7.3191[11423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.129031][T11453] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.177947][T11459] dvmrp0: entered allmulticast mode [ 124.186130][T11453] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.204967][T11459] dvmrp0: left allmulticast mode [ 124.264864][T11453] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.321193][T11471] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 124.329582][T11471] tipc: Enabled bearer , priority 10 [ 124.354092][T11453] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.400716][T11453] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.417356][T11453] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.430126][T11453] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.443855][T11453] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.512837][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3219'. [ 124.529980][T11487] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3219'. [ 124.558664][T11492] loop3: detected capacity change from 0 to 2048 [ 124.576825][T11492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.605135][T11492] EXT4-fs error (device loop3): ext4_ext_precache:631: inode #2: comm syz.3.3221: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 124.624740][T11492] EXT4-fs (loop3): Remounting filesystem read-only [ 124.631443][T11499] ip6gre1: entered allmulticast mode [ 124.649856][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.729351][T11510] bond1: entered promiscuous mode [ 124.734573][T11510] bond1: entered allmulticast mode [ 124.740439][T11510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.750722][T11510] bond1 (unregistering): Released all slaves [ 124.936862][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'. [ 124.945841][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'. [ 124.978908][T11537] netlink: 300 bytes leftover after parsing attributes in process `+}[@'. [ 125.047972][T11547] loop3: detected capacity change from 0 to 2048 [ 125.084373][T11554] xt_hashlimit: max too large, truncated to 1048576 [ 125.092094][T11554] No such timeout policy "syz1" [ 125.094516][T11547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.117358][T11547] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 125.154164][T11547] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 125.166735][T11547] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.166735][T11547] [ 125.176614][T11547] EXT4-fs (loop3): Total free blocks count 0 [ 125.182691][T11547] EXT4-fs (loop3): Free/Dirty block details [ 125.188638][T11547] EXT4-fs (loop3): free_blocks=4096 [ 125.193970][T11547] EXT4-fs (loop3): dirty_blocks=16 [ 125.199362][T11547] EXT4-fs (loop3): Block reservation details [ 125.205379][T11547] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 125.243170][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.289796][T11524] chnl_net:caif_netlink_parms(): no params data found [ 125.342460][T11524] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.349565][T11524] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.356880][T11524] bridge_slave_0: entered allmulticast mode [ 125.363577][T11524] bridge_slave_0: entered promiscuous mode [ 125.370481][T11524] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.378044][T11524] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.386596][T11524] bridge_slave_1: entered allmulticast mode [ 125.393341][T11524] bridge_slave_1: entered promiscuous mode [ 125.440469][T11524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.451245][T11524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.475642][T11524] team0: Port device team_slave_0 added [ 125.482467][T11524] team0: Port device team_slave_1 added [ 125.509795][T11524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.517102][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.543393][T11524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.556719][T11524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.563750][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.589759][T11524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.627653][T11578] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3252'. [ 125.641334][T11524] hsr_slave_0: entered promiscuous mode [ 125.651697][T11524] hsr_slave_1: entered promiscuous mode [ 125.661557][T11524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.669142][T11524] Cannot create hsr debugfs directory [ 125.830650][T11524] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 125.843511][T11524] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 125.856411][T11524] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 125.870819][T11524] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 125.918097][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3266'. [ 125.931786][T11609] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 125.989461][T11613] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3267'. [ 126.026164][T11524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.038305][T11615] xt_hashlimit: max too large, truncated to 1048576 [ 126.064580][T11615] No such timeout policy "syz1" [ 126.075339][T11524] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.093780][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.100955][ T6470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.117324][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.124530][ T6470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.164003][ T6477] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.215939][ T6477] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.239373][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 126.239392][ T29] audit: type=1326 audit(1737390030.024:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.269399][ T29] audit: type=1326 audit(1737390030.024:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.299765][T11524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.310239][T11524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.337709][ T29] audit: type=1326 audit(1737390030.034:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.361407][ T29] audit: type=1326 audit(1737390030.034:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.384966][ T29] audit: type=1326 audit(1737390030.034:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.408584][ T29] audit: type=1326 audit(1737390030.034:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.432289][ T29] audit: type=1326 audit(1737390030.034:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.455866][ T29] audit: type=1326 audit(1737390030.034:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.479453][ T29] audit: type=1326 audit(1737390030.034:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.503079][ T29] audit: type=1326 audit(1737390030.034:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.6.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 126.544033][ T6477] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.566891][T11655] xt_hashlimit: max too large, truncated to 1048576 [ 126.580937][T11655] No such timeout policy "syz1" [ 126.618417][T11524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.636631][ T6477] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.692595][T11678] loop3: detected capacity change from 0 to 256 [ 126.723947][ T6477] bridge_slave_1: left allmulticast mode [ 126.729646][ T6477] bridge_slave_1: left promiscuous mode [ 126.735500][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.748735][ T6477] bridge_slave_0: left allmulticast mode [ 126.754556][ T6477] bridge_slave_0: left promiscuous mode [ 126.760309][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.852641][T11695] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3300'. [ 126.861924][T11695] unsupported nla_type 65024 [ 126.866861][ T6477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.879034][ T6477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.889553][ T6477] bond0 (unregistering): Released all slaves [ 126.901136][T11699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.006310][ T6477] hsr_slave_0: left promiscuous mode [ 127.033481][ T6477] hsr_slave_1: left promiscuous mode [ 127.039389][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.046984][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.073605][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.081209][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.093456][ T6477] veth1_macvtap: left promiscuous mode [ 127.098994][ T6477] veth0_macvtap: left promiscuous mode [ 127.104612][ T6477] veth1_vlan: left promiscuous mode [ 127.109850][ T6477] veth0_vlan: left promiscuous mode [ 127.186654][ T6477] team0 (unregistering): Port device team_slave_1 removed [ 127.197670][ T6477] team0 (unregistering): Port device team_slave_0 removed [ 127.243714][T11524] veth0_vlan: entered promiscuous mode [ 127.252891][T11524] veth1_vlan: entered promiscuous mode [ 127.269777][T11524] veth0_macvtap: entered promiscuous mode [ 127.277245][T11524] veth1_macvtap: entered promiscuous mode [ 127.289064][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.299561][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.309464][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.319944][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.329862][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.340403][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.350360][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.360970][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.372008][T11524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.384666][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.395162][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.405086][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.415567][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.425444][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.435893][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.445774][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.456277][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.466958][T11524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.476754][T11524] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.485591][T11524] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.494323][T11524] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.503062][T11524] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.580777][T11716] loop9: detected capacity change from 0 to 128 [ 127.612951][T11716] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.649771][ T6430] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.696046][T11721] bond1: entered promiscuous mode [ 127.701213][T11721] bond1: entered allmulticast mode [ 127.720547][T11721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.783300][T11721] bond1 (unregistering): Released all slaves [ 127.999448][T11755] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 128.093722][T11760] ref_ctr_offset mismatch. inode: 0x54c offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 128.295937][T11782] loop9: detected capacity change from 0 to 8192 [ 128.369320][T11788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.429209][T11798] loop9: detected capacity change from 0 to 128 [ 128.448124][T11798] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.470674][ T6496] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.480210][T11798] FAT-fs (loop9): error, invalid access to FAT (entry 0x0affffff) [ 128.488162][T11798] FAT-fs (loop9): Filesystem has been set read-only [ 128.495963][T11798] FAT-fs (loop9): error, invalid access to FAT (entry 0x0affffff) [ 128.510922][T11806] Process accounting resumed [ 128.685587][T11836] bond2: entered promiscuous mode [ 128.690766][T11836] bond2: entered allmulticast mode [ 128.707128][T11836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.717819][T11836] bond2 (unregistering): Released all slaves [ 129.518887][T11902] netlink: zone id is out of range [ 129.524086][T11902] netlink: zone id is out of range [ 129.560828][T11902] netlink: set zone limit has 4 unknown bytes [ 129.705274][T11917] 9pnet_fd: Insufficient options for proto=fd [ 130.133756][T11946] loop9: detected capacity change from 0 to 256 [ 130.296696][T11960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3418'. [ 130.712230][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.736658][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3435'. [ 130.771524][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.381145][T12019] serio: Serial port ttyS3 [ 131.516284][T12033] loop3: detected capacity change from 0 to 2048 [ 131.551088][T12033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.599557][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 131.599575][ T29] audit: type=1400 audit(1737390035.384:3537): avc: denied { append } for pid=12030 comm="syz.3.3449" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.646048][T12033] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 131.667975][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.681040][T12053] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3458'. [ 131.691803][T12053] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3458'. [ 131.747323][T12060] Cannot find add_set index 0 as target [ 131.775205][T12067] syz.1.3462[12067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.775284][T12067] syz.1.3462[12067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.791745][T12066] loop3: detected capacity change from 0 to 1024 [ 131.794884][T12068] serio: Serial port ttyS3 [ 131.803350][T12067] syz.1.3462[12067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.813351][T12066] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 131.835388][T12066] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.854544][T12066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e119, mo2=0002] [ 131.888356][T12066] System zones: 0-1, 4-36, 102-102 [ 131.894279][T12066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.921817][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.924293][T12074] loop9: detected capacity change from 0 to 512 [ 131.962616][T12074] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.997213][T12074] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 132.085739][T12074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 132.145363][T12074] System zones: 1-12 [ 132.157042][T12074] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.3465: corrupted in-inode xattr: e_value size too large [ 132.186264][T12074] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.3465: couldn't read orphan inode 15 (err -117) [ 132.210971][T12074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.250483][T12074] EXT4-fs (loop9): shut down requested (0) [ 132.276249][T11524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.322489][ T29] audit: type=1400 audit(1737390036.114:3538): avc: denied { create } for pid=12097 comm="syz.9.3477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 132.344310][ T29] audit: type=1400 audit(1737390036.114:3539): avc: denied { create } for pid=12097 comm="syz.9.3477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 132.544602][ T29] audit: type=1326 audit(1737390036.334:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 132.568225][ T29] audit: type=1326 audit(1737390036.334:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 132.634748][ T29] audit: type=1326 audit(1737390036.384:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 132.658947][ T29] audit: type=1326 audit(1737390036.384:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 132.682576][ T29] audit: type=1326 audit(1737390036.384:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 132.818333][ T29] audit: type=1400 audit(1737390036.604:3545): avc: denied { connect } for pid=12122 comm="syz.7.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.838551][ T29] audit: type=1400 audit(1737390036.604:3546): avc: denied { read } for pid=12122 comm="syz.7.3487" path="socket:[32378]" dev="sockfs" ino=32378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.892275][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3489'. [ 132.951744][T12135] x_tables: duplicate entry at hook 1 [ 133.040193][T12148] syz.7.3497[12148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.040305][T12148] syz.7.3497[12148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.054767][T12148] syz.7.3497[12148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.154057][T12156] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 133.320229][T12168] loop3: detected capacity change from 0 to 256 [ 133.352587][T12170] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3504'. [ 133.361733][T12170] netlink: 'syz.7.3504': attribute type 1 has an invalid length. [ 133.568352][T12189] xt_hashlimit: max too large, truncated to 1048576 [ 133.595285][T12189] No such timeout policy "syz1" [ 133.656087][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3521'. [ 133.685386][T12199] bridge_slave_1: left allmulticast mode [ 133.691163][T12199] bridge_slave_1: left promiscuous mode [ 133.696873][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.714345][T12199] bridge_slave_0: left allmulticast mode [ 133.720037][T12199] bridge_slave_0: left promiscuous mode [ 133.725814][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.115784][T12246] xt_hashlimit: max too large, truncated to 1048576 [ 134.128324][T12248] netlink: 'syz.3.3539': attribute type 21 has an invalid length. [ 134.136355][T12248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3539'. [ 134.145746][T12248] netlink: 'syz.3.3539': attribute type 1 has an invalid length. [ 134.229239][T12260] syz.6.3548[12260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.229329][T12260] syz.6.3548[12260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.245833][T12260] syz.6.3548[12260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.305127][T12268] syz.6.3550[12268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.355866][T12274] xt_hashlimit: max too large, truncated to 1048576 [ 134.381653][T12274] No such timeout policy "syz1" [ 134.820161][T12308] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.850028][T12315] netlink: 'syz.6.3570': attribute type 1 has an invalid length. [ 134.884996][T12308] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.906714][ T6496] tipc: Subscription rejected, illegal request [ 134.935667][T12308] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.032559][T12308] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.107750][T12308] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.119339][T12308] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.130954][T12308] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.142542][T12308] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.476699][T12364] 9pnet: p9_errstr2errno: server reported unknown error @hQI [ 135.574258][T12370] sd 0:0:1:0: device reset [ 135.633706][T12373] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 135.773570][T12385] loop3: detected capacity change from 0 to 512 [ 135.840157][T12385] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.853344][T12392] xt_hashlimit: max too large, truncated to 1048576 [ 135.874801][T12385] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 135.944519][T12385] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 135.992698][T12385] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3601: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 136.019977][T12398] loop9: detected capacity change from 0 to 2048 [ 136.045463][T12385] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3601: couldn't read orphan inode 13 (err -117) [ 136.075070][T12385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.091486][T12398] loop9: p2 p3 < > p4 < p5 > [ 136.096209][T12398] loop9: partition table partially beyond EOD, truncated [ 136.111620][T12398] loop9: p2 start 16908804 is beyond EOD, truncated [ 136.118304][T12398] loop9: p3 start 4284289 is beyond EOD, truncated [ 136.144773][T12398] loop9: p5 start 16908804 is beyond EOD, truncated [ 136.152063][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.240977][T12416] xt_CT: No such helper "pptp" [ 136.278190][T12426] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3619'. [ 136.297158][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'. [ 136.310469][T12430] bridge_slave_1: left allmulticast mode [ 136.316200][T12430] bridge_slave_1: left promiscuous mode [ 136.322008][T12430] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.337593][T12430] bridge_slave_0: left allmulticast mode [ 136.343375][T12430] bridge_slave_0: left promiscuous mode [ 136.349118][T12430] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.619655][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 136.619674][ T29] audit: type=1326 audit(1737390040.404:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.6.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 136.691642][ T29] audit: type=1326 audit(1737390040.404:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.6.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 136.715448][ T29] audit: type=1326 audit(1737390040.404:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.6.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 136.739006][ T29] audit: type=1326 audit(1737390040.404:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.6.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 136.762868][ T29] audit: type=1326 audit(1737390040.404:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.6.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 136.786440][ T29] audit: type=1326 audit(1737390040.404:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.6.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 136.810388][ T29] audit: type=1326 audit(1737390040.404:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.6.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 136.834013][ T29] audit: type=1326 audit(1737390040.414:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.6.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 136.878492][ T29] audit: type=1326 audit(1737390040.504:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 136.902139][ T29] audit: type=1326 audit(1737390040.504:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 137.003434][T12501] 9pnet: p9_errstr2errno: server reported unknown error @hQI [ 137.235245][T12531] ebtables: ebtables: counters copy to user failed while replacing table [ 137.280188][T12542] loop3: detected capacity change from 0 to 512 [ 137.329682][T12542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.365387][T12542] ext4 filesystem being mounted at /771/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.432308][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.496388][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 137.505422][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 137.517698][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 137.561744][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 137.570710][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 137.624902][T12573] bond1: entered promiscuous mode [ 137.630008][T12573] bond1: entered allmulticast mode [ 137.639145][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 137.649792][T12585] 9pnet_fd: Insufficient options for proto=fd [ 137.653172][T12573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.690859][T12573] bond1 (unregistering): Released all slaves [ 137.708448][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 137.717495][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 138.385849][T12621] 9pnet_fd: Insufficient options for proto=fd [ 138.468582][T12635] bond1: entered promiscuous mode [ 138.473767][T12635] bond1: entered allmulticast mode [ 138.480938][T12635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.497846][T12635] bond1 (unregistering): Released all slaves [ 138.616118][T12655] loop6: detected capacity change from 0 to 7 [ 138.623313][T12655] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.631709][T12655] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.639646][T12655] loop6: unable to read partition table [ 138.646980][T12655] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 138.646980][T12655] ) failed (rc=-5) [ 138.800303][T12680] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.021494][T12701] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 139.098891][T12712] hub 5-0:1.0: USB hub found [ 139.110247][T12712] hub 5-0:1.0: 8 ports detected [ 139.213067][T12729] loop3: detected capacity change from 0 to 256 [ 139.251082][T12729] FAT-fs (loop3): Directory bread(block 64) failed [ 139.264366][T12729] FAT-fs (loop3): Directory bread(block 65) failed [ 139.272768][T12729] FAT-fs (loop3): Directory bread(block 66) failed [ 139.300466][T12729] FAT-fs (loop3): Directory bread(block 67) failed [ 139.308944][T12729] FAT-fs (loop3): Directory bread(block 68) failed [ 139.348045][T12729] FAT-fs (loop3): Directory bread(block 69) failed [ 139.375523][T12729] FAT-fs (loop3): Directory bread(block 70) failed [ 139.400959][T12750] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12750 comm=syz.1.3765 [ 139.416569][T12729] FAT-fs (loop3): Directory bread(block 71) failed [ 139.423530][T12729] FAT-fs (loop3): Directory bread(block 72) failed [ 139.430609][T12729] FAT-fs (loop3): Directory bread(block 73) failed [ 139.549542][T12729] syz.3.3755: attempt to access beyond end of device [ 139.549542][T12729] loop3: rw=2049, sector=1224, nr_sectors = 608 limit=256 [ 139.579338][T12729] syz.3.3755: attempt to access beyond end of device [ 139.579338][T12729] loop3: rw=2049, sector=1864, nr_sectors = 1440 limit=256 [ 139.641754][T12770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12770 comm=syz.6.3775 [ 139.654452][T12770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12770 comm=syz.6.3775 [ 139.922074][T12789] loop9: detected capacity change from 0 to 512 [ 139.970689][T12789] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.982325][T12789] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 139.992552][T12789] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3783: Corrupt directory, running e2fsck is recommended [ 140.051415][T12789] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 140.070472][T12789] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.3783: corrupted in-inode xattr: invalid ea_ino [ 140.087505][T12789] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.3783: couldn't read orphan inode 15 (err -117) [ 140.121244][T12789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.175705][T11524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.235606][T12826] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 140.284730][T12832] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 140.697462][T12877] Cannot find add_set index 0 as target [ 140.827444][T12898] loop9: detected capacity change from 0 to 512 [ 140.845103][T12898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.858424][T12898] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.886094][T11524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.899024][T12909] bridge0: entered allmulticast mode [ 140.911077][T12909] pim6reg: entered allmulticast mode [ 140.935549][T12913] bond2: entered promiscuous mode [ 140.940655][T12913] bond2: entered allmulticast mode [ 140.947769][T12913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.957138][T12913] bond2 (unregistering): Released all slaves [ 141.067741][T12932] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.075793][T12932] vhci_hcd: invalid port number 23 [ 141.157543][T12947] ref_ctr_offset mismatch. inode: 0x605 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 141.492383][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.778162][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 141.778179][ T29] audit: type=1400 audit(1737390045.564:3831): avc: denied { bind } for pid=13018 comm="syz.7.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.831600][ T29] audit: type=1400 audit(1737390045.564:3832): avc: denied { listen } for pid=13018 comm="syz.7.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.874328][ T29] audit: type=1326 audit(1737390045.664:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.6.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 141.898084][ T29] audit: type=1326 audit(1737390045.664:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.6.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 141.925657][ T29] audit: type=1326 audit(1737390045.714:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.6.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 141.949309][ T29] audit: type=1326 audit(1737390045.714:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.6.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 141.973188][ T29] audit: type=1326 audit(1737390045.714:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.6.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 142.010653][T13034] __nla_validate_parse: 12 callbacks suppressed [ 142.010683][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3894'. [ 142.189885][T13058] netem: incorrect gi model size [ 142.194993][T13058] netem: change failed [ 142.221255][ T29] audit: type=1326 audit(1737390046.004:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01455d29 code=0x7ffc0000 [ 142.248798][ T29] audit: type=1326 audit(1737390046.034:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01455d29 code=0x7ffc0000 [ 142.272499][ T29] audit: type=1326 audit(1737390046.034:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac01455d29 code=0x7ffc0000 [ 142.329308][T13068] tmpfs: Unknown parameter 'mpo' [ 142.442010][T13086] bpf_get_probe_write_proto: 5 callbacks suppressed [ 142.442027][T13086] syz.7.3918[13086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.448866][T13086] syz.7.3918[13086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.467409][T13086] syz.7.3918[13086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.745731][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3933'. [ 142.766429][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3933'. [ 142.775353][T13117] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3933'. [ 142.786520][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3932'. [ 142.795660][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3932'. [ 142.807883][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3932'. [ 142.836432][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3932'. [ 142.845488][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3932'. [ 142.863768][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3932'. [ 143.037899][T13148] syz.7.3945[13148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.038057][T13148] syz.7.3945[13148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.071466][T13148] syz.7.3945[13148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.215050][T13178] netlink: 'syz.9.3961': attribute type 7 has an invalid length. [ 143.391547][T13208] pimreg: entered allmulticast mode [ 143.408407][T13208] pimreg: left allmulticast mode [ 144.174549][T13285] netlink: 'syz.9.4007': attribute type 3 has an invalid length. [ 144.188874][T13287] netem: change failed [ 144.212624][T13289] loop9: detected capacity change from 0 to 512 [ 144.225594][T13289] EXT4-fs (loop9): orphan cleanup on readonly fs [ 144.240252][T13289] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 144.264752][T13289] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 144.271820][T13289] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #13: comm syz.9.4009: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 144.291562][T13289] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.4009: couldn't read orphan inode 13 (err -117) [ 144.314911][T13289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.345939][T11524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.413550][T13309] netlink: 'syz.1.4020': attribute type 32 has an invalid length. [ 144.879459][T13369] syz.9.4046[13369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.879529][T13369] syz.9.4046[13369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.911467][T13369] syz.9.4046[13369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.994883][T13381] 9pnet_fd: Insufficient options for proto=fd [ 145.335922][T13430] xt_hashlimit: max too large, truncated to 1048576 [ 145.356538][T13434] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 145.455571][T13443] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 145.464261][T13443] SELinux: failed to load policy [ 145.562266][T13461] team0: No ports can be present during mode change [ 145.656820][T13482] loop3: detected capacity change from 0 to 512 [ 145.678195][T13485] Invalid ELF header magic: != ELF [ 145.684859][T13486] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.692474][T13486] vhci_hcd: invalid port number 23 [ 145.699211][T13482] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.4096: iget: bogus i_mode (0) [ 145.715908][T13482] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.4096: couldn't read orphan inode 17 (err -117) [ 145.737600][T13482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.756046][T13490] pimreg: entered allmulticast mode [ 145.766502][T13490] pimreg: left allmulticast mode [ 145.794422][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.052147][T13529] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13529 comm=syz.3.4117 [ 146.079164][T13531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13531 comm=syz.9.4118 [ 146.091939][T13531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13531 comm=syz.9.4118 [ 146.318425][T13568] IPv6: Can't replace route, no match found [ 146.355102][T13575] 1X: renamed from 60X [ 146.363356][T13575] 1X: entered allmulticast mode [ 146.368605][T13575] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 146.436814][T13580] loop9: detected capacity change from 0 to 764 [ 146.446926][T13571] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 146.451764][T13583] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96 [ 146.597762][T13596] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 146.818589][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 146.818607][ T29] audit: type=1326 audit(1737390050.604:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 146.862891][ T29] audit: type=1326 audit(1737390050.644:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 146.886546][ T29] audit: type=1326 audit(1737390050.644:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 146.910212][ T29] audit: type=1326 audit(1737390050.644:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 146.933786][ T29] audit: type=1326 audit(1737390050.644:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 146.957295][ T29] audit: type=1326 audit(1737390050.644:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 146.980893][ T29] audit: type=1326 audit(1737390050.644:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 147.004475][ T29] audit: type=1326 audit(1737390050.644:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 147.028059][ T29] audit: type=1326 audit(1737390050.644:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 147.051794][ T29] audit: type=1326 audit(1737390050.644:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13627 comm="syz.7.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 147.113907][T13633] __nla_validate_parse: 35 callbacks suppressed [ 147.113925][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4165'. [ 147.242887][T13643] Invalid ELF header magic: != ELF [ 147.334661][ T6477] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.394780][ T6477] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.424044][T13662] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4180'. [ 147.436424][ T6477] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.465367][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4181'. [ 147.485718][ T6477] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.547549][T13677] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.558528][ T6477] bridge_slave_1: left allmulticast mode [ 147.564258][ T6477] bridge_slave_1: left promiscuous mode [ 147.570016][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.589146][ T6477] bridge_slave_0: left allmulticast mode [ 147.594908][ T6477] bridge_slave_0: left promiscuous mode [ 147.600856][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.693767][ T6477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.704770][ T6477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.714595][ T6477] bond0 (unregistering): Released all slaves [ 147.726242][T13687] pim6reg: entered allmulticast mode [ 147.820310][ T6477] hsr_slave_0: left promiscuous mode [ 147.826997][ T6477] hsr_slave_1: left promiscuous mode [ 147.834583][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.842081][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.849774][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.857385][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.870152][ T6477] veth1_macvtap: left promiscuous mode [ 147.875813][ T6477] veth0_macvtap: left promiscuous mode [ 147.881417][ T6477] veth1_vlan: left promiscuous mode [ 147.886674][ T6477] veth0_vlan: left promiscuous mode [ 147.957721][ T6477] team0 (unregistering): Port device team_slave_1 removed [ 147.967996][ T6477] team0 (unregistering): Port device team_slave_0 removed [ 148.017122][T13661] chnl_net:caif_netlink_parms(): no params data found [ 148.052968][T13661] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.060140][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.067371][T13661] bridge_slave_0: entered allmulticast mode [ 148.073955][T13661] bridge_slave_0: entered promiscuous mode [ 148.080751][T13661] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.087937][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.095613][T13661] bridge_slave_1: entered allmulticast mode [ 148.102208][T13661] bridge_slave_1: entered promiscuous mode [ 148.119630][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.130649][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.150550][T13661] team0: Port device team_slave_0 added [ 148.157153][T13661] team0: Port device team_slave_1 added [ 148.173936][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.180923][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.206906][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.220251][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.227375][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.253576][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.291639][T13661] hsr_slave_0: entered promiscuous mode [ 148.297762][T13661] hsr_slave_1: entered promiscuous mode [ 148.303682][T13661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.311238][T13661] Cannot create hsr debugfs directory [ 148.580023][T13661] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 148.610706][T13661] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 148.643001][T13661] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 148.664546][T13661] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 148.716099][T13661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.736430][T13661] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.746429][ T3402] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.753558][ T3402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.792662][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.799786][ T6469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.819022][T13661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.829562][T13661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.925076][T13772] tmpfs: Unknown parameter 'mpo' [ 148.976887][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.130264][T13661] veth0_vlan: entered promiscuous mode [ 149.138892][T13661] veth1_vlan: entered promiscuous mode [ 149.154640][T13661] veth0_macvtap: entered promiscuous mode [ 149.164330][T13661] veth1_macvtap: entered promiscuous mode [ 149.176917][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.187755][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.197648][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.208211][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.218113][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.228710][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.238600][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.249122][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.260495][T13661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.274004][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.284546][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.294854][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.305390][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.315334][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.325798][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.335652][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.346153][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.357440][T13661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.367300][T13661] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.376616][T13661] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.385596][T13661] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.394356][T13661] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.440065][T13808] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 149.525959][T13820] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 149.711213][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4245'. [ 149.720310][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4245'. [ 149.733205][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4245'. [ 149.752548][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4245'. [ 149.761762][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4245'. [ 149.770849][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4245'. [ 149.796215][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4245'. [ 149.928964][T13856] loop3: detected capacity change from 0 to 512 [ 149.966707][T13856] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4248: bg 0: block 248: padding at end of block bitmap is not set [ 149.983129][T13856] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4248: Failed to acquire dquot type 1 [ 149.995869][T13856] EXT4-fs (loop3): 1 truncate cleaned up [ 150.003375][T13856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.019448][T13856] ext4 filesystem being mounted at /842/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.039359][T13866] netlink: 'syz.6.4252': attribute type 32 has an invalid length. [ 150.082122][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.104804][T13868] netlink: 'syz.6.4254': attribute type 3 has an invalid length. [ 150.254652][T13887] netlink: 'syz.6.4262': attribute type 4 has an invalid length. [ 150.312612][T13887] netlink: 'syz.6.4262': attribute type 4 has an invalid length. [ 150.453513][T13904] ref_ctr_offset mismatch. inode: 0x1128 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 150.495545][T13906] netlink: 'syz.1.4270': attribute type 3 has an invalid length. [ 150.509776][T13908] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 150.570583][T13915] loop3: detected capacity change from 0 to 1024 [ 150.578547][T13915] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.594616][T13915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.610011][T13915] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4277: bg 0: block 32: padding at end of block bitmap is not set [ 150.636844][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.706086][T13929] loop9: detected capacity change from 0 to 128 [ 150.715665][T13929] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.728402][T13929] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.781807][T13661] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.990802][T13942] loop9: detected capacity change from 0 to 1024 [ 151.003106][T13942] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.227401][T13952] netlink: 'syz.7.4287': attribute type 4 has an invalid length. [ 151.264548][T13952] netlink: 'syz.7.4287': attribute type 4 has an invalid length. [ 151.722538][T13977] loop3: detected capacity change from 0 to 512 [ 151.756839][T13977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 151.807918][T13977] ext4 filesystem being mounted at /854/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.889239][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 151.938097][T13661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.984992][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 151.985010][ T29] audit: type=1326 audit(1737390055.774:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 152.025706][T13998] syz.9.4308[13998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.025776][T13998] syz.9.4308[13998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.037570][ T29] audit: type=1326 audit(1737390055.774:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 152.061170][T13998] syz.9.4308[13998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.072569][ T29] audit: type=1326 audit(1737390055.774:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 152.072608][ T29] audit: type=1326 audit(1737390055.774:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 152.132832][ T29] audit: type=1326 audit(1737390055.824:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 152.160303][T14000] loop3: detected capacity change from 0 to 128 [ 152.167571][T14000] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 152.189375][T14000] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 152.228960][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.263195][ T29] audit: type=1326 audit(1737390056.044:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14012 comm="syz.3.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 152.286933][ T29] audit: type=1326 audit(1737390056.044:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14012 comm="syz.3.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 152.310560][ T29] audit: type=1326 audit(1737390056.054:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14012 comm="syz.3.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 152.334277][ T29] audit: type=1326 audit(1737390056.054:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14012 comm="syz.3.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 152.357816][ T29] audit: type=1326 audit(1737390056.054:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14012 comm="syz.3.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a0605d29 code=0x7ffc0000 [ 152.512903][T14035] syz.7.4325[14035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.513172][T14035] syz.7.4325[14035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.524885][T14035] syz.7.4325[14035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.536814][T14032] bond0: (slave bond_slave_0): Releasing backup interface [ 152.561839][T14032] bond0: (slave bond_slave_1): Releasing backup interface [ 152.571038][T14032] team0: Failed to send options change via netlink (err -105) [ 152.583421][T14032] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 152.593268][T14032] team0: Port device team_slave_0 removed [ 152.600545][T14032] team0: Failed to send options change via netlink (err -105) [ 152.609560][T14032] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 152.619067][T14032] team0: Port device team_slave_1 removed [ 152.625604][T14032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.633264][T14032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.879782][T14074] loop5: detected capacity change from 0 to 7 [ 152.889634][T14077] loop3: detected capacity change from 0 to 164 [ 152.897942][T14074] Buffer I/O error on dev loop5, logical block 0, async page read [ 152.908906][T14077] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.919153][T14077] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.935255][T14074] Buffer I/O error on dev loop5, logical block 0, async page read [ 152.943284][T14074] loop5: unable to read partition table [ 152.957822][T14074] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 152.957822][T14074] ) failed (rc=-5) [ 153.020438][T14093] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.040106][T14090] __nla_validate_parse: 15 callbacks suppressed [ 153.040122][T14090] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4350'. [ 153.098194][T14103] 9pnet: p9_errstr2errno: server reported unknown error @΂(QNd [ 153.158607][T14110] syz.1.4360[14110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.158680][T14110] syz.1.4360[14110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.170687][T14110] syz.1.4360[14110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.243413][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4366'. [ 153.312197][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4366'. [ 153.466873][T14161] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 153.492471][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4387'. [ 153.511721][T14167] syz.9.4388[14167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.514105][T14165] vlan2: entered promiscuous mode [ 153.530878][T14165] hsr0: entered promiscuous mode [ 153.537732][T14165] hsr0: left promiscuous mode [ 153.753667][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4405'. [ 153.784196][T14204] loop9: detected capacity change from 0 to 164 [ 153.809000][T14204] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.819732][T14208] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4408'. [ 153.827074][T14204] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.833291][T14208] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4408'. [ 153.888823][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4409'. [ 153.939316][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4409'. [ 154.032762][T14236] netlink: 'syz.9.4421': attribute type 21 has an invalid length. [ 154.061403][T14236] netlink: 'syz.9.4421': attribute type 1 has an invalid length. [ 154.107307][T14245] ALSA: seq fatal error: cannot create timer (-16) [ 154.180722][T14260] loop3: detected capacity change from 0 to 1024 [ 154.202589][T14260] EXT4-fs: Ignoring removed nobh option [ 154.208221][T14260] EXT4-fs: Ignoring removed bh option [ 154.248710][T14260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.294685][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.312119][T14279] bridge_slave_0: left allmulticast mode [ 154.317883][T14279] bridge_slave_0: left promiscuous mode [ 154.323626][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.380216][T14279] bridge_slave_1: left allmulticast mode [ 154.386036][T14279] bridge_slave_1: left promiscuous mode [ 154.391834][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.410505][T14279] bond0: (slave bond_slave_0): Releasing backup interface [ 154.429590][T14279] bond0: (slave bond_slave_1): Releasing backup interface [ 154.450443][T14279] team0: Failed to send options change via netlink (err -105) [ 154.484871][T14279] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 154.503244][T14279] team0: Port device team_slave_0 removed [ 154.531618][T14279] team0: Failed to send options change via netlink (err -105) [ 154.539340][T14279] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 154.550938][T14279] team0: Port device team_slave_1 removed [ 154.558202][T14279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.565761][T14279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.577270][T14279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.585127][T14279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.669534][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4448'. [ 154.795132][T14315] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 154.914059][T14331] bond0: (slave bond_slave_0): Releasing backup interface [ 154.932709][T14331] bond0: (slave bond_slave_1): Releasing backup interface [ 154.944513][T14331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.952148][T14331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.960752][T14331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.968330][T14331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.228814][T14363] SELinux: security_context_str_to_sid () failed with errno=-22 [ 155.246914][T14367] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 155.259842][T14365] bond0: (slave bond_slave_0): Releasing backup interface [ 155.290444][T14365] bond0: (slave bond_slave_1): Releasing backup interface [ 155.322724][T14365] team0: Failed to send options change via netlink (err -105) [ 155.330578][T14365] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 155.365808][T14365] team0: Port device team_slave_0 removed [ 155.403036][T14365] team0: Failed to send options change via netlink (err -105) [ 155.420910][T14365] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 155.430734][T14365] team0: Port device team_slave_1 removed [ 155.441025][T14365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.448530][T14365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.468372][T14365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.475919][T14365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.512226][T14390] netem: change failed [ 155.527084][T14394] netlink: 'syz.3.4494': attribute type 1 has an invalid length. [ 155.734979][T14428] netlink: 'syz.6.4510': attribute type 21 has an invalid length. [ 155.744889][T14428] netlink: 'syz.6.4510': attribute type 1 has an invalid length. [ 155.800865][T14431] loop3: detected capacity change from 0 to 1024 [ 155.839943][T14431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.907672][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.088959][T14469] loop9: detected capacity change from 0 to 1764 [ 156.203285][T14488] 9pnet_fd: Insufficient options for proto=fd [ 156.230919][T14489] bridge_slave_0: left allmulticast mode [ 156.236725][T14489] bridge_slave_0: left promiscuous mode [ 156.243960][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.257198][T14489] bridge_slave_1: left allmulticast mode [ 156.263088][T14489] bridge_slave_1: left promiscuous mode [ 156.268733][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.282335][T14489] bond0: (slave bond_slave_0): Releasing backup interface [ 156.299040][T14489] bond0: (slave bond_slave_1): Releasing backup interface [ 156.317830][T14489] team0: Failed to send options change via netlink (err -105) [ 156.331185][T14489] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 156.347002][T14489] team0: Port device team_slave_0 removed [ 156.358775][T14502] loop3: detected capacity change from 0 to 1024 [ 156.367361][T14502] EXT4-fs: Ignoring removed orlov option [ 156.373420][T14502] EXT4-fs: Ignoring removed orlov option [ 156.381068][T14489] team0: Failed to send options change via netlink (err -105) [ 156.389196][T14489] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 156.399321][T14489] team0: Port device team_slave_1 removed [ 156.406261][T14489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.413999][T14489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.415516][T14502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.434854][T14489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.438403][T14502] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.4544: corrupted in-inode xattr: bad magic number in in-inode xattr [ 156.442369][T14489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.459952][T14502] EXT4-fs (loop3): Remounting filesystem read-only [ 156.476180][T14502] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 156.485174][T14502] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 156.506309][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.808291][T14552] netlink: 'syz.1.4567': attribute type 1 has an invalid length. [ 156.994897][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 156.994927][ T29] audit: type=1326 audit(1737390060.784:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz.7.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c6759cce7 code=0x7ffc0000 [ 157.031664][ T29] audit: type=1326 audit(1737390060.814:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz.7.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c67541f29 code=0x7ffc0000 [ 157.055613][ T29] audit: type=1326 audit(1737390060.814:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz.7.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c6759cce7 code=0x7ffc0000 [ 157.079139][ T29] audit: type=1326 audit(1737390060.824:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz.7.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c67541f29 code=0x7ffc0000 [ 157.102609][ T29] audit: type=1326 audit(1737390060.824:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz.7.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 157.149454][T14590] netlink: 'syz.3.4583': attribute type 21 has an invalid length. [ 157.159702][T14590] netlink: 'syz.3.4583': attribute type 1 has an invalid length. [ 157.189494][T14594] Cannot find set identified by id 0 to match [ 157.262237][ T29] audit: type=1326 audit(1737390061.054:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 157.285811][ T29] audit: type=1326 audit(1737390061.054:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 157.357028][T14614] ebt_among: dst integrity fail: 10e [ 157.404877][ T29] audit: type=1326 audit(1737390061.104:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 157.428561][ T29] audit: type=1326 audit(1737390061.104:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 157.452307][ T29] audit: type=1326 audit(1737390061.104:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.6.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc849045d29 code=0x7ffc0000 [ 157.496884][T14628] loop3: detected capacity change from 0 to 512 [ 157.593304][T14628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 157.606133][T14628] ext4 filesystem being mounted at /907/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.682229][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 157.919602][T14667] loop3: detected capacity change from 0 to 764 [ 158.087568][T14686] netlink: 'syz.9.4625': attribute type 1 has an invalid length. [ 158.181722][T14696] bpf_get_probe_write_proto: 8 callbacks suppressed [ 158.181740][T14696] syz.3.4630[14696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.197085][T14696] syz.3.4630[14696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.231034][T14696] syz.3.4630[14696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.265998][T14707] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.567883][T14761] __nla_validate_parse: 13 callbacks suppressed [ 158.567958][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4659'. [ 158.664752][T14777] loop9: detected capacity change from 0 to 512 [ 158.704345][T14777] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.717242][T14777] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.752987][T13661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.967544][T14802] syz.9.4676[14802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.967653][T14802] syz.9.4676[14802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.979815][T14802] syz.9.4676[14802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.374316][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4688'. [ 159.430147][T14833] loop9: detected capacity change from 0 to 256 [ 159.439982][T14833] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 159.450279][T14833] FAT-fs (loop9): Filesystem has been set read-only [ 159.458477][T14833] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 159.564242][T14850] syz.6.4696[14850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.564343][T14850] syz.6.4696[14850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.576327][T14850] syz.6.4696[14850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.607565][T14851] netlink: 'syz.3.4698': attribute type 4 has an invalid length. [ 159.628665][T14853] 9pnet_fd: p9_fd_create_tcp (14853): problem connecting socket to 127.0.0.1 [ 159.673994][T14863] syz.9.4704[14863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.802950][T14885] batman_adv: batadv0: Adding interface: gretap1 [ 159.820837][T14885] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.846437][T14885] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 159.865717][T14887] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 159.874148][T14887] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 159.882502][T14887] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 159.890903][T14887] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 159.899554][T14887] geneve2: entered promiscuous mode [ 159.904865][T14887] geneve2: entered allmulticast mode [ 160.114780][T14927] xt_hashlimit: max too large, truncated to 1048576 [ 160.169923][T14939] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 160.433683][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4759'. [ 160.984133][T15041] loop3: detected capacity change from 0 to 512 [ 161.003654][T15041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.016323][T15041] ext4 filesystem being mounted at /940/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.053115][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.290951][T15076] openvswitch: netlink: Message has 12 unknown bytes. [ 161.613375][T15126] ref_ctr_offset mismatch. inode: 0xbbc offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 161.789885][T15150] 9pnet: p9_errstr2errno: server reported unknown error 1 g;-~ [ 161.929243][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4846'. [ 161.967727][T15168] loop9: detected capacity change from 0 to 164 [ 161.980902][T15168] Unable to read rock-ridge attributes [ 162.000960][T15168] Unable to read rock-ridge attributes [ 162.014315][T15175] 9pnet_fd: p9_fd_create_tcp (15175): problem connecting socket to 127.0.0.1 [ 162.023772][T15168] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 162.399654][T15195] loop3: detected capacity change from 0 to 256 [ 162.439380][T15195] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.449639][T15195] FAT-fs (loop3): Filesystem has been set read-only [ 162.460957][T15195] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.571935][T15212] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 162.590030][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 162.590048][ T29] audit: type=1326 audit(1737390066.374:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15144 comm="syz.1.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac01455d29 code=0x7fc00000 [ 162.631113][T15214] batadv1: entered promiscuous mode [ 162.637114][T15214] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.668002][ T29] audit: type=1400 audit(1737390066.454:4891): avc: denied { ioctl } for pid=15220 comm="syz.7.4872" path="socket:[41421]" dev="sockfs" ino=41421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.838160][ T29] audit: type=1326 audit(1737390066.624:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.9.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee92525d29 code=0x7ffc0000 [ 162.863528][ T29] audit: type=1326 audit(1737390066.624:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.9.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee92525d29 code=0x7ffc0000 [ 162.887399][ T29] audit: type=1326 audit(1737390066.654:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.9.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee92525d29 code=0x7ffc0000 [ 162.911001][ T29] audit: type=1326 audit(1737390066.654:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.9.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee92525d29 code=0x7ffc0000 [ 162.934659][ T29] audit: type=1326 audit(1737390066.654:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.9.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee92525d29 code=0x7ffc0000 [ 162.960939][ T29] audit: type=1326 audit(1737390066.654:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.9.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee92525d29 code=0x7ffc0000 [ 162.984646][ T29] audit: type=1326 audit(1737390066.654:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.9.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee92525d29 code=0x7ffc0000 [ 163.008409][ T29] audit: type=1326 audit(1737390066.654:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15240 comm="syz.9.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee92525d29 code=0x7ffc0000 [ 163.255292][T15264] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.645277][T15287] bpf_get_probe_write_proto: 2 callbacks suppressed [ 163.645337][T15287] syz.1.4898[15287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.652202][T15287] syz.1.4898[15287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.663996][T15287] syz.1.4898[15287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.032913][T15321] loop9: detected capacity change from 0 to 8192 [ 164.273387][T15354] syz.9.4928[15354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.274178][T15354] syz.9.4928[15354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.323720][T15354] syz.9.4928[15354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.508591][T15390] syz.6.4946[15390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.520319][T15390] syz.6.4946[15390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.532092][T15390] syz.6.4946[15390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.726879][T15404] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 164.777211][T15404] SELinux: failed to load policy [ 165.143813][T15452] xt_hashlimit: max too large, truncated to 1048576 [ 165.183132][T15452] Cannot find set identified by id 0 to match [ 165.207434][T15462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4981'. [ 165.511687][T15506] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4998'. [ 165.521413][T15506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.528678][T15506] IPv6: NLM_F_CREATE should be set when creating new route [ 165.535983][T15506] IPv6: NLM_F_CREATE should be set when creating new route [ 165.564354][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5000'. [ 166.062901][T15534] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5012'. [ 166.381051][T15558] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 166.415321][T15560] netlink: 304 bytes leftover after parsing attributes in process `syz.9.5025'. [ 166.438523][T15566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5027'. [ 166.523369][T15578] program syz.3.5032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.564726][T15586] netlink: 57467 bytes leftover after parsing attributes in process `syz.1.5035'. [ 166.789858][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5057'. [ 166.798922][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5057'. [ 166.893529][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5047'. [ 166.927624][T15627] loop9: detected capacity change from 0 to 512 [ 166.934702][T15627] EXT4-fs: Ignoring removed orlov option [ 166.948491][T15627] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.5055: casefold flag without casefold feature [ 166.961415][T15627] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.5055: couldn't read orphan inode 15 (err -117) [ 166.979352][T15627] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.075225][T13661] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.097805][T15649] ipvlan2: entered promiscuous mode [ 167.105689][T15649] bridge0: port 1(ipvlan2) entered blocking state [ 167.112342][T15649] bridge0: port 1(ipvlan2) entered disabled state [ 167.119999][T15649] ipvlan2: entered allmulticast mode [ 167.127494][T15649] ipvlan2: left allmulticast mode [ 167.167409][T15657] 9pnet_fd: Insufficient options for proto=fd [ 167.662739][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 167.662754][ T29] audit: type=1326 audit(1737390071.454:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.694258][ T29] audit: type=1326 audit(1737390071.454:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.718000][ T29] audit: type=1326 audit(1737390071.454:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.741569][ T29] audit: type=1326 audit(1737390071.454:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.765240][ T29] audit: type=1326 audit(1737390071.454:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.789080][ T29] audit: type=1326 audit(1737390071.454:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.812868][ T29] audit: type=1326 audit(1737390071.454:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.836627][ T29] audit: type=1326 audit(1737390071.454:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.860146][ T29] audit: type=1326 audit(1737390071.484:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.883751][ T29] audit: type=1326 audit(1737390071.484:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz.7.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c675a5d29 code=0x7ffc0000 [ 167.937651][T15746] syz.7.5113[15746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.527740][T15817] loop3: detected capacity change from 0 to 512 [ 168.546380][T15817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.564685][T15817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.580289][T15817] ext4 filesystem being mounted at /992/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.617978][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.713292][T15843] loop3: detected capacity change from 0 to 512 [ 168.720342][T15843] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.733640][T15843] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 168.750282][T15843] EXT4-fs (loop3): 1 truncate cleaned up [ 168.756492][T15843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.784889][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.997597][T15871] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 169.006618][T15871] SELinux: failed to load policy [ 169.514688][T15875] loop3: detected capacity change from 0 to 512 [ 169.534607][T15875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.547627][T15875] ext4 filesystem being mounted at /1004/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.575091][T15887] ================================================================== [ 169.575189][T15875] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.5172: corrupted inode contents [ 169.583200][T15887] BUG: KCSAN: data-race in hrtimer_reprogram / print_cpu [ 169.583248][T15887] [ 169.583255][T15887] write to 0xffff888237d1ffa0 of 8 bytes by task 15847 on cpu 1: [ 169.612166][T15887] hrtimer_reprogram+0x1a2/0x220 [ 169.617133][T15887] hrtimer_start_range_ns+0x512/0x580 [ 169.620229][T15875] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #19: comm syz.3.5172: mark_inode_dirty error [ 169.622519][T15887] do_nanosleep+0x86/0x300 [ 169.622546][T15887] hrtimer_nanosleep+0xc4/0x1c0 [ 169.622583][T15887] common_nsleep+0x68/0x90 [ 169.643489][T15875] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.5172: corrupted inode contents [ 169.647577][T15887] __se_sys_clock_nanosleep+0x20a/0x240 [ 169.647613][T15887] __x64_sys_clock_nanosleep+0x55/0x70 [ 169.647640][T15887] x64_sys_call+0x25b8/0x2dc0 [ 169.647660][T15887] do_syscall_64+0xc9/0x1c0 [ 169.647679][T15887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.659861][T15875] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.5172: mark_inode_dirty error [ 169.665028][T15887] [ 169.665038][T15887] read to 0xffff888237d1ffa0 of 8 bytes by task 15887 on cpu 0: [ 169.665057][T15887] print_cpu+0x2fb/0x670 [ 169.665091][T15887] timer_list_show+0x115/0x180 [ 169.665124][T15887] seq_read_iter+0x2d1/0x930 [ 169.684193][T15875] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.5172: mark inode dirty (error -117) [ 169.685635][T15887] proc_reg_read_iter+0x118/0x190 [ 169.685676][T15887] copy_splice_read+0x3a0/0x5d0 [ 169.701743][T15875] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 169.707546][T15887] splice_direct_to_actor+0x269/0x670 [ 169.757973][T15887] do_splice_direct+0xd7/0x150 [ 169.762748][T15887] do_sendfile+0x398/0x660 [ 169.767178][T15887] __x64_sys_sendfile64+0x110/0x150 [ 169.772399][T15887] x64_sys_call+0xfbd/0x2dc0 [ 169.776997][T15887] do_syscall_64+0xc9/0x1c0 [ 169.781512][T15887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.787455][T15887] [ 169.789783][T15887] value changed: 0x000000275d22b004 -> 0x000000275d0a8912 [ 169.796909][T15887] [ 169.799226][T15887] Reported by Kernel Concurrency Sanitizer on: [ 169.805399][T15887] CPU: 0 UID: 0 PID: 15887 Comm: syz.9.5177 Not tainted 6.13.0-syzkaller #0 [ 169.814082][T15887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 169.824155][T15887] ================================================================== [ 169.835632][T15875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.