last executing test programs: 1m35.676598635s ago: executing program 3 (id=93): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x60, 0x0, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) 1m35.620633235s ago: executing program 3 (id=95): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="9b", 0x1}], 0x1}}], 0x2, 0x4000005) close(r1) 1m35.525389946s ago: executing program 3 (id=99): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 1m34.65929703s ago: executing program 3 (id=121): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000340)={0x0}) 1m34.63406963s ago: executing program 4 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000006000000020000000010", @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_free\x00', r1, 0x0, 0xe6}, 0x18) syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4f9, &(0x7f00000003c0)="$eJzs3c9vG1kdAPDvOHHiZLOb7LIHQMCWZaGgqk7i7karPUA5IYQqIXoEqQ2JG0Wx4yh2ShN6SP8HJCpxgiN/AOeeuHNBcONSDkj8iEBNJQ5GHk9SN7Wb0CR2FH8+0mjmzXPn+16dec/+OvELYGhdiYjdiBiLiLsRMZ2dT7Itbra31uOe7T1c2t97uJREs3n7n0la/2zv5uG1kmz/VnbNQkT86HsRP01ejVvf3llbrFTKm+3ixGyjujFb3965vlpdXCmvlNdLpYX5hblPb3xSOrO+flAdy46+/PQPu9/6eatZU9mZVt/OLFCHdtfzh3FaRiPiB+cRbABGsv6MDbohvJFcRLwXER+m9/90jKTPJgBwmTWb09Gc7iwDAJddLs2BJblilguYilyuWGzn8N6PyVylVm9cu1fbWl9u58pmIp+7t1opz2W5wpnIJ63yfHr8olw6Ur4REe9GxC/GJ9JycalWWR7kCx8AGGJvHZn//zPenv8BgEuuMOgGAAB9Z/4HgOFj/geA4WP+B4DhY/4HgOFj/geA4WP+B4Ch8sNbt1pbcz/7/uvl+9tba7X715fL9bVidWupuFTb3Ciu1Gor6Xf2VI+7XqVW25j/OLYezHx7o96YrW/v3KnWttYbd9Lv9b5TzvelVwDA67z7wZM/JxGx+9lEukXHWg7marjccoNuADAwI4NuADAwVvuC4XWK9/jSA3BJdFmi9yWFiJg4erLZbDbPr0nAObv6Bfl/GFYd+X+/BQxDRv4fhpf8PwyvZjM56Zr/cdIHAgAXmxw/0OPz//ey/W+zDwd+snz0EY/Ps1UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsR2s/1vM1gKfilyuWIx4OyJmIp/cW62U5yLinYj403h+vFWeH3CbAYDTyv0tydb/ujr90dTR2rHk+Xi6j4if/er2Lx8sNhqbf2yd/9fh+cbj7HxpEO0HAI5zME+n+4438s/2Hi4dbP1sz9+/GxGF0TT+/t5Y7B/GH43RdF+IfERM/jvJym1JR+7iNHYfRcTnu/U/iak0B9Je+fRo/Fbst/saP/dS/Fxa1963/i8+dwZtgWHzpDX+3Ox2/+XiSrrvfv8X0hHq9NrjX3qppf10DHwR/2D8G+kx/l05aYyPf//99tHEq3WPIr44GpHPYu93jD8H8ZMe8T86Yfy/fOkrH/aqa/464mpE7HeJ3xlrtlHdmK1v71xfrS6ulFfK66XSwvzC3Kc3PinNpjnq2d6zwT8+u/ZOr7pW/yd7xC8c0/+vn7D/v/nv3R9/9TXxv/m1bvFz8f5r4rfmxG+cMP7i5O8Kvepa8Zd79P+45//aCeM//evOK8uGAwCDU9/eWVusVMqb/Tw4eCHR16AOLsFB66fmAjSj68F3+hVrLP6vf9VsvlGsXiPGWWTdgIvg8KaPiOeDbgwAAAAAAAAAAAAAANBVP/5iadB9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PL6XwAAAP//JpTNSQ==") 1m34.5847655s ago: executing program 3 (id=123): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000540), 0x4) 1m34.53474957s ago: executing program 4 (id=124): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x200, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) 1m34.493746801s ago: executing program 4 (id=125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000c, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1m34.457756881s ago: executing program 4 (id=126): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303031302c6572726f72733d72656d6f756e742d726f2c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d312c00ec24d52cd656eadd39d406526adc61a7b193d91057769822e39d283530efe28116f0305d770fd70a3670", @ANYRES8], 0x0, 0x191, &(0x7f0000000580)="$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") chroot(&(0x7f00000000c0)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000002c0)='./file0/../file0/../file0/../file0/file0\x00') 1m34.408456341s ago: executing program 4 (id=129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xf}, 0x18) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x8000003b) close_range(r1, 0xffffffffffffffff, 0x0) 1m34.322763541s ago: executing program 3 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xa0, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x59, 0x7, 0x1, 0x0, "b84217c51f89c0e565ea285ace171e60542dba97c8cfa89fca6c4844081f8b8771063203846cb54dadabd448dd991467d3657d7ec56d71ee17d979c85f5f38629185cb23ca9d098efe4e14d0250d1b8aaa0d1d1815"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xa0}}, 0x0) 1m34.322648472s ago: executing program 32 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xa0, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x59, 0x7, 0x1, 0x0, "b84217c51f89c0e565ea285ace171e60542dba97c8cfa89fca6c4844081f8b8771063203846cb54dadabd448dd991467d3657d7ec56d71ee17d979c85f5f38629185cb23ca9d098efe4e14d0250d1b8aaa0d1d1815"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xa0}}, 0x0) 1m34.156785012s ago: executing program 4 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 1m34.156679553s ago: executing program 33 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 1m22.869289447s ago: executing program 6 (id=514): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlinkprop={0x40, 0x10, 0xf8b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="2cf9f54fbe58"}]}}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m22.698300608s ago: executing program 6 (id=524): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000800)=[{0x20, 0x0, 0x0, 0x0, @time={0x10b, 0x3}, {}, {0x0, 0x3}, @connect={{0x0, 0x9}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x2}}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0xfc}, {}, @raw8={"b134b141793d8609365bda4d"}}], 0x54) 1m22.638968029s ago: executing program 6 (id=527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m22.586102169s ago: executing program 6 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000340)={0x80041, 0x120, 0x8}, 0x18) 1m22.526695579s ago: executing program 6 (id=533): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x7, 0x0, 0x0, 0x1, 0x5, 0x10}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x3a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1m22.27762648s ago: executing program 6 (id=547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001c00)=[{&(0x7f0000001c80)="a1f03e90", 0x4}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m22.231572551s ago: executing program 34 (id=547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001c00)=[{&(0x7f0000001c80)="a1f03e90", 0x4}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m12.408850058s ago: executing program 5 (id=892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x2, 0x8}}, {0x52f, 0x7, {0x3}}, {0x8, 0x7, {0x0, 0xf}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x6, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x2, {0x1, 0x7ffd}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x1, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x0, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x4, {0x0, 0x7}}, {0x2, 0x0, {0x0, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0x9, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x6}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0x8, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x400, 0x101, {0x2, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0xa80}}, {0x8, 0x20, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000005}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m12.408590948s ago: executing program 5 (id=893): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 1m12.352678038s ago: executing program 5 (id=895): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fcntl$notify(r0, 0x402, 0x27) 1m12.277967309s ago: executing program 5 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) 1m12.179590349s ago: executing program 5 (id=906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, 0x0) 1m11.90361339s ago: executing program 5 (id=924): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="ef", 0x1}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="7a8e", 0x2}], 0x1}}], 0x2, 0x40080) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, 0x8) 1m11.839483311s ago: executing program 35 (id=924): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="ef", 0x1}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="7a8e", 0x2}], 0x1}}], 0x2, 0x40080) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, 0x8) 1m7.178736143s ago: executing program 7 (id=1072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000f5020002"], 0x11d0) 1m5.84517646s ago: executing program 7 (id=1140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) 1m5.653687931s ago: executing program 7 (id=1145): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x0, 0x400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m4.993805044s ago: executing program 7 (id=1171): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) 1m4.938394454s ago: executing program 7 (id=1177): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1m4.652817606s ago: executing program 7 (id=1186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r1) 1m4.652696036s ago: executing program 36 (id=1186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r1) 1.649790762s ago: executing program 8 (id=3277): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.386418094s ago: executing program 8 (id=3284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x50}}, 0x4000044) 1.331907794s ago: executing program 8 (id=3289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x24004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 1.299669464s ago: executing program 8 (id=3292): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x8002, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semop(r0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) semop(r0, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) 673.471727ms ago: executing program 2 (id=3316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 633.292557ms ago: executing program 2 (id=3320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x65}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 607.685297ms ago: executing program 2 (id=3322): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x5113, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 583.334037ms ago: executing program 2 (id=3324): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000980)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 526.299688ms ago: executing program 2 (id=3326): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usbip_server_init(0x5) 455.234208ms ago: executing program 8 (id=3340): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xf}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 433.816148ms ago: executing program 8 (id=3333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 289.136369ms ago: executing program 9 (id=3343): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) 237.919239ms ago: executing program 0 (id=3346): fsmount(0xffffffffffffffff, 0x1, 0x36) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x20001}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 237.501959ms ago: executing program 1 (id=3347): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = memfd_secret(0x80000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x100000000) 176.837529ms ago: executing program 1 (id=3348): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) 176.67594ms ago: executing program 1 (id=3349): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 155.38356ms ago: executing program 1 (id=3351): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 154.88686ms ago: executing program 0 (id=3361): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 152.37789ms ago: executing program 9 (id=3352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x925}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {0xffffffff}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {0x0, 0xbe0087781dab7411}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 127.38124ms ago: executing program 1 (id=3353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x50}}, 0x4000044) 126.97343ms ago: executing program 0 (id=3354): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) 117.21103ms ago: executing program 9 (id=3355): r0 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r3, 0x0) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 92.6392ms ago: executing program 1 (id=3356): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 86.86104ms ago: executing program 0 (id=3357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x65}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 64.0563ms ago: executing program 9 (id=3358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) 63.85609ms ago: executing program 9 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000300)='hpfs\x00', 0x1) 63.55313ms ago: executing program 0 (id=3360): r0 = syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x5, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x497c, 0x0, 0x0, 0x0, 0x0) 19.28185ms ago: executing program 0 (id=3362): fsmount(0xffffffffffffffff, 0x1, 0x36) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x20001}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 19.10834ms ago: executing program 9 (id=3363): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 0s ago: executing program 2 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) kernel console output (not intermixed with test programs): ered allmulticast mode [ 93.156242][ T9380] hsr_slave_0: entered allmulticast mode [ 93.162267][ T3023] loop8: p1 < > p4 [ 93.166260][ T9380] veth1_to_hsr: entered allmulticast mode [ 93.167306][ T3023] loop8: p4 size 8388608 extends beyond EOD, truncated [ 93.179738][ T9380] hsr_slave_1: entered allmulticast mode [ 93.187368][ T9380] hsr0: entered allmulticast mode [ 93.194286][ T9380] veth1_virt_wifi: entered allmulticast mode [ 93.201367][ T9380] veth0_virt_wifi: entered allmulticast mode [ 93.208701][ T9380] veth1_vlan: entered allmulticast mode [ 93.215801][ T9380] veth0_vlan: entered allmulticast mode [ 93.224414][ T9380] vlan0: entered allmulticast mode [ 93.229669][ T9380] vlan1: entered allmulticast mode [ 93.236790][ T9380] macvlan0: entered allmulticast mode [ 93.243260][ T9380] macvlan1: entered allmulticast mode [ 93.258855][ T9380] ipvlan0: entered allmulticast mode [ 93.264264][ T9380] ipvlan1: entered allmulticast mode [ 93.290050][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 93.299937][ T9380] veth1_macvtap: entered allmulticast mode [ 93.300401][ T3790] udevd[3790]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 93.315677][ T9380] veth0_macvtap: entered allmulticast mode [ 93.325281][ T9380] macvtap0: entered allmulticast mode [ 93.332056][ T9380] macsec0: entered allmulticast mode [ 93.338984][ T9380] geneve0: entered allmulticast mode [ 93.348519][ T9380] infiniband syz2: set down [ 93.362769][ T9380] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.371255][ T9380] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.379654][ T9380] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.388101][ T9380] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.406068][ T9380] geneve1: entered allmulticast mode [ 93.412794][ T9380] netdevsim netdevsim1 eth0: entered allmulticast mode [ 93.419877][ T9380] netdevsim netdevsim1 eth1: entered allmulticast mode [ 93.427051][ T9380] netdevsim netdevsim1 eth2: entered allmulticast mode [ 93.434125][ T9380] netdevsim netdevsim1 eth3: entered allmulticast mode [ 93.444500][ T9429] loop8: detected capacity change from 0 to 512 [ 93.451366][ T7558] geneve0 speed is unknown, defaulting to 1000 [ 93.466309][ T3400] geneve0 speed is unknown, defaulting to 1000 [ 93.472537][ T3400] geneve0 speed is unknown, defaulting to 1000 [ 93.505020][ T9429] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1998: Failed to acquire dquot type 1 [ 93.517356][ T9429] EXT4-fs (loop8): 1 truncate cleaned up [ 93.523372][ T9429] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.590699][ T9439] loop9: detected capacity change from 0 to 8192 [ 93.597550][ T9441] wireguard0: entered promiscuous mode [ 93.603088][ T9441] wireguard0: entered allmulticast mode [ 93.711399][ T9446] loop1: detected capacity change from 0 to 2048 [ 93.757932][ T9452] loop0: detected capacity change from 0 to 1024 [ 93.764758][ T9452] EXT4-fs: Ignoring removed orlov option [ 93.770499][ T9452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.779439][ T9446] loop1: p1 < > p4 [ 93.787661][ T9446] loop1: p4 size 8388608 extends beyond EOD, truncated [ 93.817263][ T9461] lo: entered allmulticast mode [ 93.823919][ T9461] tunl0: entered allmulticast mode [ 93.848539][ T9461] gre0: entered allmulticast mode [ 93.853047][ T9439] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 93.861338][ T9439] FAT-fs (loop9): Filesystem has been set read-only [ 93.912713][ T9461] gretap0: entered allmulticast mode [ 93.937317][ T9461] erspan0: entered allmulticast mode [ 93.969280][ T9461] ip_vti0: entered allmulticast mode [ 93.970630][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 93.996280][ T9461] ip6_vti0: entered allmulticast mode [ 94.029555][ T9461] sit0: entered allmulticast mode [ 94.053307][ T9461] ip6tnl0: entered allmulticast mode [ 94.075935][ T9461] ip6gre0: entered allmulticast mode [ 94.119386][ T9461] syz_tun: entered allmulticast mode [ 94.141278][ T9461] ip6gretap0: entered allmulticast mode [ 94.151613][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.158869][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.177268][ T9461] bridge0: entered allmulticast mode [ 94.192644][ T9461] vcan0: entered allmulticast mode [ 94.218053][ T9461] bond0: entered allmulticast mode [ 94.223268][ T9461] bond_slave_0: entered allmulticast mode [ 94.229125][ T9461] bond_slave_1: entered allmulticast mode [ 94.276945][ T9461] team0: entered allmulticast mode [ 94.282286][ T9461] team_slave_0: entered allmulticast mode [ 94.288283][ T9461] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 94.337804][ T9461] dummy0: entered allmulticast mode [ 94.368728][ T9461] nlmon0: entered allmulticast mode [ 94.374887][ T9461] caif0: entered allmulticast mode [ 94.383707][ T9461] batadv0: entered allmulticast mode [ 94.405352][ T9461] vxcan0: entered allmulticast mode [ 94.430190][ T9461] vxcan1: entered allmulticast mode [ 94.448565][ T9461] veth0: entered allmulticast mode [ 94.478044][ T9461] veth1: entered allmulticast mode [ 94.496806][ T9461] wg0: entered allmulticast mode [ 94.503352][ T9461] wg1: entered allmulticast mode [ 94.527456][ T9461] wg2: entered allmulticast mode [ 94.533721][ T9461] veth0_to_bridge: entered allmulticast mode [ 94.575022][ T9461] veth1_to_bridge: entered allmulticast mode [ 94.607498][ T9461] veth0_to_bond: entered allmulticast mode [ 94.655098][ T9461] veth1_to_bond: entered allmulticast mode [ 94.689473][ T9461] veth0_to_team: entered allmulticast mode [ 94.721838][ T9461] veth0_to_batadv: entered allmulticast mode [ 94.730153][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.737908][ T9461] batadv_slave_0: entered allmulticast mode [ 94.744850][ T9461] veth1_to_batadv: entered allmulticast mode [ 94.751967][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.759573][ T9461] batadv_slave_1: entered allmulticast mode [ 94.766755][ T9461] xfrm0: entered allmulticast mode [ 94.772831][ T9461] veth0_to_hsr: entered allmulticast mode [ 94.779572][ T9461] hsr_slave_0: entered allmulticast mode [ 94.786095][ T9461] veth1_to_hsr: entered allmulticast mode [ 94.792833][ T9461] hsr_slave_1: entered allmulticast mode [ 94.799498][ T9461] hsr0: entered allmulticast mode [ 94.805681][ T9461] veth1_virt_wifi: entered allmulticast mode [ 94.812684][ T9461] veth0_virt_wifi: entered allmulticast mode [ 94.820381][ T9461] veth1_vlan: entered allmulticast mode [ 94.827248][ T9461] veth0_vlan: entered allmulticast mode [ 94.836017][ T9461] vlan0: entered allmulticast mode [ 94.841227][ T9461] vlan1: entered allmulticast mode [ 94.846845][ T9461] macvlan0: entered allmulticast mode [ 94.853153][ T9461] macvlan1: entered allmulticast mode [ 94.859529][ T9461] ipvlan0: entered allmulticast mode [ 94.865095][ T9461] ipvlan1: entered allmulticast mode [ 94.870627][ T9461] veth1_macvtap: entered allmulticast mode [ 94.877387][ T9461] veth0_macvtap: entered allmulticast mode [ 94.884109][ T9461] macvtap0: entered allmulticast mode [ 94.890454][ T9461] macsec0: entered allmulticast mode [ 94.896950][ T9461] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.905957][ T9461] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.914850][ T9461] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.923934][ T9461] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.933250][ T9461] geneve1: entered allmulticast mode [ 94.939894][ T9461] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 94.948356][ T9461] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 94.956801][ T9461] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 94.964539][ T9461] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 94.971502][ T9461] ipvlan2: entered allmulticast mode [ 94.977211][ T9461] macvlan2: entered allmulticast mode [ 94.987940][ T9463] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.010005][ T9465] batadv1: entered promiscuous mode [ 95.016017][ T9489] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 95.017275][ T9465] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.043915][ T9463] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.092863][ T9491] loop2: detected capacity change from 0 to 2048 [ 95.109236][ T9501] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2030'. [ 95.118753][ T9501] netlink: 18430 bytes leftover after parsing attributes in process `syz.0.2030'. [ 95.132271][ T9463] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.143028][ T9491] loop2: p1 < > p4 [ 95.148844][ T9491] loop2: p4 size 8388608 extends beyond EOD, truncated [ 95.197803][ T9463] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.216672][ T9511] loop0: detected capacity change from 0 to 256 [ 95.256472][ T9518] Process accounting resumed [ 95.271702][ T9463] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.309771][ T9463] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.332217][ T9463] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.360832][ T9463] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.402321][ T9530] syz.2.2047[9530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.402388][ T9530] syz.2.2047[9530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.427597][ T9536] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.436453][ T9538] loop0: detected capacity change from 0 to 2048 [ 95.439232][ T9530] syz.2.2047[9530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.461414][ T9530] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2047'. [ 95.486275][ T9530] 0ªX¹¦À: renamed from caif0 [ 95.495562][ T9538] loop0: p1 < > p4 [ 95.500039][ T9538] loop0: p4 size 8388608 extends beyond EOD, truncated [ 95.517158][ T9530] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 95.530229][ T9544] loop8: detected capacity change from 0 to 1024 [ 95.537260][ T3023] loop0: p1 < > p4 [ 95.545694][ T9536] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.559220][ T9544] EXT4-fs: Ignoring removed orlov option [ 95.565012][ T9544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.565065][ T3023] loop0: p4 size 8388608 extends beyond EOD, truncated [ 95.596138][ T9549] geneve0 speed is unknown, defaulting to 1000 [ 95.610007][ T9536] team0: Port device netdevsim1 removed [ 95.630540][ T9536] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.660973][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 95.661065][ T29] audit: type=1326 audit(1732314704.194:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.703311][ T29] audit: type=1326 audit(1732314704.194:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.726885][ T29] audit: type=1326 audit(1732314704.194:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.750325][ T29] audit: type=1326 audit(1732314704.194:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.768971][ T3395] udevd[3395]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 95.773738][ T29] audit: type=1326 audit(1732314704.194:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.785322][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 95.806769][ T29] audit: type=1326 audit(1732314704.194:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.806803][ T29] audit: type=1326 audit(1732314704.194:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.863383][ T29] audit: type=1326 audit(1732314704.194:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.886888][ T29] audit: type=1326 audit(1732314704.224:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.910344][ T29] audit: type=1326 audit(1732314704.234:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.1.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 95.962031][ T9536] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.973679][ T9570] netlink: 112865 bytes leftover after parsing attributes in process `syz.8.2061'. [ 95.984219][ T9570] netlink: 18430 bytes leftover after parsing attributes in process `syz.8.2061'. [ 96.051605][ T7558] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 96.059359][ T7558] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 96.077419][ T9536] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.091893][ T9536] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.100351][ T7558] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 96.110934][ T7558] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 96.111784][ T9584] loop0: detected capacity change from 0 to 512 [ 96.123813][ T9536] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.140326][ T9536] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.150892][ T9584] EXT4-fs: Ignoring removed orlov option [ 96.205758][ T9587] loop1: detected capacity change from 0 to 1024 [ 96.215616][ T9584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.230528][ T9587] EXT4-fs: Ignoring removed orlov option [ 96.236343][ T9587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.245625][ T9584] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.254068][ T9584] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2068: bg 0: block 248: padding at end of block bitmap is not set [ 96.299433][ T9584] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2068: Failed to acquire dquot type 1 [ 96.322107][ T9584] EXT4-fs (loop0): 1 truncate cleaned up [ 96.332296][ T9584] EXT4-fs: Ignoring removed orlov option [ 96.338518][ T9584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.352147][ T9584] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 96.386858][ T9584] EXT4-fs error (device loop0): __ext4_remount:6749: comm syz.0.2068: Abort forced by user [ 96.408950][ T9602] netlink: 112865 bytes leftover after parsing attributes in process `syz.9.2076'. [ 96.430013][ T9609] netlink: '+}[@': attribute type 21 has an invalid length. [ 96.440507][ T9584] EXT4-fs (loop0): Remounting filesystem read-only [ 96.447086][ T9584] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 96.461482][ T9602] netlink: 18430 bytes leftover after parsing attributes in process `syz.9.2076'. [ 96.472961][ T9609] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 96.482402][ T9584] ext4 filesystem being remounted at /455/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.563360][ T9622] wireguard0: entered promiscuous mode [ 96.568965][ T9622] wireguard0: entered allmulticast mode [ 96.701844][ T9639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2093'. [ 96.756992][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2095'. [ 96.777664][ T9644] loop2: detected capacity change from 0 to 512 [ 96.812070][ T9644] EXT4-fs: Ignoring removed orlov option [ 96.825218][ T9655] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 96.833708][ T9654] loop9: detected capacity change from 0 to 128 [ 96.852732][ T9644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.861634][ T9657] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.868221][ T9654] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.890066][ T9644] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.900792][ T9644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2096: bg 0: block 248: padding at end of block bitmap is not set [ 96.915806][ T9644] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2096: Failed to acquire dquot type 1 [ 96.927916][ T9644] EXT4-fs (loop2): 1 truncate cleaned up [ 96.934016][ T9644] EXT4-fs mount: 11 callbacks suppressed [ 96.934027][ T9644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.980170][ T9644] EXT4-fs: Ignoring removed orlov option [ 96.986129][ T9644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.995380][ T7019] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.006772][ T9644] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 97.046293][ T9644] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.2096: Abort forced by user [ 97.068274][ T9675] wireguard0: entered promiscuous mode [ 97.073791][ T9675] wireguard0: entered allmulticast mode [ 97.079504][ T9644] EXT4-fs (loop2): Remounting filesystem read-only [ 97.086050][ T9644] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 97.096684][ T9644] ext4 filesystem being remounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.119079][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.210309][ T9680] loop0: detected capacity change from 0 to 8192 [ 97.298395][ T9697] syzkaller1: entered promiscuous mode [ 97.303921][ T9697] syzkaller1: entered allmulticast mode [ 97.327481][ T9703] loop9: detected capacity change from 0 to 512 [ 97.341314][ T9703] EXT4-fs: Ignoring removed orlov option [ 97.350012][ T9703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.360594][ T9703] EXT4-fs (loop9): orphan cleanup on readonly fs [ 97.367871][ T9703] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2123: bg 0: block 248: padding at end of block bitmap is not set [ 97.385800][ T9703] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.2123: Failed to acquire dquot type 1 [ 97.412525][ T9703] EXT4-fs (loop9): 1 truncate cleaned up [ 97.433211][ T9703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.458365][ T9703] EXT4-fs: Ignoring removed orlov option [ 97.462271][ T9712] geneve0 speed is unknown, defaulting to 1000 [ 97.464085][ T9703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.515259][ T9703] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 97.533798][ T2986] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 97.541609][ T2986] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 97.566188][ T9703] EXT4-fs error (device loop9): __ext4_remount:6749: comm syz.9.2123: Abort forced by user [ 97.577506][ T2986] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 97.595115][ T9703] EXT4-fs (loop9): Remounting filesystem read-only [ 97.601674][ T9703] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 97.612693][ T2986] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 97.622602][ T9703] ext4 filesystem being remounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.638157][ T9704] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 97.645763][ T9704] FAT-fs (loop0): Filesystem has been set read-only [ 97.680214][ T9725] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.709648][ T7019] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.751863][ T9725] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.800320][ T9738] mmap: syz.0.2132 (9738): VmData 29093888 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 97.841400][ T9734] wireguard0: entered promiscuous mode [ 97.847007][ T9734] wireguard0: entered allmulticast mode [ 97.889440][ T9725] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.989114][ T9725] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.013285][ T9758] loop2: detected capacity change from 0 to 8192 [ 98.101984][ T9775] netlink: '+}[@': attribute type 21 has an invalid length. [ 98.274581][ T9794] loop0: detected capacity change from 0 to 2048 [ 98.305347][ T9794] loop0: p1 < > p4 [ 98.309851][ T9794] loop0: p4 size 8388608 extends beyond EOD, truncated [ 98.330533][ T3023] loop0: p1 < > p4 [ 98.334865][ T3023] loop0: p4 size 8388608 extends beyond EOD, truncated [ 98.353331][ T9776] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 98.360966][ T9776] FAT-fs (loop2): Filesystem has been set read-only [ 98.379763][ T3790] udevd[3790]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 98.395189][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 98.561263][ T9818] geneve0 speed is unknown, defaulting to 1000 [ 98.585518][ T9824] loop2: detected capacity change from 0 to 256 [ 98.602131][ T9824] FAT-fs (loop2): bogus number of FAT sectors [ 98.608341][ T9824] FAT-fs (loop2): Can't find a valid FAT filesystem [ 99.146044][ T9850] loop1: detected capacity change from 0 to 8192 [ 99.230019][ T9864] loop0: detected capacity change from 0 to 128 [ 99.238752][ T9866] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 99.250533][ T9866] team0: left allmulticast mode [ 99.260844][ T9866] batman_adv: batadv0: Adding interface: team0 [ 99.267110][ T9866] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.292312][ T9866] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 99.308533][ T9866] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 99.316682][ T9866] team0: entered promiscuous mode [ 99.321767][ T9866] team_slave_0: entered promiscuous mode [ 99.327534][ T9866] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 99.335664][ T9866] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.342708][ T9866] batman_adv: batadv0: Interface activated: team0 [ 99.349326][ T9866] batman_adv: batadv0: Interface deactivated: team0 [ 99.355973][ T9866] batman_adv: batadv0: Removing interface: team0 [ 99.385512][ T9866] bridge0: port 3(team0) entered blocking state [ 99.391878][ T9866] bridge0: port 3(team0) entered disabled state [ 99.398484][ T9866] team0: entered allmulticast mode [ 99.398686][ T9864] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.425042][ T9864] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.496797][ T9877] syz.2.2194[9877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.496903][ T9877] syz.2.2194[9877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.508536][ T9877] syz.2.2194[9877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.538818][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.582150][ T9884] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 99.592329][ T9886] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20000 [ 99.602268][ T9867] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 99.609900][ T9867] FAT-fs (loop1): Filesystem has been set read-only [ 99.677064][ T9891] loop0: detected capacity change from 0 to 512 [ 99.697333][ T9894] sctp: [Deprecated]: syz.2.2197 (pid 9894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.697333][ T9894] Use struct sctp_sack_info instead [ 99.719316][ T9891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.734661][ T9891] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.804238][ T9904] geneve0 speed is unknown, defaulting to 1000 [ 99.817695][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.914109][ T9906] netlink: 'syz.9.2205': attribute type 10 has an invalid length. [ 99.936762][ T9906] batman_adv: batadv0: Adding interface: team0 [ 99.942965][ T9906] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.970773][ T9906] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 99.985994][ T9910] loop1: detected capacity change from 0 to 512 [ 99.989526][ T9725] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.992755][ T9910] EXT4-fs: Ignoring removed orlov option [ 100.007589][ T9725] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.016950][ T9906] netlink: 'syz.9.2205': attribute type 10 has an invalid length. [ 100.027303][ T9906] team0: entered promiscuous mode [ 100.032348][ T9906] team_slave_0: entered promiscuous mode [ 100.038097][ T9906] team_slave_1: entered promiscuous mode [ 100.045273][ T9906] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.052311][ T9915] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.052813][ T9906] batman_adv: batadv0: Interface activated: team0 [ 100.064754][ T9910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.066180][ T9906] batman_adv: batadv0: Interface deactivated: team0 [ 100.081302][ T9906] batman_adv: batadv0: Removing interface: team0 [ 100.081842][ T9910] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.094971][ T9906] bridge0: port 3(team0) entered blocking state [ 100.101290][ T9906] bridge0: port 3(team0) entered disabled state [ 100.108396][ T9910] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2204: bg 0: block 248: padding at end of block bitmap is not set [ 100.109365][ T9906] team0: entered allmulticast mode [ 100.127982][ T9906] team_slave_0: entered allmulticast mode [ 100.133787][ T9906] team_slave_1: entered allmulticast mode [ 100.141872][ T9910] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2204: Failed to acquire dquot type 1 [ 100.143684][ T9906] bridge0: port 3(team0) entered blocking state [ 100.158090][ T9910] EXT4-fs (loop1): 1 truncate cleaned up [ 100.159394][ T9906] bridge0: port 3(team0) entered forwarding state [ 100.174030][ T9725] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.183083][ T9910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.196736][ T9918] veth0_to_team: entered promiscuous mode [ 100.216377][ T9725] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.239828][ T9920] Option 'kÆvÏ4ì…ð' to dns_resolver key: bad/missing value [ 100.257131][ T9910] EXT4-fs: Ignoring removed orlov option [ 100.271388][ T9910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.291586][ T9910] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 100.328150][ T9910] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.2204: Abort forced by user [ 100.343036][ T9910] EXT4-fs (loop1): Remounting filesystem read-only [ 100.349708][ T9910] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 100.360353][ T9910] ext4 filesystem being remounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.390584][ T9934] loop0: detected capacity change from 0 to 512 [ 100.398365][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.460012][ T9934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.488984][ T9934] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.504276][ T9948] loop9: detected capacity change from 0 to 512 [ 100.526182][ T9948] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 100.540423][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.542323][ T9948] EXT4-fs (loop9): 1 truncate cleaned up [ 100.551321][ T9944] geneve0 speed is unknown, defaulting to 1000 [ 100.555596][ T9948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.628254][ T9959] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.650976][ T9948] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 100.671550][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 100.671564][ T29] audit: type=1400 audit(1732314709.184:2500): avc: denied { remove_name } for pid=9947 comm="syz.9.2222" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.700502][ T29] audit: type=1400 audit(1732314709.184:2501): avc: denied { unlink } for pid=9947 comm="syz.9.2222" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.726542][ T29] audit: type=1326 audit(1732314709.264:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.8.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a02f10905 code=0x7ffc0000 [ 100.765948][ T7019] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.770428][ T29] audit: type=1326 audit(1732314709.294:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.8.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 100.798389][ T29] audit: type=1326 audit(1732314709.294:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.8.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 100.829312][ T9966] loop0: detected capacity change from 0 to 512 [ 100.851470][ T9966] EXT4-fs: Ignoring removed orlov option [ 100.859573][ T9966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.896635][ T29] audit: type=1326 audit(1732314709.414:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.8.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 100.927243][ T9966] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.952391][ T29] audit: type=1326 audit(1732314709.484:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.8.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 100.963681][ T9966] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2229: bg 0: block 248: padding at end of block bitmap is not set [ 100.992994][ T9966] Quota error (device loop0): write_blk: dquota write failed [ 101.000459][ T9966] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 101.010545][ T9966] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2229: Failed to acquire dquot type 1 [ 101.022653][ T29] audit: type=1326 audit(1732314709.514:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.8.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 101.046915][ T9966] EXT4-fs (loop0): 1 truncate cleaned up [ 101.053680][ T9966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.077845][ T9966] EXT4-fs: Ignoring removed orlov option [ 101.083777][ T9966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.104736][ T9966] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 101.120291][ T9987] syzkaller1: entered promiscuous mode [ 101.125906][ T9987] syzkaller1: entered allmulticast mode [ 101.135242][ T9966] EXT4-fs error (device loop0): __ext4_remount:6749: comm syz.0.2229: Abort forced by user [ 101.146115][ T9966] EXT4-fs (loop0): Remounting filesystem read-only [ 101.152636][ T9966] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.165153][ T9966] ext4 filesystem being remounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.172855][ T9992] loop8: detected capacity change from 0 to 8192 [ 101.213367][ T9993] __nla_validate_parse: 9 callbacks suppressed [ 101.213385][ T9993] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2241'. [ 101.215654][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.288413][T10001] loop9: detected capacity change from 0 to 512 [ 101.301395][T10001] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 101.318766][T10001] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.2244: iget: bad i_size value: -67835469387268086 [ 101.353293][T10001] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.2244: couldn't read orphan inode 15 (err -117) [ 101.375849][T10001] EXT4-fs (loop9): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.393025][T10001] ext2 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.406851][T10011] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 101.419106][T10011] team0: left allmulticast mode [ 101.424452][T10011] batman_adv: batadv0: Adding interface: team0 [ 101.430684][T10011] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.455882][T10011] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.475165][T10011] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 101.478669][ T7019] EXT4-fs (loop9): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 101.483163][T10011] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2247'. [ 101.483278][T10011] team0: entered promiscuous mode [ 101.506245][T10011] team_slave_0: entered promiscuous mode [ 101.512069][T10011] team_slave_1: entered promiscuous mode [ 101.523211][T10011] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.530388][T10011] batman_adv: batadv0: Interface activated: team0 [ 101.537024][T10011] batman_adv: batadv0: Interface deactivated: team0 [ 101.543659][T10011] batman_adv: batadv0: Removing interface: team0 [ 101.548905][ T9995] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 101.557664][ T9995] FAT-fs (loop8): Filesystem has been set read-only [ 101.565635][T10011] bridge0: port 3(team0) entered blocking state [ 101.571957][T10011] bridge0: port 3(team0) entered disabled state [ 101.583016][T10011] team0: entered allmulticast mode [ 101.686007][T10027] loop2: detected capacity change from 0 to 512 [ 101.698826][T10032] wireguard0: entered promiscuous mode [ 101.700394][T10027] EXT4-fs: Ignoring removed orlov option [ 101.704361][T10032] wireguard0: entered allmulticast mode [ 101.718331][T10027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.734672][T10023] loop1: detected capacity change from 0 to 8192 [ 101.746531][T10027] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.753956][T10027] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2253: bg 0: block 248: padding at end of block bitmap is not set [ 101.769717][T10027] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2253: Failed to acquire dquot type 1 [ 101.786759][T10027] EXT4-fs (loop2): 1 truncate cleaned up [ 101.793330][T10027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.816036][T10027] EXT4-fs: Ignoring removed orlov option [ 101.821997][T10027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.832266][T10027] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 101.846374][T10027] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.2253: Abort forced by user [ 101.865377][T10027] EXT4-fs (loop2): Remounting filesystem read-only [ 101.872030][T10027] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.884104][T10027] ext4 filesystem being remounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.930807][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.954864][T10042] syzkaller1: entered promiscuous mode [ 101.960525][T10042] syzkaller1: entered allmulticast mode [ 102.013301][T10046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'. [ 102.046525][T10023] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 102.054125][T10023] FAT-fs (loop1): Filesystem has been set read-only [ 102.163035][T10063] veth0_to_team: entered promiscuous mode [ 102.208663][T10067] Option 'kÆvÏ4ì…ð' to dns_resolver key: bad/missing value [ 102.234089][T10071] loop2: detected capacity change from 0 to 512 [ 102.241580][T10065] geneve0 speed is unknown, defaulting to 1000 [ 102.261855][T10071] EXT4-fs: Ignoring removed orlov option [ 102.271533][T10071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.303818][T10071] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.314580][T10071] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2270: bg 0: block 248: padding at end of block bitmap is not set [ 102.334756][T10071] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2270: Failed to acquire dquot type 1 [ 102.369029][T10071] EXT4-fs (loop2): 1 truncate cleaned up [ 102.396809][T10071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.415067][T10071] EXT4-fs: Ignoring removed orlov option [ 102.420894][T10071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.430950][T10071] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 102.456286][T10071] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.2270: Abort forced by user [ 102.466973][T10071] EXT4-fs (loop2): Remounting filesystem read-only [ 102.473557][T10071] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 102.485431][T10071] ext4 filesystem being remounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.496245][T10089] loop9: detected capacity change from 0 to 8192 [ 102.575258][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.607788][T10095] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.676849][T10103] veth0_to_team: entered promiscuous mode [ 102.750130][T10089] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 102.757808][T10089] FAT-fs (loop9): Filesystem has been set read-only [ 103.000249][T10137] geneve0 speed is unknown, defaulting to 1000 [ 103.017355][T10128] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 103.026601][T10128] team0: Port device netdevsim1 removed [ 103.125691][T10140] loop9: detected capacity change from 0 to 8192 [ 103.174627][T10142] loop2: detected capacity change from 0 to 512 [ 103.196429][T10142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.210726][T10142] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.256673][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.291037][T10140] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 103.298774][T10140] FAT-fs (loop9): Filesystem has been set read-only [ 103.326369][T10150] syz.2.2304[10150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.326490][T10150] syz.2.2304[10150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.339397][T10150] syz.2.2304[10150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.440428][T10159] loop9: detected capacity change from 0 to 1024 [ 103.460035][T10159] EXT4-fs: Ignoring removed oldalloc option [ 103.470981][T10159] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 103.484018][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'. [ 103.498186][T10161] macvtap1: entered promiscuous mode [ 103.503642][T10161] gretap0: entered promiscuous mode [ 103.509125][T10161] macvtap1: entered allmulticast mode [ 103.522727][T10165] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 103.539006][T10159] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.565568][T10171] loop2: detected capacity change from 0 to 512 [ 103.580526][T10171] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 103.583788][ T3400] kernel write not supported for file /input/event3 (pid: 3400 comm: kworker/0:3) [ 103.590418][T10171] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.2313: iget: bad i_size value: -67835469387268086 [ 103.600154][ T7019] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.611557][T10171] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2313: couldn't read orphan inode 15 (err -117) [ 103.633332][T10171] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.648369][T10171] ext2 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.699356][ T3325] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 103.735306][T10185] loop2: detected capacity change from 0 to 512 [ 103.753836][T10189] sctp: [Deprecated]: syz.9.2315 (pid 10189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.753836][T10189] Use struct sctp_sack_info instead [ 103.754641][T10185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.798629][T10185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.811455][T10185] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.841478][T10185] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2320: corrupted xattr block 32: bad e_name length [ 103.852822][T10199] loop1: detected capacity change from 0 to 512 [ 103.861480][T10199] EXT4-fs: Ignoring removed bh option [ 103.869320][T10185] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 103.878526][T10185] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2320: corrupted xattr block 32: bad e_name length [ 103.897457][T10185] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 103.899453][T10199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.919775][T10185] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.2320: corrupted xattr block 32: bad e_name length [ 103.920552][T10199] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.942775][T10185] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 103.983377][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.009496][T10209] wireguard0: entered promiscuous mode [ 104.010663][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.015057][T10209] wireguard0: entered allmulticast mode [ 104.042881][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2328'. [ 104.091333][T10217] geneve0 speed is unknown, defaulting to 1000 [ 104.244427][T10228] vhci_hcd: default hub control req: 0012 v0214 i0008 l0 [ 104.496715][T10257] vhci_hcd: default hub control req: 0012 v0214 i0008 l0 [ 104.576702][T10267] loop9: detected capacity change from 0 to 1024 [ 104.578651][T10269] loop0: detected capacity change from 0 to 512 [ 104.583445][T10267] EXT4-fs: Ignoring removed orlov option [ 104.597161][T10267] EXT4-fs: Ignoring removed bh option [ 104.598189][T10269] EXT4-fs: Ignoring removed bh option [ 104.616781][T10267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c018, mo2=0002] [ 104.625634][T10267] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.650559][T10269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.663848][ T7019] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.663995][T10269] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.715375][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2358'. [ 104.752357][T10282] vlan2: entered promiscuous mode [ 104.757974][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.810091][T10284] loop2: detected capacity change from 0 to 8192 [ 104.833288][T10290] loop0: detected capacity change from 0 to 512 [ 104.853755][T10290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.867817][T10290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.895053][T10290] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.973598][T10290] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2364: corrupted xattr block 32: bad e_name length [ 104.987448][T10290] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 104.998886][T10290] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2364: corrupted xattr block 32: bad e_name length [ 105.012794][T10290] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 105.023898][T10290] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2364: corrupted xattr block 32: bad e_name length [ 105.025038][T10219] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 105.039805][T10290] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 105.046044][T10219] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 105.086720][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.098403][T10310] loop9: detected capacity change from 0 to 512 [ 105.113282][T10310] EXT4-fs: Ignoring removed bh option [ 105.132043][T10311] loop1: detected capacity change from 0 to 1024 [ 105.138976][T10311] EXT4-fs: Ignoring removed oldalloc option [ 105.146787][T10311] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 105.147341][T10310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.169338][T10310] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.173594][T10297] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 105.187479][T10297] FAT-fs (loop2): Filesystem has been set read-only [ 105.200106][T10311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.224688][ T7019] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.241875][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.258782][T10322] loop9: detected capacity change from 0 to 512 [ 105.283369][T10324] loop2: detected capacity change from 0 to 256 [ 105.286757][T10322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.299426][T10324] FAT-fs (loop2): Directory bread(block 64) failed [ 105.315032][T10324] FAT-fs (loop2): Directory bread(block 65) failed [ 105.321625][T10324] FAT-fs (loop2): Directory bread(block 66) failed [ 105.331735][T10324] FAT-fs (loop2): Directory bread(block 67) failed [ 105.338416][T10324] FAT-fs (loop2): Directory bread(block 68) failed [ 105.345140][T10324] FAT-fs (loop2): Directory bread(block 69) failed [ 105.351760][T10324] FAT-fs (loop2): Directory bread(block 70) failed [ 105.358511][T10324] FAT-fs (loop2): Directory bread(block 71) failed [ 105.365224][T10324] FAT-fs (loop2): Directory bread(block 72) failed [ 105.366803][ T7019] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.371957][T10324] FAT-fs (loop2): Directory bread(block 73) failed [ 105.469345][T10339] loop9: detected capacity change from 0 to 1024 [ 105.521450][T10349] SELinux: syz.1.2386 (10349) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 105.538752][T10339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.562521][T10351] loop2: detected capacity change from 0 to 512 [ 105.565084][T10339] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.569302][T10351] EXT4-fs: Ignoring removed bh option [ 105.608042][T10351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.630403][T10351] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.637835][T10353] loop1: detected capacity change from 0 to 8192 [ 105.641890][ T7019] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.717617][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.785953][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 105.785969][ T29] audit: type=1326 audit(1732314714.324:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.824554][ T29] audit: type=1326 audit(1732314714.324:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.848123][ T29] audit: type=1326 audit(1732314714.324:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.871644][ T29] audit: type=1326 audit(1732314714.324:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.895148][ T29] audit: type=1326 audit(1732314714.324:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.918720][ T29] audit: type=1326 audit(1732314714.324:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.942243][ T29] audit: type=1326 audit(1732314714.324:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.965782][ T29] audit: type=1326 audit(1732314714.324:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.995496][ T29] audit: type=1326 audit(1732314714.374:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 105.995985][T10317] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 106.019028][ T29] audit: type=1326 audit(1732314714.384:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 106.067136][T10378] loop8: detected capacity change from 0 to 128 [ 106.068641][T10353] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 106.073518][T10317] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 106.080990][T10353] FAT-fs (loop1): Filesystem has been set read-only [ 106.096408][T10378] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.114268][T10382] syz.2.2399[10382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.114318][T10382] syz.2.2399[10382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.133413][T10378] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.139365][T10382] syz.2.2399[10382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.287661][T10402] netem: incorrect gi model size [ 106.304148][T10402] netem: change failed [ 106.328063][T10408] loop1: detected capacity change from 0 to 1024 [ 106.335379][T10408] EXT4-fs: Ignoring removed nobh option [ 106.341058][T10408] EXT4-fs: Ignoring removed orlov option [ 106.357310][T10408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.508075][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.539368][T10416] random: crng reseeded on system resumption [ 106.645671][T10420] loop0: detected capacity change from 0 to 128 [ 106.652433][T10420] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.666660][T10420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.785396][T10436] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10436 comm=syz.1.2422 [ 106.820242][T10440] loop0: detected capacity change from 0 to 2048 [ 106.851356][T10444] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.886516][T10440] Alternate GPT is invalid, using primary GPT. [ 106.892932][T10440] loop0: p1 p2 p3 [ 106.910083][T10444] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.956661][ T3790] udevd[3790]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 106.962056][ T5035] udevd[5035]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 106.968405][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 106.988606][T10444] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.015992][T10455] syz.1.2432[10455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.016054][T10455] syz.1.2432[10455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.028929][T10455] syz.1.2432[10455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.060636][T10444] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.131744][T10444] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.146637][T10444] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.168312][T10444] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.200496][T10444] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.270525][T10475] loop2: detected capacity change from 0 to 8192 [ 107.427933][T10500] loop0: detected capacity change from 0 to 256 [ 107.442977][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.447214][T10498] loop8: detected capacity change from 0 to 4096 [ 107.451787][T10500] FAT-fs (loop0): Filesystem has been set read-only [ 107.460185][T10498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.468873][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.480385][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.489432][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.498512][T10498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.498700][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.516008][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.525018][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.530560][T10498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.533810][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.555176][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.563969][T10500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.586293][T10498] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.2451: Failed to acquire dquot type 0 [ 107.632410][T10475] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 107.640140][T10475] FAT-fs (loop2): Filesystem has been set read-only [ 107.654626][ T6231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.823649][T10529] IPVS: Error joining to the multicast group [ 107.891763][T10541] loop8: detected capacity change from 0 to 256 [ 107.909769][T10541] FAT-fs (loop8): Directory bread(block 64) failed [ 107.928107][T10541] FAT-fs (loop8): Directory bread(block 65) failed [ 107.946995][T10541] FAT-fs (loop8): Directory bread(block 66) failed [ 107.953553][T10541] FAT-fs (loop8): Directory bread(block 67) failed [ 107.960194][T10541] FAT-fs (loop8): Directory bread(block 68) failed [ 107.966822][T10541] FAT-fs (loop8): Directory bread(block 69) failed [ 107.985117][T10541] FAT-fs (loop8): Directory bread(block 70) failed [ 107.996878][T10541] FAT-fs (loop8): Directory bread(block 71) failed [ 108.013067][T10541] FAT-fs (loop8): Directory bread(block 72) failed [ 108.031791][T10541] FAT-fs (loop8): Directory bread(block 73) failed [ 108.096356][T10562] IPVS: Error joining to the multicast group [ 108.183989][T10577] loop1: detected capacity change from 0 to 2048 [ 108.201654][T10579] loop8: detected capacity change from 0 to 256 [ 108.213076][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.221850][T10579] FAT-fs (loop8): Filesystem has been set read-only [ 108.230760][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.239979][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.243957][T10581] loop0: detected capacity change from 0 to 4096 [ 108.251211][T10577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.268803][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.282076][T10581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.290852][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.299650][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.308468][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.317302][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.317936][T10581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.326199][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.336329][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.343257][T10579] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.379738][T10581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.413156][T10581] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2489: Failed to acquire dquot type 0 [ 108.476639][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.170359][T10656] loop2: detected capacity change from 0 to 1024 [ 109.177168][T10656] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 109.236076][T10660] geneve0 speed is unknown, defaulting to 1000 [ 109.337552][T10663] loop2: detected capacity change from 0 to 256 [ 109.396449][T10665] loop2: detected capacity change from 0 to 2048 [ 109.430375][T10665] Alternate GPT is invalid, using primary GPT. [ 109.436878][T10665] loop2: p1 p2 p3 [ 109.481614][ T5035] udevd[5035]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 109.493609][ T3790] udevd[3790]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 109.507803][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 109.585823][T10680] Invalid ELF header magic: != ELF [ 109.628557][T10686] loop8: detected capacity change from 0 to 512 [ 109.658343][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 109.667406][T10695] netlink: 'syz.1.2541': attribute type 7 has an invalid length. [ 109.668116][T10686] EXT4-fs (loop8): too many log groups per flexible block group [ 109.675195][T10695] netlink: 'syz.1.2541': attribute type 8 has an invalid length. [ 109.682931][T10686] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 109.690624][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 109.697486][T10686] EXT4-fs (loop8): mount failed [ 109.713916][T10695] gretap0: entered promiscuous mode [ 109.720786][T10695] batadv_slave_1: entered promiscuous mode [ 109.728381][T10695] gretap0: left promiscuous mode [ 109.755262][T10695] batadv_slave_1: left promiscuous mode [ 109.835496][T10708] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1549 sclass=netlink_audit_socket pid=10708 comm=syz.2.2546 [ 109.882459][T10714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2550'. [ 109.891515][T10714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2550'. [ 110.073605][T10738] hub 9-0:1.0: USB hub found [ 110.078397][T10738] hub 9-0:1.0: 8 ports detected [ 110.116603][T10740] loop1: detected capacity change from 0 to 2048 [ 110.166343][T10740] Alternate GPT is invalid, using primary GPT. [ 110.172697][T10740] loop1: p1 p2 p3 [ 110.495933][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'. [ 110.525867][T10753] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.533313][T10753] vhci_hcd: invalid port number 23 [ 110.658802][T10769] loop0: detected capacity change from 0 to 512 [ 110.666946][T10769] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 110.679995][T10769] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 110.690263][T10769] EXT4-fs (loop0): mount failed [ 110.797691][T10785] veth0_to_hsr: entered promiscuous mode [ 110.813083][T10785] veth0_to_hsr: left promiscuous mode [ 110.862580][T10796] vhci_hcd: invalid port number 255 [ 110.867951][T10796] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 110.914727][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 110.914745][ T29] audit: type=1326 audit(1732314719.444:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 110.944723][ T29] audit: type=1326 audit(1732314719.444:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 110.969534][ T29] audit: type=1326 audit(1732314719.454:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 110.993166][ T29] audit: type=1326 audit(1732314719.454:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 111.016781][ T29] audit: type=1326 audit(1732314719.464:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 111.040378][ T29] audit: type=1400 audit(1732314719.484:2690): avc: denied { write } for pid=10805 comm="syz.1.2593" name="netlink" dev="proc" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.084460][ T29] audit: type=1326 audit(1732314719.584:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a02ede819 code=0x7ffc0000 [ 111.108107][ T29] audit: type=1326 audit(1732314719.584:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a02ed57e7 code=0x7ffc0000 [ 111.131653][ T29] audit: type=1326 audit(1732314719.584:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a02e7a1a9 code=0x7ffc0000 [ 111.155168][ T29] audit: type=1326 audit(1732314719.584:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.8.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a02ed57e7 code=0x7ffc0000 [ 111.206343][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'. [ 111.215405][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'. [ 111.245813][T10825] netlink: 'syz.0.2602': attribute type 10 has an invalid length. [ 111.253809][T10825] bond0: left allmulticast mode [ 111.261808][T10825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.269268][T10825] bond0: entered allmulticast mode [ 111.274856][T10825] team0: Port device bond0 added [ 111.298616][T10823] loop2: detected capacity change from 0 to 2048 [ 111.316928][T10827] loop1: detected capacity change from 0 to 2048 [ 111.342952][T10827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.364317][T10823] loop2: p3 < > p4 < > [ 111.368697][T10823] loop2: partition table partially beyond EOD, truncated [ 111.378981][T10823] loop2: p3 start 4284289 is beyond EOD, truncated [ 111.405503][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.631874][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'. [ 111.640924][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 111.679696][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2636'. [ 111.785045][T10916] pim6reg: entered allmulticast mode [ 111.796875][T10916] pim6reg: left allmulticast mode [ 111.852952][T10928] netlink: 'syz.1.2658': attribute type 10 has an invalid length. [ 111.861725][T10928] bond0: left allmulticast mode [ 111.869611][T10928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.878433][T10928] bond0: entered promiscuous mode [ 111.883538][T10928] bond_slave_0: entered promiscuous mode [ 111.889255][T10928] bond_slave_1: entered promiscuous mode [ 111.895108][T10928] bond0: entered allmulticast mode [ 111.900823][T10928] team0: Port device bond0 added [ 111.923045][T10932] 9pnet: Could not find request transport: 0xffffffffffffffff [ 112.010846][T10953] loop1: detected capacity change from 0 to 512 [ 112.029435][T10953] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.045038][T10953] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.068732][T10953] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.086195][T10953] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 112.095905][T10953] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2661: bg 0: block 40: padding at end of block bitmap is not set [ 112.116437][T10972] loop0: detected capacity change from 0 to 1024 [ 112.123290][T10972] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.125353][T10953] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 112.144327][T10953] EXT4-fs (loop1): 1 truncate cleaned up [ 112.150944][T10953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.166487][T10977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10977 comm=syz.2.2671 [ 112.179070][T10977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10977 comm=syz.2.2671 [ 112.193130][T10972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.205343][T10953] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.2661: corrupted xattr block 31: invalid header [ 112.219154][T10953] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 112.235660][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.245540][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.290867][T10984] loop0: detected capacity change from 0 to 764 [ 112.299041][T10984] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 112.326533][T10993] binfmt_misc: register: failed to install interpreter file ./file0 [ 112.387012][T11005] loop2: detected capacity change from 0 to 512 [ 112.406574][T11005] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 112.414381][T11009] loop0: detected capacity change from 0 to 512 [ 112.414654][T11005] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.427852][T11005] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.443556][T11005] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 112.451130][T11005] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2683: bg 0: block 40: padding at end of block bitmap is not set [ 112.465068][T11012] netlink: 'syz.9.2685': attribute type 10 has an invalid length. [ 112.467503][T11005] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 112.474582][T11009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.482099][T11005] EXT4-fs (loop2): 1 truncate cleaned up [ 112.498196][T11009] ext4 filesystem being mounted at /608/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.517522][T11012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.528752][T11005] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.2683: corrupted xattr block 31: invalid header [ 112.528799][T11012] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.576556][T11005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 112.697739][T11038] 9pnet_fd: Insufficient options for proto=fd [ 112.727954][T11043] loop2: detected capacity change from 0 to 1024 [ 112.753186][T11046] loop0: detected capacity change from 0 to 512 [ 112.773001][T11046] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 112.775608][T11043] EXT4-fs (loop2): shut down requested (0) [ 112.792082][T11046] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.800510][T11046] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.816925][T11046] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 112.823956][T11046] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2701: bg 0: block 40: padding at end of block bitmap is not set [ 112.839966][T11046] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 112.850272][T11046] EXT4-fs (loop0): 1 truncate cleaned up [ 112.916307][T11046] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.2701: corrupted xattr block 31: invalid header [ 112.946330][T11046] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 112.964639][T11075] loop9: detected capacity change from 0 to 128 [ 113.004884][T11080] netlink: 'syz.0.2714': attribute type 10 has an invalid length. [ 113.013981][T11078] pim6reg1: entered promiscuous mode [ 113.019371][T11078] pim6reg1: entered allmulticast mode [ 113.033027][T11080] batadv0: left allmulticast mode [ 113.046532][T11080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.063418][T11080] batadv0: entered allmulticast mode [ 113.074650][T11080] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 113.299427][T11123] 9pnet_fd: Insufficient options for proto=fd [ 113.398711][T11144] loop9: detected capacity change from 0 to 512 [ 113.418707][T11144] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.738378][T11197] pim6reg1: entered promiscuous mode [ 113.743844][T11197] pim6reg1: entered allmulticast mode [ 114.044642][T11211] loop1: detected capacity change from 0 to 512 [ 114.057216][T11211] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.066311][T11211] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.073134][T11211] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2771: Failed to acquire dquot type 1 [ 114.086259][T11218] loop8: detected capacity change from 0 to 128 [ 114.114494][T11211] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2771: bg 0: block 40: padding at end of block bitmap is not set [ 114.141409][T11226] loop2: detected capacity change from 0 to 512 [ 114.149858][T11211] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 114.161817][T11211] EXT4-fs (loop1): 1 truncate cleaned up [ 114.167609][T11226] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.179507][T11232] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 114.192736][T11226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 114.200809][T11226] System zones: 1-12 [ 114.205009][T11226] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.213490][T11226] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2766: bg 0: block 361: padding at end of block bitmap is not set [ 114.235029][T11226] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 114.248667][T11226] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2766: attempt to clear invalid blocks 33619980 len 1 [ 114.263965][T11226] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2766: invalid indirect mapped block 1811939328 (level 0) [ 114.278353][T11226] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2766: invalid indirect mapped block 2 (level 2) [ 114.294015][T11226] EXT4-fs (loop2): 1 truncate cleaned up [ 115.007869][T11289] syz.1.2796[11289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.007955][T11289] syz.1.2796[11289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.020659][T11289] syz.1.2796[11289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.068945][T11293] loop0: detected capacity change from 0 to 128 [ 115.148812][T11300] syz.1.2800 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.284502][T11314] __nla_validate_parse: 7 callbacks suppressed [ 115.284521][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2807'. [ 115.315428][T11314] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 115.421318][T11335] loop8: detected capacity change from 0 to 512 [ 115.436391][T11335] EXT4-fs: Ignoring removed i_version option [ 115.442527][T11335] EXT4-fs: Ignoring removed nobh option [ 115.449857][T11335] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 115.469266][T11335] EXT4-fs (loop8): 1 truncate cleaned up [ 115.893024][T11406] loop9: detected capacity change from 0 to 128 [ 115.981640][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 115.981657][ T29] audit: type=1400 audit(1732315236.516:2990): avc: denied { append } for pid=11413 comm="syz.0.2864" name="pfkey" dev="proc" ino=4026532717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.037495][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2852'. [ 116.046790][T11417] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.087321][T11420] wireguard0: entered promiscuous mode [ 116.092838][T11420] wireguard0: entered allmulticast mode [ 116.374571][ T29] audit: type=1400 audit(1732315236.906:2991): avc: denied { write } for pid=11424 comm="syz.1.2859" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.413574][ T29] audit: type=1326 audit(1732315236.946:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcf4ee819 code=0x7ffc0000 [ 116.457717][ T29] audit: type=1326 audit(1732315236.946:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcf4ee819 code=0x7ffc0000 [ 116.481384][ T29] audit: type=1326 audit(1732315236.946:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f5dcf4ee819 code=0x7ffc0000 [ 116.496974][T11432] loop9: detected capacity change from 0 to 512 [ 116.504882][ T29] audit: type=1326 audit(1732315236.946:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcf4ee819 code=0x7ffc0000 [ 116.523638][T11432] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.2862: corrupted in-inode xattr: invalid ea_ino [ 116.534631][ T29] audit: type=1326 audit(1732315236.946:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcf4ee819 code=0x7ffc0000 [ 116.549353][T11438] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'. [ 116.580725][T11438] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'. [ 116.594880][T11432] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.2862: couldn't read orphan inode 15 (err -117) [ 116.608404][T11438] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'. [ 116.618473][ T29] audit: type=1326 audit(1732315237.126:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 116.642016][ T29] audit: type=1326 audit(1732315237.136:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 116.665425][ T29] audit: type=1326 audit(1732315237.136:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 116.689004][T11438] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'. [ 116.698154][T11438] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'. [ 116.707256][T11438] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'. [ 116.737859][T11438] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'. [ 116.747003][T11438] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'. [ 116.858037][ T24] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 116.865830][ T24] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 116.887416][ T24] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 116.897485][ T24] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 116.944744][T11484] loop2: detected capacity change from 0 to 512 [ 116.954347][T11484] EXT4-fs: Ignoring removed i_version option [ 116.960527][T11484] EXT4-fs: Ignoring removed nobh option [ 116.966552][T11484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.979411][T11484] EXT4-fs (loop2): 1 truncate cleaned up [ 117.012424][T11482] loop8: detected capacity change from 0 to 8192 [ 117.160948][T11514] loop2: detected capacity change from 0 to 1024 [ 117.168334][T11514] EXT4-fs: Ignoring removed orlov option [ 117.174041][T11514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.274358][T11535] loop0: detected capacity change from 0 to 512 [ 117.281743][T11535] EXT4-fs: Ignoring removed i_version option [ 117.287867][T11535] EXT4-fs: Ignoring removed nobh option [ 117.294145][T11535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.324106][T11535] EXT4-fs (loop0): 1 truncate cleaned up [ 117.363919][T11548] syz.1.2901[11548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.363980][T11548] syz.1.2901[11548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.375867][T11548] syz.1.2901[11548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.405661][T11550] loop9: detected capacity change from 0 to 512 [ 117.426513][T11553] loop1: detected capacity change from 0 to 164 [ 117.444545][T11550] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 117.507076][ T7509] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 117.514837][ T7509] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 117.522823][ T7509] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 117.532791][ T7509] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 117.578797][T11575] wireguard0: entered promiscuous mode [ 117.584318][T11575] wireguard0: entered allmulticast mode [ 117.586585][T11578] syz.0.2915[11578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.589986][T11578] syz.0.2915[11578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.601789][T11578] syz.0.2915[11578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.170420][ T7509] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 118.189657][ T7509] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 118.197452][ T7509] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 118.205611][ T7509] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 118.399006][T11624] wireguard0: entered promiscuous mode [ 118.404668][T11624] wireguard0: entered allmulticast mode [ 118.494333][ T3396] kernel read not supported for file /sysvipc/msg (pid: 3396 comm: kworker/1:5) [ 118.687672][T11651] hub 2-0:1.0: USB hub found [ 118.692437][T11651] hub 2-0:1.0: 8 ports detected [ 118.744038][T11662] loop1: detected capacity change from 0 to 128 [ 118.750502][T11659] wireguard0: entered promiscuous mode [ 118.756051][T11659] wireguard0: entered allmulticast mode [ 118.801336][T11669] batadv_slave_1: entered promiscuous mode [ 118.807739][T11669] batadv_slave_1: left promiscuous mode [ 118.847079][T11673] loop1: detected capacity change from 0 to 1024 [ 118.853828][T11673] EXT4-fs: Ignoring removed orlov option [ 118.859605][T11673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.047832][T11706] loop9: detected capacity change from 0 to 512 [ 119.054602][T11706] EXT4-fs: Ignoring removed i_version option [ 119.060677][T11706] EXT4-fs: Ignoring removed nobh option [ 119.067123][T11706] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 119.097192][T11706] EXT4-fs (loop9): 1 truncate cleaned up [ 119.123896][T11720] loop2: detected capacity change from 0 to 164 [ 119.319042][ T7509] kernel read not supported for file /sysvipc/msg (pid: 7509 comm: kworker/0:6) [ 119.497821][T11778] xt_hashlimit: max too large, truncated to 1048576 [ 119.749625][T11810] xt_hashlimit: max too large, truncated to 1048576 [ 119.860148][T11826] loop9: detected capacity change from 0 to 1024 [ 119.868463][T11826] EXT4-fs: Ignoring removed orlov option [ 119.874148][T11826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.881818][T11831] batadv_slave_1: entered promiscuous mode [ 119.888630][T11832] netlink: 'syz.0.3019': attribute type 21 has an invalid length. [ 119.897335][T11831] batadv_slave_1: left promiscuous mode [ 119.903719][T11834] tmpfs: Unknown parameter 'dont_hash' [ 119.931366][T11838] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 120.027909][T11847] ebtables: ebtables: counters copy to user failed while replacing table [ 120.102990][T11859] loop8: detected capacity change from 0 to 512 [ 120.118336][T11859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.151472][T11859] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 120.159452][T11859] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 120.177903][T11859] System zones: 0-1, 15-15, 18-18, 34-34 [ 120.187321][T11859] EXT4-fs (loop8): orphan cleanup on readonly fs [ 120.197002][T11859] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.211639][T11859] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 120.226427][T11871] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 120.255217][T11859] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3031: bg 0: block 40: padding at end of block bitmap is not set [ 120.284947][T11859] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 120.291500][T11875] loop0: detected capacity change from 0 to 1024 [ 120.300562][T11875] EXT4-fs: Ignoring removed orlov option [ 120.302719][T11859] EXT4-fs (loop8): 1 truncate cleaned up [ 120.306333][T11875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.336292][T11859] EXT4-fs (loop8): shut down requested (1) [ 120.348614][T11859] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 120.357620][T11859] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 120.360832][T11879] loop1: detected capacity change from 0 to 512 [ 120.366817][T11859] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 120.381815][T11859] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 120.422058][T11879] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.3041: corrupted xattr block 95: invalid header [ 120.451450][T11879] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3041: bg 0: block 7: invalid block bitmap [ 120.471449][T11879] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 120.488485][T11895] usb usb5: usbfs: process 11895 (syz.0.3045) did not claim interface 4 before use [ 120.527555][T11879] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.3041: corrupted xattr block 95: invalid header [ 120.554972][T11879] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 120.590591][T11879] EXT4-fs (loop1): 1 orphan inode deleted [ 120.741990][T11918] netlink: 'syz.9.3057': attribute type 4 has an invalid length. [ 120.809352][T11928] netlink: 'syz.8.3062': attribute type 1 has an invalid length. [ 120.838642][T11927] hub 2-0:1.0: USB hub found [ 120.848765][T11927] hub 2-0:1.0: 8 ports detected [ 120.915202][ C0] ------------[ cut here ]------------ [ 120.920723][ C0] refcount_t: underflow; use-after-free. [ 120.926636][ C0] WARNING: CPU: 0 PID: 7558 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 120.936084][ C0] Modules linked in: [ 120.940018][ C0] CPU: 0 UID: 0 PID: 7558 Comm: kworker/0:8 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 120.950472][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 120.960551][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 120.966360][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 120.972569][ C0] Code: 72 ff ff ff e8 3b 5c 70 ff 48 c7 c7 e9 37 b3 86 e8 4f a6 89 ff c6 05 41 22 f3 04 01 90 48 c7 c7 7b 34 1c 86 e8 8b f5 51 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 0c 5c 70 ff 48 c7 c7 e6 37 b3 86 e8 [ 120.992241][ C0] RSP: 0018:ffffc90000003b60 EFLAGS: 00010246 [ 120.998348][ C0] RAX: ace7994a9e672200 RBX: ffff888108bba8e4 RCX: ffff8881042aa100 [ 121.006363][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.014380][ C0] RBP: 0000000000000003 R08: ffffffff81120ca7 R09: 0000000000000000 [ 121.022424][ C0] R10: 0001ffffffffffff R11: ffff8881042aa100 R12: 0000000000000001 [ 121.030442][ C0] R13: ffff8881185c6800 R14: ffff888108bba8e4 R15: 0000000000000000 [ 121.038475][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 121.047438][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.054025][ C0] CR2: 00007f5dcf6a7bac CR3: 000000010adde000 CR4: 00000000003506f0 [ 121.062026][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.070013][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 121.078019][ C0] Call Trace: [ 121.081298][ C0] [ 121.084135][ C0] ? __warn+0x141/0x350 [ 121.088296][ C0] ? report_bug+0x315/0x420 [ 121.092852][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 121.098420][ C0] ? handle_bug+0x60/0x90 [ 121.102760][ C0] ? exc_invalid_op+0x1a/0x50 [ 121.107457][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 121.112472][ C0] ? __warn_printk+0x167/0x1b0 [ 121.117245][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 121.122789][ C0] sk_skb_reason_drop+0xe9/0x290 [ 121.127745][ C0] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 121.132623][ C0] j1939_tp_recv+0x699/0xa80 [ 121.137226][ C0] j1939_can_recv+0x45f/0x550 [ 121.141895][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 121.147116][ C0] can_rcv_filter+0x225/0x4c0 [ 121.151793][ C0] can_receive+0x182/0x1f0 [ 121.156215][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 121.160717][ C0] can_rcv+0xe7/0x180 [ 121.164692][ C0] ? __pfx_can_rcv+0x10/0x10 [ 121.169301][ C0] __netif_receive_skb+0x123/0x280 [ 121.174432][ C0] process_backlog+0x22e/0x440 [ 121.179220][ C0] __napi_poll+0x63/0x3c0 [ 121.183570][ C0] ? net_rx_action+0x376/0x7f0 [ 121.188356][ C0] net_rx_action+0x3a1/0x7f0 [ 121.192949][ C0] handle_softirqs+0xbf/0x280 [ 121.197640][ C0] ? srcu_invoke_callbacks+0x140/0x250 [ 121.203109][ C0] do_softirq+0x5e/0x90 [ 121.207265][ C0] [ 121.210183][ C0] [ 121.213099][ C0] __local_bh_enable_ip+0x6e/0x70 [ 121.218122][ C0] srcu_invoke_callbacks+0x16c/0x250 [ 121.223407][ C0] process_scheduled_works+0x483/0x9a0 [ 121.228884][ C0] worker_thread+0x51d/0x6f0 [ 121.233499][ C0] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 121.238905][ C0] ? __pfx_worker_thread+0x10/0x10 [ 121.244015][ C0] kthread+0x1d1/0x210 [ 121.248111][ C0] ? __pfx_kthread+0x10/0x10 [ 121.252694][ C0] ret_from_fork+0x4b/0x60 [ 121.257114][ C0] ? __pfx_kthread+0x10/0x10 [ 121.261705][ C0] ret_from_fork_asm+0x1a/0x30 [ 121.266476][ C0] [ 121.269482][ C0] ---[ end trace 0000000000000000 ]--- [ 121.345086][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 121.345105][ T29] audit: type=1326 audit(1732315241.856:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.9.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e37e6e819 code=0x7ffc0000 [ 121.374929][ T29] audit: type=1326 audit(1732315241.856:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 121.398509][ T29] audit: type=1326 audit(1732315241.856:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11947 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 121.422098][ T29] audit: type=1326 audit(1732315241.856:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.9.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e37e6e819 code=0x7ffc0000 [ 121.445662][ T29] audit: type=1326 audit(1732315241.856:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.9.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e37e6e819 code=0x7ffc0000 [ 121.469235][ T29] audit: type=1326 audit(1732315241.856:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.9.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e37e6e819 code=0x7ffc0000 [ 121.492782][ T29] audit: type=1326 audit(1732315241.856:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.9.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e37e6e819 code=0x7ffc0000 [ 121.516402][ T29] audit: type=1326 audit(1732315241.856:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.9.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e37e6e819 code=0x7ffc0000 [ 121.539971][ T29] audit: type=1326 audit(1732315241.856:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.9.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e37e6e819 code=0x7ffc0000 [ 121.563567][ T29] audit: type=1326 audit(1732315241.856:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.9.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e37e6e819 code=0x7ffc0000 [ 121.659380][T11959] ebtables: ebtables: counters copy to user failed while replacing table [ 121.838982][T11985] __nla_validate_parse: 8 callbacks suppressed [ 121.839001][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3088'. [ 121.859226][T11987] usb usb5: usbfs: process 11987 (syz.1.3089) did not claim interface 4 before use [ 121.944266][T11991] ebtables: ebtables: counters copy to user failed while replacing table [ 122.016757][T12008] loop0: detected capacity change from 0 to 512 [ 122.034468][T12008] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.3095: corrupted xattr block 95: invalid header [ 122.048960][T12008] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3095: bg 0: block 7: invalid block bitmap [ 122.061435][T12008] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 122.070570][T12008] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.3095: corrupted xattr block 95: invalid header [ 122.084177][T12008] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 122.093240][T12008] EXT4-fs (loop0): 1 orphan inode deleted [ 122.300570][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881185c6800: rx timeout, send abort [ 122.308878][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881185c6a00: rx timeout, send abort [ 122.317087][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881185c6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.331366][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881185c6a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.369859][T12018] loop0: detected capacity change from 0 to 512 [ 122.372671][T12014] loop8: detected capacity change from 0 to 1024 [ 122.390086][T12014] EXT4-fs: Ignoring removed orlov option [ 122.396019][T12014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.405859][T12018] ext4 filesystem being mounted at /697/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.405949][T12023] loop1: detected capacity change from 0 to 512 [ 122.416222][T12020] wireguard0: entered promiscuous mode [ 122.427972][T12020] wireguard0: entered allmulticast mode [ 122.436885][T12023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.483237][T12023] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 122.491254][T12023] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 122.504371][T12023] System zones: 0-1, 15-15, 18-18, 34-34 [ 122.511227][T12023] EXT4-fs (loop1): orphan cleanup on readonly fs [ 122.517698][T12023] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 122.532284][T12023] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 122.540269][T12023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3100: bg 0: block 40: padding at end of block bitmap is not set [ 122.575689][T12023] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 122.615136][T12023] EXT4-fs (loop1): 1 truncate cleaned up [ 122.638973][T12023] EXT4-fs (loop1): shut down requested (1) [ 122.650017][T12023] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 122.675246][T12023] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 122.687347][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 122.696433][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 122.711322][T12023] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 122.715076][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 122.721211][T12023] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 122.752616][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 122.761794][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 122.809895][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 122.833753][T12062] batadv_slave_1: entered promiscuous mode [ 122.839757][T12062] batadv_slave_1: left allmulticast mode [ 122.872127][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 122.881149][T12061] ebtables: ebtables: counters copy to user failed while replacing table [ 122.889696][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 122.898721][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3112'. [ 123.016347][T12094] loop0: detected capacity change from 0 to 512 [ 123.023109][T12094] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.029760][T12090] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 123.047012][T12094] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 123.065078][T12094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 123.079582][T12094] System zones: 1-12 [ 123.088291][T12094] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3133: corrupted in-inode xattr: e_value size too large [ 123.111194][T12094] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3133: couldn't read orphan inode 15 (err -117) [ 123.153586][T12109] ebtables: ebtables: counters copy to user failed while replacing table [ 123.179540][T12115] loop0: detected capacity change from 0 to 1024 [ 123.188630][T12115] EXT4-fs: Ignoring removed orlov option [ 123.194449][T12115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.256617][T12131] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 123.332533][T12142] loop1: detected capacity change from 0 to 512 [ 123.339451][T12142] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.346753][T12142] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 123.367135][T12142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 123.376484][T12142] System zones: 1-12 [ 123.380641][T12142] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3151: corrupted in-inode xattr: e_value size too large [ 123.396378][T12142] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3151: couldn't read orphan inode 15 (err -117) [ 123.408812][T12146] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 123.416581][T12146] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 123.512489][T12162] loop2: detected capacity change from 0 to 1024 [ 123.519199][T12162] EXT4-fs: Ignoring removed orlov option [ 123.524976][T12162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.573504][T12169] loop1: detected capacity change from 0 to 512 [ 123.592005][T12169] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 123.601295][T12169] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.607966][T12169] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 123.623962][T12169] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 123.629280][T12174] x_tables: duplicate underflow at hook 1 [ 123.631613][T12169] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.3162: casefold flag without casefold feature [ 123.649906][T12169] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3162: couldn't read orphan inode 16 (err -117) [ 123.692210][T12180] loop2: detected capacity change from 0 to 512 [ 123.699437][T12180] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.707840][T12180] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 123.717222][T12180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 123.726525][T12180] System zones: 1-12 [ 123.730727][T12180] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3166: corrupted in-inode xattr: e_value size too large [ 123.746350][T12180] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3166: couldn't read orphan inode 15 (err -117) [ 123.875108][T12205] loop8: detected capacity change from 0 to 512 [ 123.891216][T12209] loop2: detected capacity change from 0 to 512 [ 123.897926][T12205] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 123.906493][T12205] EXT4-fs (loop8): orphan cleanup on readonly fs [ 123.913574][T12209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.923620][T12205] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 123.939394][T12205] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 123.967968][T12216] loop1: detected capacity change from 0 to 128 [ 123.970282][T12209] EXT4-fs (loop2): 1 truncate cleaned up [ 123.981822][T12205] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #16: comm syz.8.3177: casefold flag without casefold feature [ 123.983355][T12216] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 124.002321][T12216] FAT-fs (loop1): Filesystem has been set read-only [ 124.011155][T12216] syz.1.3183: attempt to access beyond end of device [ 124.011155][T12216] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 124.024948][T12216] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 124.032819][T12216] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 124.042461][T12216] syz.1.3183: attempt to access beyond end of device [ 124.042461][T12216] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.055806][T12205] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3177: couldn't read orphan inode 16 (err -117) [ 124.057408][T12216] syz.1.3183: attempt to access beyond end of device [ 124.057408][T12216] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.081648][T12216] syz.1.3183: attempt to access beyond end of device [ 124.081648][T12216] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.151669][T12234] loop8: detected capacity change from 0 to 512 [ 124.174816][T12234] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 124.186507][T12238] x_tables: duplicate underflow at hook 1 [ 124.191931][T12236] loop2: detected capacity change from 0 to 512 [ 124.202364][T12234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 124.210539][T12234] System zones: 1-12 [ 124.214840][T12234] EXT4-fs (loop8): orphan cleanup on readonly fs [ 124.216285][T12241] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 124.231893][T12234] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 124.249011][T12234] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 124.259096][T12236] ext4 filesystem being mounted at /664/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.270567][T12234] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 124.290630][T12236] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.3200: corrupted xattr block 32: bad e_name length [ 124.306128][T12234] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 124.331496][T12236] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 124.340581][T12236] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.3200: corrupted xattr block 32: bad e_name length [ 124.356737][T12236] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 124.360170][T12234] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 124.365888][T12236] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.3200: corrupted xattr block 32: bad e_name length [ 124.392115][T12236] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.3200: corrupted xattr block 32: bad e_name length [ 124.405897][T12236] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 124.415147][T12255] syz.9.3201 (12255) used greatest stack depth: 8840 bytes left [ 124.444465][T12234] EXT4-fs (loop8): 1 truncate cleaned up [ 124.472492][T12234] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 124.517706][T12265] wireguard0: entered promiscuous mode [ 124.523230][T12265] wireguard0: entered allmulticast mode [ 124.580730][T12280] block device autoloading is deprecated and will be removed. [ 124.588506][T12280] syz.2.3222: attempt to access beyond end of device [ 124.588506][T12280] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 124.664260][T12294] loop0: detected capacity change from 0 to 512 [ 124.671541][T12294] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.695835][T12294] EXT4-fs (loop0): 1 truncate cleaned up [ 124.706400][T12299] binfmt_misc: register: failed to install interpreter file ./file0 [ 124.772465][T12315] loop0: detected capacity change from 0 to 512 [ 124.779409][T12315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.798067][T12315] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 124.806094][T12315] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 124.814765][T12315] System zones: 0-1, 15-15, 18-18, 34-34 [ 124.823373][T12315] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.829868][T12315] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 124.844499][T12315] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 124.851405][T12319] wireguard0: entered promiscuous mode [ 124.855014][T12315] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3230: bg 0: block 40: padding at end of block bitmap is not set [ 124.856919][T12319] wireguard0: entered allmulticast mode [ 124.880657][T12315] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 124.889688][T12324] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 124.896879][T12315] EXT4-fs (loop0): 1 truncate cleaned up [ 124.915553][T12315] EXT4-fs (loop0): shut down requested (1) [ 124.922081][T12315] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 124.932565][T12330] netlink: 'syz.1.3235': attribute type 29 has an invalid length. [ 124.935524][T12315] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 124.941258][T12330] netlink: 'syz.1.3235': attribute type 29 has an invalid length. [ 124.960183][T12315] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 124.969267][T12315] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 125.026534][T12336] netlink: 'syz.0.3236': attribute type 10 has an invalid length. [ 125.034619][T12336] team0: Device hsr_slave_0 failed to register rx_handler [ 125.070018][T12340] batadv_slave_1: entered promiscuous mode [ 125.075959][T12340] batadv_slave_1: left allmulticast mode [ 125.121151][T12350] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.201983][T12358] loop2: detected capacity change from 0 to 512 [ 125.209193][T12358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.220880][T12362] loop0: detected capacity change from 0 to 512 [ 125.238155][T12358] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.238702][T12362] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.246148][T12358] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 125.266190][T12358] System zones: 0-1, 15-15, 18-18, 34-34 [ 125.277124][T12358] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.289104][T12358] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.303800][T12358] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 125.313876][T12362] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.3259: corrupted xattr block 32: bad e_name length [ 125.336530][T12358] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3249: bg 0: block 40: padding at end of block bitmap is not set [ 125.353549][T12358] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 125.362943][T12358] EXT4-fs (loop2): 1 truncate cleaned up [ 125.368795][T12362] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 125.386515][T12373] wireguard0: entered promiscuous mode [ 125.389355][T12362] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.3259: corrupted xattr block 32: bad e_name length [ 125.392103][T12373] wireguard0: entered allmulticast mode [ 125.419426][T12362] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 125.419983][T12358] EXT4-fs (loop2): shut down requested (1) [ 125.433325][T12362] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.3259: corrupted xattr block 32: bad e_name length [ 125.439713][T12358] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 125.451031][T12362] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.3259: corrupted xattr block 32: bad e_name length [ 125.456445][T12358] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 125.472316][T12362] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 125.490952][T12358] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 125.500062][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.507812][T12358] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 125.516701][T12380] batadv_slave_1: entered promiscuous mode [ 125.547469][T12385] loop8: detected capacity change from 0 to 128 [ 125.558852][T12385] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 125.566982][T12385] FAT-fs (loop8): Filesystem has been set read-only [ 125.573848][T12385] syz.8.3257: attempt to access beyond end of device [ 125.573848][T12385] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 125.587666][T12385] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 125.595557][T12385] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 125.604028][T12385] syz.8.3257: attempt to access beyond end of device [ 125.604028][T12385] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.620387][T12385] syz.8.3257: attempt to access beyond end of device [ 125.620387][T12385] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.754798][T12408] loop9: detected capacity change from 0 to 512 [ 125.762952][T12412] loop1: detected capacity change from 0 to 128 [ 125.779076][T12412] FAT-fs (loop1): FAT read failed (blocknr 234) [ 125.787991][T12412] FAT-fs (loop1): FAT read failed (blocknr 234) [ 125.798382][T12408] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.817668][T12408] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.3271: corrupted xattr block 32: bad e_name length [ 125.839071][T12408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 125.848169][T12408] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.3271: corrupted xattr block 32: bad e_name length [ 125.871142][T12408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 125.881551][T12408] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.3271: corrupted xattr block 32: bad e_name length [ 125.916347][T12424] loop0: detected capacity change from 0 to 128 [ 125.934376][T12426] netlink: 'syz.2.3281': attribute type 10 has an invalid length. [ 125.942588][T12426] team0: Device hsr_slave_0 failed to register rx_handler [ 125.945015][T12408] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.3271: corrupted xattr block 32: bad e_name length [ 125.965465][T12408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 125.969532][T12424] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 125.982445][T12424] FAT-fs (loop0): Filesystem has been set read-only [ 125.989264][T12424] syz.0.3279: attempt to access beyond end of device [ 125.989264][T12424] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 126.003222][T12424] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 126.011172][T12424] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 126.025295][T12424] syz.0.3279: attempt to access beyond end of device [ 126.025295][T12424] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.072482][T12435] IPVS: Error joining to the multicast group [ 126.086822][T12438] loop1: detected capacity change from 0 to 512 [ 126.103928][T12438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.128004][T12438] EXT4-fs (loop1): 1 truncate cleaned up [ 126.162317][T12455] netlink: 'syz.2.3294': attribute type 29 has an invalid length. [ 126.171131][T12455] netlink: 'syz.2.3294': attribute type 29 has an invalid length. [ 126.218467][T12462] loop1: detected capacity change from 0 to 512 [ 126.226666][T12462] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 126.247313][T12462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 126.255408][T12462] System zones: 1-12 [ 126.259560][T12462] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.266399][T12462] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 126.280638][T12462] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 126.290324][T12462] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 126.305265][T12462] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 126.319533][T12462] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 126.334275][T12462] EXT4-fs (loop1): 1 truncate cleaned up [ 126.346095][T12462] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 126.411547][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 126.411562][ T29] audit: type=1326 audit(1732315246.946:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 126.442569][ T29] audit: type=1326 audit(1732315246.956:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 126.465568][ T29] audit: type=1326 audit(1732315246.956:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 126.488682][ T29] audit: type=1326 audit(1732315246.956:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1478bfe819 code=0x7ffc0000 [ 126.530736][T12491] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 126.533794][T12493] loop2: detected capacity change from 0 to 128 [ 126.541860][T12490] IPVS: stopping backup sync thread 12491 ... [ 126.569772][T12493] FAT-fs (loop2): FAT read failed (blocknr 234) [ 126.577125][T12493] FAT-fs (loop2): FAT read failed (blocknr 234) [ 126.603030][T12497] loop9: detected capacity change from 0 to 2048 [ 126.609312][ T29] audit: type=1326 audit(1732315247.146:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.1.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 126.633065][ T29] audit: type=1326 audit(1732315247.146:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.1.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 126.656817][ T29] audit: type=1326 audit(1732315247.146:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.1.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 126.680705][ T29] audit: type=1326 audit(1732315247.146:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.1.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 126.704378][ T29] audit: type=1326 audit(1732315247.146:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.1.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 126.727931][ T29] audit: type=1326 audit(1732315247.146:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.1.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb8fe819 code=0x7ffc0000 [ 126.813217][T12511] loop9: detected capacity change from 0 to 256 [ 126.885371][T12526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 126.892031][T12526] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 126.899746][T12526] vhci_hcd vhci_hcd.0: Device attached [ 126.906398][T12527] vhci_hcd: connection closed [ 126.906640][ T2096] vhci_hcd: stop threads [ 126.915769][ T2096] vhci_hcd: release socket [ 126.920415][ T2096] vhci_hcd: disconnect device [ 127.081894][T12556] loop1: detected capacity change from 0 to 512 [ 127.091547][T12559] IPVS: Error joining to the multicast group [ 127.101479][T12556] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.3338: iget: bogus i_mode (0) [ 127.113446][T12556] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3338: couldn't read orphan inode 17 (err -117) [ 127.126553][T12556] EXT4-fs mount: 77 callbacks suppressed [ 127.126569][T12556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.161825][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.181345][T12572] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 127.189937][T12570] IPVS: stopping backup sync thread 12572 ... [ 127.202751][T12574] wireguard0: entered promiscuous mode [ 127.208337][T12574] wireguard0: entered allmulticast mode [ 127.336485][T12591] IPVS: Error joining to the multicast group [ 127.425852][T12609] ================================================================== [ 127.433999][T12609] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_free_area [ 127.441497][T12609] [ 127.443825][T12609] read-write to 0xffffffff88c092ec of 4 bytes by task 2096 on cpu 0: [ 127.451909][T12609] pcpu_free_area+0x4dc/0x570 [ 127.453774][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.456597][T12609] free_percpu+0x1c6/0xb30 [ 127.456634][T12609] array_map_free+0x28b/0x300 [ 127.465225][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.469356][T12609] bpf_map_free_deferred+0xb0/0x140 [ 127.486953][T12609] process_scheduled_works+0x483/0x9a0 [ 127.492420][T12609] worker_thread+0x51d/0x6f0 [ 127.497016][T12609] kthread+0x1d1/0x210 [ 127.501082][T12609] ret_from_fork+0x4b/0x60 [ 127.505529][T12609] ret_from_fork_asm+0x1a/0x30 [ 127.510309][T12609] [ 127.512622][T12609] read to 0xffffffff88c092ec of 4 bytes by task 12609 on cpu 1: [ 127.520256][T12609] pcpu_alloc_noprof+0x9b6/0x10a0 [ 127.525282][T12609] ipv6_add_dev+0x2ee/0xab0 [ 127.529780][T12609] addrconf_notify+0x407/0x950 [ 127.534546][T12609] raw_notifier_call_chain+0x6f/0x1d0 [ 127.539920][T12609] call_netdevice_notifiers_info+0xae/0x100 [ 127.545828][T12609] register_netdevice+0xca9/0xe30 [ 127.550870][T12609] wg_newlink+0x290/0x450 [ 127.555196][T12609] rtnl_newlink_create+0x1ab/0x5c0 [ 127.560314][T12609] rtnl_newlink+0xe3a/0x1200 [ 127.564914][T12609] rtnetlink_rcv_msg+0x651/0x710 [ 127.569863][T12609] netlink_rcv_skb+0x12c/0x230 [ 127.574623][T12609] rtnetlink_rcv+0x1c/0x30 [ 127.579038][T12609] netlink_unicast+0x599/0x670 [ 127.583801][T12609] netlink_sendmsg+0x5cc/0x6e0 [ 127.588566][T12609] __sock_sendmsg+0x140/0x180 [ 127.593235][T12609] ____sys_sendmsg+0x312/0x410 [ 127.598019][T12609] __sys_sendmsg+0x19d/0x230 [ 127.602610][T12609] __x64_sys_sendmsg+0x46/0x50 [ 127.607380][T12609] x64_sys_call+0x2734/0x2dc0 [ 127.612068][T12609] do_syscall_64+0xc9/0x1c0 [ 127.616565][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.622469][T12609] [ 127.624786][T12609] value changed: 0x00000099 -> 0x0000009a [ 127.630494][T12609] [ 127.632805][T12609] Reported by Kernel Concurrency Sanitizer on: [ 127.638951][T12609] CPU: 1 UID: 0 PID: 12609 Comm: syz.0.3362 Tainted: G W 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 127.650855][T12609] Tainted: [W]=WARN [ 127.654683][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 127.664754][T12609] ================================================================== [ 127.677183][T12609] wireguard0: entered promiscuous mode [ 127.682770][T12609] wireguard0: entered allmulticast mode [ 127.733527][T12619] geneve0 speed is unknown, defaulting to 1000