last executing test programs: 1m15.890009221s ago: executing program 2 (id=1170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000002c0)='./bus/file0\x00', 0x40) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) 1m15.796419691s ago: executing program 2 (id=1171): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) 1m15.795963901s ago: executing program 2 (id=1172): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0042}]}) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m15.780149031s ago: executing program 2 (id=1174): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000001700)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 1m15.72743344s ago: executing program 2 (id=1175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@data_err_ignore}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x4}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 1m15.64819955s ago: executing program 2 (id=1178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x1) epoll_pwait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000002680)={0x2}) 1m15.64769025s ago: executing program 32 (id=1178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r1 = epoll_create(0x1) epoll_pwait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000002680)={0x2}) 57.688009651s ago: executing program 3 (id=1770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 57.687465851s ago: executing program 3 (id=1771): socket$inet6(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007100000000000000029"], 0x30}, 0x0) 57.667727731s ago: executing program 3 (id=1773): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x28242, 0x880}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x4000840) 57.601414551s ago: executing program 3 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x297881, 0x0) 57.582197311s ago: executing program 3 (id=1776): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00') 57.3373721s ago: executing program 3 (id=1788): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000440)={0x200000, 0x200000, 0x0, 0x0, 0x2}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 57.30689539s ago: executing program 33 (id=1788): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000440)={0x200000, 0x200000, 0x0, 0x0, 0x2}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 56.412238666s ago: executing program 1 (id=1816): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[], 0x0) 56.307466786s ago: executing program 4 (id=1818): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 56.255817706s ago: executing program 4 (id=1820): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0}) 56.234305936s ago: executing program 4 (id=1821): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fsmount(r0, 0x0, 0x0) 56.182779286s ago: executing program 4 (id=1823): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7fffffff, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0082000010000000aff571ec3199bde4004000", [0x0, 0x2]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 55.939086445s ago: executing program 4 (id=1827): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 55.749566334s ago: executing program 1 (id=1830): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_to_batadv\x00'}}, 0x1e) close(r0) 55.667610034s ago: executing program 1 (id=1833): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 55.506116143s ago: executing program 1 (id=1836): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 55.416375093s ago: executing program 1 (id=1837): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 55.371929182s ago: executing program 1 (id=1839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 55.360192082s ago: executing program 34 (id=1839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 55.277777272s ago: executing program 4 (id=1841): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xc3], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) 55.260543272s ago: executing program 35 (id=1841): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xc3], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) 23.733523562s ago: executing program 0 (id=2787): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r1, 0xb}}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10015, &(0x7f0000000200), 0x8, 0x601, &(0x7f0000000ac0)="$eJzs3c1vFOUfAPDvTF9pfz+3EKPiQZoYA4nS0gKGGBPhTgi+3DxVWghSKKE1WiSxJHgxMV48mHjyIP4XSuLVf8CDF0+GhBjDQQyRNbOdLdPtbunb7pbdzycZ+jwz7DzPNPvtd/bZZ2YC6Fqj2T9pxP6IuJpElArbeiPfOLr8/+7/deNctiRRLr/7ZxI3PkuWivtK8p/D+Yv/LUWSrdzXs7bd+cXrl6ZmZ2eu5fXxhctXx+cXrx++eHnqwsyFmSuTr0+eOH7s+ImJI9s6vrRQPn3rw49LX5x5//tvHyYTP/x2JomT8SjvW3Zcta8d2FbL2e9sNMrLHhTXZ7/XE9vc927xd6n6PnksqV3BrnU+fz/2RcTzUYqewru+FJ+/3dbOAU1VTlZyZBnoNsmWAn9w5zsCtFj1PKD62b7e5+C10maekgAtcu/U8gDAcuz3RUQ1/nuXxwZjsDI2MHQ/WTXOk0TE9kbmlmVt/PLzmVvZEg3G4YDmWLpZHe+rzf9JJTZHYrBSG7qfror/tLBk69/ZYvujNXXxD62zdDMiXsjzf39sKv5HC/H/wRbbF/8AAAAAAACwc+6ciojX6s3/S1fm//TXmf8zHBEnd6D9J3//l97NC8kONAcU3DsV8Wbd+b8rc3xHevLa/yvzAfqS8xdnZ45ExDMRcSj6BrL6RM1+izOED3+575tG7Rfn/2VL1n51LmC+p7u9NRfiTk8tTG33uIGIezcjXqzM/z2Qr1k9/yfL/0md/J/F99UNtrHvldtnG217cvwDzVL+LuJg3fz/+HQ7Wf/+HOOV84Hx6lnBWi99+tWPjdoX/9A+Wf4fWj/+B5Li/XrmN7f//og4uthbbrR9q+f//cl7PdX9Zz6ZWli4NhHRn5xeu35yc32GTlWNh2q8ZPF/6OX1x/9Wzv8LcbgnIpY22OZzj4Z/b7RN/of2yeJ/ev38P7I6/2++MHl75KdG7Z/dUP4/Vsnph/I1xv+gaO39ODYaoG3pLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA85dKI+F8k6dhKOU3HxiKGI+LZGEpn5+YXXj0/99GV6Wxb5fn/afVJv6XlelJ9/v9IoT5ZUz8aEXsj4uuePZX62Lm52el2HzwAAAAAAAAAAAAAAAAAAADsEsOVa/7LA7XX/2f+6Gl374Cm681/infoPr1bfmV5YEc7ArTc1uMfeNo1jv/a9N7X9L4ArdU4/h88LFe0tDtACzn/h+61xfj3dQF0APkfutUGx/QGm90PoB3kfwAAAAAA6Ch7D9z5NYmIpTf2VJZMf77NZH/obGm7OwC0jTm80L1659rdA6BdfMYHkpXSP3Uv9m88+z9pTocAAAAAAAAAAAAAgDUO7nf9P3Sr9a//N7cfOtk61//XC363C4AO0vjRH3I/dDqf8aGrlUsbyPau/wcAAAAAAAAAAACAXWDw+qWp2dmZa/OLT1/hrd3Rjc0VlqZ2RTd2tPCoOXvui4jdcYCtLlRvwdHGbrT57xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDivwAAAP//HW8gzQ==") write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 23.48582756s ago: executing program 0 (id=2793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 23.39451516s ago: executing program 0 (id=2797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 23.192359499s ago: executing program 0 (id=2802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 22.913008018s ago: executing program 0 (id=2810): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r3], 0x3c}}, 0x0) 22.575262307s ago: executing program 0 (id=2815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000001400018008000100", @ANYRES32=r4, @ANYBLOB="0800030002000000180003801400038010"], 0x40}}, 0x0) 22.531852727s ago: executing program 36 (id=2815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000001400018008000100", @ANYRES32=r4, @ANYBLOB="0800030002000000180003801400038010"], 0x40}}, 0x0) 1.312050635s ago: executing program 6 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 1.249761845s ago: executing program 6 (id=3396): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOwuuwsFVXUSdzda7QGWEwK0EmKPIHVD4kZR7DiKndKEHtIzVyQqcYIjfwDnnrhzQXDjUg5I/IhADRIHoxlPUje1m6hJ7Cj+fKTRvDdv6u97Tee9+pvEL4CR9XZE7EVEMSI+i4iZ7HouO+LjzpHc92T//vLB/v3lXLTbn/4zl7Yn16LrzySuZa9ZiogffifiJ7nn4zZ3dteXarXqVlafa9U355o7uzfX6kur1dXqRqWyuLA4/+GtDyrnNta36sWs9OXHf9j7xs+Sbk1nV7rHcZ46Qy8cxUmMR8T3LyLYEIxl4ykOuyO8lHxEvB4R76TP/0yMpV9NAOAqa7dnoj3TXQcArrp8mgPL5ctZLmA68vlyuZPDeyOm8rVGs3XjTmN7Y6WTK5uNQv7OWq06n+UKZ6OQS+oLaflpvXKsfisiXouIX0xMpvXycqO2Msz/+ADACLt2bP3/z0Rn/QcArrjSsDsAAAyc9R8ARo/1HwBGj/UfAEZPZ/2fHHY3AIAB8v4fAEaP9R8ARsoPPvkkOdoH2edfr9zd2V5v3L25Um2ul+vby+XlxtZmebXRWE0/s6d+0uvVGo3Nhfdj+97sNzebrbnmzu7temN7o3U7/Vzv29VCetfeAEYGAPTz2luP/pxLVuSPJtMjuvZyKAy1Z8BFyw+7A8DQjA27A8DQ2O0LRtcZ3uNLD8AV0WOL3meUev2CULvdbl9cl4ALdv0L8v8wqrry/34KGEaM/D+MLvl/GF3tdu60e/7HaW8EAC43OX6gz/f/X8/Ov82+OfDjleN3PLzIXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrj/bznbC3w68vlyOeKViJiNQu7OWq06HxGvRsSfJgoTSX1hyH0GAM4q/7dctv/X9Zn3pp9pevPaUbEYET/91ae/vLfUam39MaKY+9fE4fXWw+x6ZfC9BwBOdrhOJ+dHXW/kn+zfXz48Btmfv387Ikqd+Af7xTg4ij8e4+m5FIWImPp3Lqt35LpyF2ex9yAiPt9r/LmYTnMgnZ1Pj8dPYr8y0Pj5Z+Ln07bOOfm7+Nw59AVGzaNk/vm41/OXj7fTc+/nv5TOUGeXzX/JSy0fpHPg0/iH899Yn/nv1DHe//13O6XJ59seRHxxPOIw9kHX/HMYP9cn/nunjP+XL735Tr+29q8jrkfv+N2x5lr1zbnmzu7NtfrSanW1ulGpLC4szn9464PKXJqjnuu/Gvzjoxuv9mtLxj/VJ37phPF/9ZTj/83/PvvRV14Q/+vv9oqfjzdeED9ZE792yvhLU78r9WtL4q/0Gf9JX/8bLw77vWJWePzX3ee2DQcAhqe5s7u+VKtVtxQULn8h+Sd7CbrRs/CtQcUqRu+mn7/beaaPNbXbLxWr34xxHlk34DI4eugj4r/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//sUPPoQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 1.048962604s ago: executing program 7 (id=3401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 999.940415ms ago: executing program 6 (id=3403): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0xb) 955.576614ms ago: executing program 7 (id=3405): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xfff, 0x1, 0xc, 0x1}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 887.836294ms ago: executing program 6 (id=3408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 840.045374ms ago: executing program 7 (id=3409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x5, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4000009}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/218, 0xda}, 0xf}], 0x2, 0x2040, 0x0) 744.444423ms ago: executing program 6 (id=3411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454cc, 0x1d) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) 733.226753ms ago: executing program 7 (id=3413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') utime(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 691.807883ms ago: executing program 6 (id=3414): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) 640.332183ms ago: executing program 7 (id=3415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x6, 0x8, 0x8}]}, 0x10) 639.872573ms ago: executing program 7 (id=3416): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) 609.436703ms ago: executing program 8 (id=3418): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$unix(0x1, 0x2, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xa) 567.566913ms ago: executing program 8 (id=3421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x140) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 562.383503ms ago: executing program 8 (id=3423): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x408) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r0, 0x80047437, &(0x7f0000002300)) 540.959652ms ago: executing program 8 (id=3425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc0189436, 0x1ffffffe) 520.861053ms ago: executing program 8 (id=3427): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_nolock}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r1, 0x0, 0x0, 0x3000}]) 505.828043ms ago: executing program 5 (id=3428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000140)='./bus\x00', 0x1031e2, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 452.248252ms ago: executing program 5 (id=3429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 254.582981ms ago: executing program 8 (id=3430): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 253.899781ms ago: executing program 5 (id=3440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffc, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 228.454171ms ago: executing program 5 (id=3431): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r1}, 0x18) 206.821751ms ago: executing program 5 (id=3432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664ef4) 156.383721ms ago: executing program 5 (id=3433): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) 155.709021ms ago: executing program 9 (id=3434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) 134.209341ms ago: executing program 9 (id=3435): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 63.575391ms ago: executing program 9 (id=3436): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) 62.555461ms ago: executing program 9 (id=3437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1, 0x0, 0x4}}], 0x48, 0x40841}, 0x0) 43.514731ms ago: executing program 9 (id=3438): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r1, &(0x7f00000001c0)='syz0\x00', 0x1ff) 0s ago: executing program 9 (id=3439): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = syz_clone(0x200, 0x0, 0xffffffd3, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): y exists on: batadv_slave_0 [ 97.235293][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.245245][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.255697][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.266349][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.275958][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.286466][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.296324][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.306788][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.316663][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.327163][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.337000][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.347437][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.357427][ T8014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.367881][ T8014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.378415][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.389981][ T8014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.398846][ T8014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.407613][ T8014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.416356][ T8014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.435011][ T8018] veth0_macvtap: entered promiscuous mode [ 97.444646][ T8018] veth1_macvtap: entered promiscuous mode [ 97.457440][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.468110][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.477952][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.488436][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.498267][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.508689][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.518610][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.529053][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.538902][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.549508][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.559342][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.569776][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.581545][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.589606][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.600130][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.609967][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.620441][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.630316][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.640804][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.650775][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.661245][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.671063][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.681496][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.691396][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.701838][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.712932][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.741276][ T8018] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.750120][ T8018] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.759081][ T8018] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.767956][ T8018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.952933][ T8221] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.160736][ T8238] SELinux: syz.5.1910 (8238) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 98.333070][ T8260] loop5: detected capacity change from 0 to 2048 [ 98.385343][ T8267] netlink: 542 bytes leftover after parsing attributes in process `syz.6.1921'. [ 98.453935][ T8275] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1926'. [ 98.465588][ T8275] all: renamed from erspan0 (while UP) [ 98.526404][ T8281] loop5: detected capacity change from 0 to 1764 [ 98.537740][ T8281] bio_check_eod: 8 callbacks suppressed [ 98.537802][ T8281] syz.5.1925: attempt to access beyond end of device [ 98.537802][ T8281] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 98.594198][ T8288] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 98.997406][ T8328] capability: warning: `syz.8.1950' uses 32-bit capabilities (legacy support in use) [ 99.092812][ T8335] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1953'. [ 99.107314][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1953'. [ 99.239370][ T8343] loop8: detected capacity change from 0 to 512 [ 99.257029][ T8343] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 99.286096][ T8343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 99.294335][ T8343] System zones: 1-12 [ 99.321504][ T8343] EXT4-fs (loop8): orphan cleanup on readonly fs [ 99.330635][ T8343] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1956: bg 0: block 361: padding at end of block bitmap is not set [ 99.363776][ T8350] loop5: detected capacity change from 0 to 1024 [ 99.395825][ T8343] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 99.418864][ T8343] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.1956: attempt to clear invalid blocks 33619980 len 1 [ 99.447582][ T8343] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1956: invalid indirect mapped block 1811939328 (level 0) [ 99.450348][ T8350] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.463046][ T8343] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1956: invalid indirect mapped block 2 (level 2) [ 99.507429][ T8343] EXT4-fs (loop8): 1 truncate cleaned up [ 99.515321][ T8350] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1959: bg 0: block 393: padding at end of block bitmap is not set [ 99.554736][ T8350] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 99.567356][ T8350] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.567356][ T8350] [ 99.590068][ T8364] syz.0.1964[8364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.590198][ T8364] syz.0.1964[8364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.618419][ T8364] syz.0.1964[8364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.714906][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 99.714924][ T29] audit: type=1326 audit(1734219567.119:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b0df5d19 code=0x7ffc0000 [ 99.734903][ T8369] loop7: detected capacity change from 0 to 128 [ 99.774492][ T29] audit: type=1326 audit(1734219567.169:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f75b0df5d19 code=0x7ffc0000 [ 99.798026][ T29] audit: type=1326 audit(1734219567.169:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b0df5d19 code=0x7ffc0000 [ 99.823428][ T8379] wireguard0: entered promiscuous mode [ 99.829032][ T8379] wireguard0: entered allmulticast mode [ 99.932446][ T8390] Process accounting resumed [ 100.039522][ T8400] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 100.092562][ T8404] netlink: 664 bytes leftover after parsing attributes in process `syz.5.1979'. [ 100.162953][ T8412] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.172892][ T8412] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.277477][ T8412] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.287471][ T8412] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.337181][ T8412] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.347040][ T8412] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.369054][ T29] audit: type=1326 audit(1734219567.779:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 100.394286][ T29] audit: type=1326 audit(1734219567.779:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 100.421753][ T8412] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.431667][ T8412] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.484152][ T8412] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.492434][ T8412] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.505344][ T8412] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.513751][ T8412] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.528583][ T8412] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.536886][ T8412] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.550633][ T8412] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.558957][ T8412] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.442839][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888117f66a00: rx timeout, send abort [ 101.451250][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888117f66a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 101.535200][ T8430] wireguard0: entered promiscuous mode [ 101.540774][ T8430] wireguard0: entered allmulticast mode [ 101.646067][ T8447] netlink: 664 bytes leftover after parsing attributes in process `syz.6.2000'. [ 101.682802][ T29] audit: type=1326 audit(1734219569.089:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8ca35d19 code=0x7ffc0000 [ 101.706551][ T29] audit: type=1326 audit(1734219569.089:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8ca35d19 code=0x7ffc0000 [ 101.730079][ T29] audit: type=1326 audit(1734219569.089:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee8ca35d19 code=0x7ffc0000 [ 101.753511][ T29] audit: type=1326 audit(1734219569.089:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8ca35d19 code=0x7ffc0000 [ 101.776985][ T29] audit: type=1326 audit(1734219569.089:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee8ca35d19 code=0x7ffc0000 [ 101.815964][ T8454] Illegal XDP return value 4294967274 on prog (id 1542) dev N/A, expect packet loss! [ 101.915752][ T8464] wireguard0: entered promiscuous mode [ 101.921325][ T8464] wireguard0: entered allmulticast mode [ 101.941992][ T8475] netlink: 'syz.8.2014': attribute type 29 has an invalid length. [ 101.961346][ T8479] netlink: 'syz.8.2014': attribute type 29 has an invalid length. [ 101.969836][ T8475] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2014'. [ 101.979045][ T8475] unsupported nla_type 40 [ 101.986742][ T8481] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2016'. [ 101.996268][ T8481] all: renamed from erspan0 (while UP) [ 102.038198][ T8483] syz.8.2017[8483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.038330][ T8483] syz.8.2017[8483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.057140][ T8483] syz.8.2017[8483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.317136][ T8522] syz.6.2031[8522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.349069][ T8522] syz.6.2031[8522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.376918][ T8522] syz.6.2031[8522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.390169][ T8531] SELinux: Context system_u: is not valid (left unmapped). [ 102.559139][ T8551] netem: unknown loss type 0 [ 102.563772][ T8551] netem: change failed [ 102.655152][ T8560] pim6reg1: entered promiscuous mode [ 102.660530][ T8560] pim6reg1: entered allmulticast mode [ 102.692745][ T8562] loop7: detected capacity change from 0 to 1024 [ 102.739546][ T8562] EXT4-fs mount: 24 callbacks suppressed [ 102.739567][ T8562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.762106][ T8562] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.788351][ T8573] netlink: 542 bytes leftover after parsing attributes in process `syz.8.2050'. [ 102.789101][ T8562] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 102.809825][ T8562] EXT4-fs (loop7): This should not happen!! Data will be lost [ 102.809825][ T8562] [ 102.819559][ T8562] EXT4-fs (loop7): Total free blocks count 0 [ 102.825864][ T8562] EXT4-fs (loop7): Free/Dirty block details [ 102.831799][ T8562] EXT4-fs (loop7): free_blocks=0 [ 102.836792][ T8562] EXT4-fs (loop7): dirty_blocks=0 [ 102.841849][ T8562] EXT4-fs (loop7): Block reservation details [ 102.847922][ T8562] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 102.867695][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.940565][ T8583] netlink: 664 bytes leftover after parsing attributes in process `syz.8.2055'. [ 102.977957][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2058'. [ 102.987195][ T8587] netlink: 'syz.8.2058': attribute type 7 has an invalid length. [ 103.023874][ T8592] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2060'. [ 103.033630][ T8592] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2060'. [ 103.042758][ T8592] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2060'. [ 103.085942][ T8597] loop8: detected capacity change from 0 to 1024 [ 103.095504][ T8598] loop6: detected capacity change from 0 to 1764 [ 103.104261][ T8598] syz.6.2062: attempt to access beyond end of device [ 103.104261][ T8598] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 103.118974][ T8597] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.131820][ T8597] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.157405][ T8597] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2063: bg 0: block 393: padding at end of block bitmap is not set [ 103.173600][ T8597] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 103.186177][ T8597] EXT4-fs (loop8): This should not happen!! Data will be lost [ 103.186177][ T8597] [ 103.213979][ T8018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.260043][ T8612] loop6: detected capacity change from 0 to 512 [ 103.272617][ T8612] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 103.283577][ T8612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 103.291799][ T8612] System zones: 1-12 [ 103.296372][ T8612] EXT4-fs (loop6): orphan cleanup on readonly fs [ 103.303132][ T8612] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2068: bg 0: block 361: padding at end of block bitmap is not set [ 103.321939][ T8612] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 103.332456][ T8612] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.2068: attempt to clear invalid blocks 33619980 len 1 [ 103.348817][ T8612] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2068: invalid indirect mapped block 1811939328 (level 0) [ 103.363344][ T8612] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2068: invalid indirect mapped block 2 (level 2) [ 103.377365][ T8612] EXT4-fs (loop6): 1 truncate cleaned up [ 103.383486][ T8612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 103.429953][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 103.468425][ T8626] pim6reg1: entered promiscuous mode [ 103.473787][ T8626] pim6reg1: entered allmulticast mode [ 103.658150][ T8643] loop5: detected capacity change from 0 to 1024 [ 103.665085][ T8643] EXT4-fs: Ignoring removed orlov option [ 103.671929][ T8643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.680805][ T8643] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 103.702687][ T8643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.898328][ T8658] loop7: detected capacity change from 0 to 512 [ 103.905961][ T8658] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 103.916970][ T8658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 103.924990][ T8658] System zones: 1-12 [ 103.930823][ T8658] EXT4-fs (loop7): orphan cleanup on readonly fs [ 103.938184][ T8658] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2085: bg 0: block 361: padding at end of block bitmap is not set [ 103.953120][ T8658] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 103.965301][ T8658] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.2085: attempt to clear invalid blocks 33619980 len 1 [ 104.005187][ T8658] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2085: invalid indirect mapped block 1811939328 (level 0) [ 104.030263][ T8658] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2085: invalid indirect mapped block 2 (level 2) [ 104.052828][ T8658] EXT4-fs (loop7): 1 truncate cleaned up [ 104.064964][ T8658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 104.137494][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 104.279932][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2100'. [ 104.437034][ T8701] loop7: detected capacity change from 0 to 512 [ 104.449877][ T8705] netlink: 'syz.0.2109': attribute type 29 has an invalid length. [ 104.460555][ T8701] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 104.472384][ T8705] netlink: 'syz.0.2109': attribute type 29 has an invalid length. [ 104.510893][ T8708] netlink: 'syz.6.2110': attribute type 7 has an invalid length. [ 104.531831][ T8701] EXT4-fs (loop7): 1 truncate cleaned up [ 104.537861][ T8701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.563310][ T6410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.582863][ T8717] loop6: detected capacity change from 0 to 1764 [ 104.609521][ T8719] 9pnet_fd: p9_fd_create_tcp (8719): problem connecting socket to 127.0.0.1 [ 104.639619][ T8717] syz.6.2114: attempt to access beyond end of device [ 104.639619][ T8717] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 104.646625][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.676451][ T8724] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.740225][ T8724] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.790950][ T8736] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.810545][ T8724] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.823782][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 104.823794][ T29] audit: type=1326 audit(1734219572.229:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 104.865696][ T29] audit: type=1326 audit(1734219572.269:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 104.867715][ T8741] IPVS: stopping backup sync thread 8744 ... [ 104.889179][ T29] audit: type=1326 audit(1734219572.269:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 104.889219][ T29] audit: type=1326 audit(1734219572.269:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 104.942317][ T29] audit: type=1326 audit(1734219572.269:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 104.965779][ T29] audit: type=1326 audit(1734219572.269:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 104.989310][ T29] audit: type=1326 audit(1734219572.269:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 105.012983][ T29] audit: type=1326 audit(1734219572.279:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 105.036775][ T29] audit: type=1326 audit(1734219572.279:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 105.060350][ T29] audit: type=1326 audit(1734219572.279:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.6.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0855ad5d19 code=0x7ffc0000 [ 105.123970][ T8724] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.175122][ T8761] syz.6.2135[8761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.175355][ T8761] syz.6.2135[8761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.187668][ T8761] syz.6.2135[8761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.233073][ T8724] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.269704][ T8771] SELinux: syz.0.2136 (8771) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 105.296456][ T8724] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.317816][ T8724] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.349795][ T8724] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.549990][ T8795] loop0: detected capacity change from 0 to 1024 [ 105.589926][ T8795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.631007][ T8795] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.646231][ T8795] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 105.652297][ T8805] loop8: detected capacity change from 0 to 128 [ 105.658530][ T8795] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.658530][ T8795] [ 105.658555][ T8795] EXT4-fs (loop0): Total free blocks count 0 [ 105.680669][ T8795] EXT4-fs (loop0): Free/Dirty block details [ 105.686637][ T8795] EXT4-fs (loop0): free_blocks=68451041280 [ 105.692462][ T8795] EXT4-fs (loop0): dirty_blocks=64 [ 105.697812][ T8795] EXT4-fs (loop0): Block reservation details [ 105.703816][ T8795] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 105.709239][ T8805] FAT-fs (loop8): Directory bread(block 32) failed [ 105.716413][ T8805] FAT-fs (loop8): Directory bread(block 33) failed [ 105.723214][ T8805] FAT-fs (loop8): Directory bread(block 34) failed [ 105.729796][ T8805] FAT-fs (loop8): Directory bread(block 35) failed [ 105.736552][ T8805] FAT-fs (loop8): Directory bread(block 36) failed [ 105.743284][ T8805] FAT-fs (loop8): Directory bread(block 37) failed [ 105.749949][ T8805] FAT-fs (loop8): Directory bread(block 38) failed [ 105.756617][ T8805] FAT-fs (loop8): Directory bread(block 39) failed [ 105.763261][ T8805] FAT-fs (loop8): Directory bread(block 40) failed [ 105.769990][ T8805] FAT-fs (loop8): Directory bread(block 41) failed [ 105.842011][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.117876][ T8843] loop6: detected capacity change from 0 to 1024 [ 106.170418][ T8843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.185722][ T8843] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.200902][ T8856] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 106.209918][ T8856] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 106.209946][ T8843] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 106.209975][ T8843] EXT4-fs (loop6): This should not happen!! Data will be lost [ 106.209975][ T8843] [ 106.241975][ T8843] EXT4-fs (loop6): Total free blocks count 0 [ 106.248085][ T8843] EXT4-fs (loop6): Free/Dirty block details [ 106.254005][ T8843] EXT4-fs (loop6): free_blocks=0 [ 106.259071][ T8843] EXT4-fs (loop6): dirty_blocks=0 [ 106.264115][ T8843] EXT4-fs (loop6): Block reservation details [ 106.270268][ T8843] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 106.318266][ T8860] tmpfs: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 106.332484][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.610776][ T8890] loop5: detected capacity change from 0 to 1024 [ 106.644212][ T8890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.656381][ T8890] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.685629][ T8890] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 106.697992][ T8890] EXT4-fs (loop5): This should not happen!! Data will be lost [ 106.697992][ T8890] [ 106.707704][ T8890] EXT4-fs (loop5): Total free blocks count 0 [ 106.713708][ T8890] EXT4-fs (loop5): Free/Dirty block details [ 106.719641][ T8890] EXT4-fs (loop5): free_blocks=0 [ 106.724593][ T8890] EXT4-fs (loop5): dirty_blocks=0 [ 106.729662][ T8890] EXT4-fs (loop5): Block reservation details [ 106.735686][ T8890] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 106.758822][ T6410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.835449][ T8911] __nla_validate_parse: 7 callbacks suppressed [ 106.835468][ T8911] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2202'. [ 106.972631][ T8923] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.992554][ T8923] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 107.005943][ T8927] loop0: detected capacity change from 0 to 256 [ 107.023054][ T8927] msdos: Unknown parameter 'qy0M' [ 107.119795][ T8940] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 107.129795][ T8938] IPVS: stopping backup sync thread 8940 ... [ 107.156081][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2217'. [ 107.205322][ T8949] netlink: 'syz.6.2219': attribute type 153 has an invalid length. [ 107.238776][ T8956] syz.8.2223[8956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.238845][ T8956] syz.8.2223[8956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.268542][ T8956] syz.8.2223[8956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.285063][ T8961] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.306440][ T8961] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.357418][ T8961] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.367220][ T8961] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.419535][ T8961] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.429377][ T8961] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.488154][ T8961] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.498073][ T8961] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.582880][ T8961] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.591201][ T8961] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.618480][ T8961] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.626884][ T8961] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.638957][ T8994] loop6: detected capacity change from 0 to 8192 [ 107.639361][ T8961] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.653715][ T8961] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.671320][ T8961] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.679573][ T8961] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.761908][ T9006] loop6: detected capacity change from 0 to 128 [ 107.773788][ T9008] loop0: detected capacity change from 0 to 1024 [ 107.794992][ T9010] hub 9-0:1.0: USB hub found [ 107.806371][ T9010] hub 9-0:1.0: 8 ports detected [ 107.810022][ T9008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.853865][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.942819][ T9024] loop5: detected capacity change from 0 to 128 [ 107.962690][ T9024] FAT-fs (loop5): Directory bread(block 32) failed [ 107.969465][ T9024] FAT-fs (loop5): Directory bread(block 33) failed [ 107.977874][ T9024] FAT-fs (loop5): Directory bread(block 34) failed [ 107.985733][ T9024] FAT-fs (loop5): Directory bread(block 35) failed [ 107.992989][ T9024] FAT-fs (loop5): Directory bread(block 36) failed [ 108.000590][ T9024] FAT-fs (loop5): Directory bread(block 37) failed [ 108.008590][ T9024] FAT-fs (loop5): Directory bread(block 38) failed [ 108.015200][ T9024] FAT-fs (loop5): Directory bread(block 39) failed [ 108.022144][ T9024] FAT-fs (loop5): Directory bread(block 40) failed [ 108.029025][ T9024] FAT-fs (loop5): Directory bread(block 41) failed [ 108.093945][ T9028] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2255'. [ 108.111656][ T9027] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2255'. [ 108.127285][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2256'. [ 108.203949][ T9039] IPv6: Can't replace route, no match found [ 108.243597][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2264'. [ 108.253073][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2264'. [ 108.367856][ T9053] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.375455][ T9053] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 108.449978][ T9060] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2268'. [ 108.464035][ T9055] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2268'. [ 108.636684][ T9084] loop6: detected capacity change from 0 to 256 [ 108.657186][ T9084] msdos: Unknown parameter 'qy0M' [ 108.810316][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888117c91a00: rx timeout, send abort [ 108.818738][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888117c91a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.890420][ T9109] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.907377][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2291'. [ 108.950541][ T9109] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.995176][ T9121] pim6reg1: entered promiscuous mode [ 109.000603][ T9121] pim6reg1: entered allmulticast mode [ 109.008277][ T9124] loop8: detected capacity change from 0 to 256 [ 109.014982][ T9124] msdos: Unknown parameter 'qy0M' [ 109.029134][ T9109] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.119712][ T9109] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.167447][ T9109] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.184697][ T9109] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.200951][ T9109] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.229478][ T9109] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.330920][ T9152] loop7: detected capacity change from 0 to 256 [ 109.337448][ T9152] msdos: Unknown parameter 'qy0M' [ 109.384660][ T9158] pim6reg1: entered promiscuous mode [ 109.390147][ T9158] pim6reg1: entered allmulticast mode [ 109.654342][ T9176] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.729192][ T9176] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.788827][ T9176] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.838474][ T9176] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.882408][ T9176] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.893738][ T9176] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.904970][ T9176] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.916414][ T9176] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.974651][ T9189] tipc: Enabling of bearer rejected, failed to enable media [ 110.214737][ T9217] netlink: 'syz.5.2334': attribute type 4 has an invalid length. [ 110.291874][ T9225] loop7: detected capacity change from 0 to 1024 [ 110.318984][ T9225] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.339477][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 110.339493][ T29] audit: type=1326 audit(1734219577.739:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8ca35d19 code=0x7ffc0000 [ 110.370399][ T29] audit: type=1326 audit(1734219577.749:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fee8ca35d19 code=0x7ffc0000 [ 110.393840][ T29] audit: type=1326 audit(1734219577.749:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.0.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8ca35d19 code=0x7ffc0000 [ 110.418557][ T9232] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 110.430406][ T9225] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2338: Invalid block bitmap block 0 in block_group 0 [ 110.451316][ T9225] Quota error (device loop7): write_blk: dquota write failed [ 110.459084][ T9225] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 110.469729][ T9236] loop0: detected capacity change from 0 to 736 [ 110.475580][ T9225] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.2338: Failed to acquire dquot type 0 [ 110.489011][ T9225] EXT4-fs error (device loop7): ext4_free_blocks:6589: comm syz.7.2338: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.502916][ T9225] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2338: Invalid inode bitmap blk 0 in block_group 0 [ 110.516207][ T9225] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 110.519246][ T379] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 110.524891][ T9225] EXT4-fs (loop7): 1 orphan inode deleted [ 110.533816][ T379] EXT4-fs error (device loop7): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 0 [ 110.539945][ T9225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.606561][ T9238] netlink: 'syz.8.2344': attribute type 322 has an invalid length. [ 110.617697][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.644193][ T29] audit: type=1326 audit(1734219578.049:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz.7.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 110.667861][ T29] audit: type=1326 audit(1734219578.049:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz.7.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 110.691507][ T29] audit: type=1326 audit(1734219578.049:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz.7.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 110.714996][ T29] audit: type=1326 audit(1734219578.049:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz.7.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 110.904043][ T9266] pimreg: entered allmulticast mode [ 110.922152][ T9266] pimreg: left allmulticast mode [ 110.998228][ T9277] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.008048][ T9277] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.087503][ T9277] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.097398][ T9277] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.138493][ T9277] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.148404][ T9277] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.216956][ T9277] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.226808][ T9277] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.365855][ T9313] loop7: detected capacity change from 0 to 1024 [ 111.372508][ T9313] EXT4-fs: Ignoring removed orlov option [ 111.378344][ T9313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.396603][ T9313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.413640][ T9313] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 111.434644][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.552484][ T9336] loop7: detected capacity change from 0 to 512 [ 111.559572][ T9336] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 111.579366][ T9336] EXT4-fs (loop7): 1 truncate cleaned up [ 111.585467][ T9336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.586974][ T9340] : renamed from vlan0 (while UP) [ 111.624463][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.703794][ T9348] syz.8.2384[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.703864][ T9348] syz.8.2384[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.719158][ T9348] syz.8.2384[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.732161][ T9348] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 111.966462][ T9372] syzkaller0: entered allmulticast mode [ 111.983097][ T9277] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.991481][ T9277] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.004681][ T9277] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.013025][ T9277] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.024719][ T9277] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.033033][ T9277] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.041602][ T9371] syzkaller0: left allmulticast mode [ 112.049549][ T9277] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.057950][ T9277] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.098152][ T9378] loop5: detected capacity change from 0 to 1024 [ 112.105586][ T9378] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.117830][ T9378] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2396: Invalid block bitmap block 0 in block_group 0 [ 112.132543][ T9378] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2396: Failed to acquire dquot type 0 [ 112.145066][ T9378] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.2396: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.158882][ T9378] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2396: Invalid inode bitmap blk 0 in block_group 0 [ 112.171884][ T9378] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 112.180750][ T4914] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:28: Failed to release dquot type 0 [ 112.181290][ T9378] EXT4-fs (loop5): 1 orphan inode deleted [ 112.198680][ T9378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.230268][ T6410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.301906][ T9387] __nla_validate_parse: 5 callbacks suppressed [ 112.301921][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2397'. [ 112.317178][ T9387] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 112.326100][ T9387] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 112.645218][ T9391] pimreg: entered allmulticast mode [ 112.652392][ T9391] pimreg: left allmulticast mode [ 112.757563][ T9399] Cannot find del_set index 0 as target [ 112.781987][ T9401] loop8: detected capacity change from 0 to 736 [ 113.091265][ T9418] pimreg: entered allmulticast mode [ 113.104592][ T9418] pimreg: left allmulticast mode [ 113.169979][ T9424] bridge1: entered promiscuous mode [ 113.175234][ T9424] bridge1: entered allmulticast mode [ 113.346736][ T9436] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.354773][ T9436] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 113.475475][ T9447] pimreg: entered allmulticast mode [ 113.483595][ T9447] pimreg: left allmulticast mode [ 113.741749][ T9460] random: crng reseeded on system resumption [ 113.747515][ T9462] loop5: detected capacity change from 0 to 512 [ 113.779575][ T9462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.804617][ T9462] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.864789][ T6410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.878112][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2437'. [ 113.889764][ T9470] vlan0: entered promiscuous mode [ 113.894942][ T9470] hsr0: entered promiscuous mode [ 113.906859][ T9470] hsr0: left promiscuous mode [ 113.986634][ T9480] pimreg: entered allmulticast mode [ 113.999499][ T9480] pimreg: left allmulticast mode [ 114.169795][ T9510] pim6reg1: entered promiscuous mode [ 114.175141][ T9510] pim6reg1: entered allmulticast mode [ 114.340072][ T9530] netlink: 'syz.8.2465': attribute type 153 has an invalid length. [ 114.409003][ T9540] loop0: detected capacity change from 0 to 1024 [ 114.416869][ T9540] EXT4-fs: Ignoring removed orlov option [ 114.431332][ T9540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.440100][ T9540] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 114.454347][ T9540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.523876][ T9546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9546 comm=syz.6.2474 [ 114.536527][ T9546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9546 comm=syz.6.2474 [ 114.688182][ T9557] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.757989][ T9557] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.807928][ T9557] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.858287][ T9563] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.859247][ T9557] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.931519][ T9566] loop6: detected capacity change from 0 to 1024 [ 114.947433][ T9557] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.961660][ T9566] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.978419][ T9557] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.991885][ T9557] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.000312][ T9566] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 115.008845][ T9566] EXT4-fs (loop6): orphan cleanup on readonly fs [ 115.016467][ T9566] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 115.018904][ T9557] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.034876][ T9566] EXT4-fs (loop6): Remounting filesystem read-only [ 115.044618][ T9566] EXT4-fs (loop6): 1 orphan inode deleted [ 115.055027][ T9566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 115.067824][ T9566] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 115.074716][ T9566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.188796][ T9575] IPv6: Can't replace route, no match found [ 115.261778][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.439733][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 115.439749][ T29] audit: type=1326 audit(1734219582.849:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.521995][ T9595] loop0: detected capacity change from 0 to 512 [ 115.540006][ T9599] bridge1: entered promiscuous mode [ 115.545284][ T9599] bridge1: entered allmulticast mode [ 115.545763][ T29] audit: type=1326 audit(1734219582.879:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.574041][ T29] audit: type=1326 audit(1734219582.889:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.597495][ T29] audit: type=1326 audit(1734219582.889:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.620991][ T29] audit: type=1326 audit(1734219582.889:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.644504][ T29] audit: type=1326 audit(1734219582.889:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.668034][ T29] audit: type=1326 audit(1734219582.889:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.691602][ T29] audit: type=1326 audit(1734219582.889:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.715042][ T29] audit: type=1326 audit(1734219582.889:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.738634][ T29] audit: type=1326 audit(1734219582.889:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.8.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cfb415d19 code=0x7ffc0000 [ 115.904583][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2503'. [ 115.914831][ T9613] netlink: 'syz.8.2502': attribute type 1 has an invalid length. [ 115.922689][ T9613] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2502'. [ 116.279164][ T9658] loop5: detected capacity change from 0 to 512 [ 116.332008][ T9658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.361903][ T9658] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.400246][ T9670] loop6: detected capacity change from 0 to 512 [ 116.456771][ T9679] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.471187][ T9670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.495708][ T9670] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.497727][ T6410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.599190][ T9689] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2535'. [ 116.599339][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.668011][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2539'. [ 116.713123][ T9699] loop5: detected capacity change from 0 to 512 [ 116.728494][ T9694] vlan2: entered promiscuous mode [ 116.733599][ T9694] hsr0: entered promiscuous mode [ 116.745966][ T9699] ext4: Unknown parameter 'fsuuid' [ 116.760669][ T9694] hsr0: left promiscuous mode [ 116.881362][ T9710] bridge1: entered promiscuous mode [ 116.886690][ T9710] bridge1: entered allmulticast mode [ 116.943177][ T9723] loop8: detected capacity change from 0 to 164 [ 116.955073][ T9723] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.976410][ T9725] atomic_op ffff88812a49a928 conn xmit_atomic 0000000000000000 [ 117.046796][ T9735] loop0: detected capacity change from 0 to 128 [ 117.121852][ T9743] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.144497][ T3408] kworker/u8:7: attempt to access beyond end of device [ 117.144497][ T3408] loop0: rw=1, sector=145, nr_sectors = 33 limit=128 [ 117.208364][ T9751] loop6: detected capacity change from 0 to 512 [ 117.243349][ T9751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.280006][ T9751] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.302009][ T9759] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 117.310816][ T9759] SELinux: failed to load policy [ 117.506931][ T9769] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 118.105306][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2580'. [ 118.681555][ T9751] Process accounting resumed [ 118.705994][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.888429][ T9850] loop0: detected capacity change from 0 to 512 [ 118.922952][ T9850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.952102][ T9850] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.996772][ T9865] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2615'. [ 119.035695][ T9850] Process accounting resumed [ 119.054867][ T9850] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 119.443511][ T9906] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 119.443511][ T9906] program syz.7.2633 not setting count and/or reply_len properly [ 119.559629][ T9920] netlink: 133492 bytes leftover after parsing attributes in process `syz.8.2640'. [ 119.661926][ T9927] loop7: detected capacity change from 0 to 1024 [ 119.683953][ T9927] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.737668][ T9927] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 119.771195][ T9927] EXT4-fs (loop7): orphan cleanup on readonly fs [ 119.795232][ T9927] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 119.829107][ T9927] EXT4-fs (loop7): Remounting filesystem read-only [ 119.848541][ T9927] EXT4-fs (loop7): 1 orphan inode deleted [ 119.863982][ T9927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 119.908431][ T9927] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 119.926044][ T9927] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.168597][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.451171][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 120.451189][ T29] audit: type=1400 audit(1734219587.859:3263): avc: denied { map_create } for pid=9963 comm="syz.0.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.495327][ T29] audit: type=1400 audit(1734219587.859:3264): avc: denied { bpf } for pid=9963 comm="syz.0.2659" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.516082][ T29] audit: type=1400 audit(1734219587.859:3265): avc: denied { map_read map_write } for pid=9963 comm="syz.0.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.536359][ T29] audit: type=1400 audit(1734219587.869:3266): avc: denied { prog_load } for pid=9965 comm="syz.7.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.555807][ T29] audit: type=1400 audit(1734219587.869:3267): avc: denied { perfmon } for pid=9965 comm="syz.7.2661" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.576785][ T29] audit: type=1400 audit(1734219587.869:3268): avc: denied { prog_run } for pid=9965 comm="syz.7.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.595907][ T29] audit: type=1400 audit(1734219587.889:3269): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.618672][ T29] audit: type=1400 audit(1734219587.889:3270): avc: denied { create } for pid=9968 comm="syz.5.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 120.639179][ T29] audit: type=1400 audit(1734219587.889:3271): avc: denied { create } for pid=9966 comm="syz.6.2660" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.660597][ T29] audit: type=1400 audit(1734219587.889:3272): avc: denied { bind } for pid=9968 comm="syz.5.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 120.810352][ T9974] loop5: detected capacity change from 0 to 128 [ 120.892583][ T9983] loop0: detected capacity change from 0 to 8192 [ 120.915100][ T9974] FAT-fs (loop5): Directory bread(block 162) failed [ 120.935844][ T9974] FAT-fs (loop5): Directory bread(block 163) failed [ 120.942560][ T9974] FAT-fs (loop5): Directory bread(block 164) failed [ 120.949433][ T9974] FAT-fs (loop5): Directory bread(block 165) failed [ 120.961992][ T9974] FAT-fs (loop5): Directory bread(block 166) failed [ 120.968936][ T9974] FAT-fs (loop5): Directory bread(block 167) failed [ 120.979030][ T9974] FAT-fs (loop5): Directory bread(block 168) failed [ 120.997653][ T9974] FAT-fs (loop5): Directory bread(block 169) failed [ 121.010970][ T9974] FAT-fs (loop5): Directory bread(block 162) failed [ 121.023035][ T9974] FAT-fs (loop5): Directory bread(block 163) failed [ 121.040369][ T9974] syz.5.2663: attempt to access beyond end of device [ 121.040369][ T9974] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 121.064862][ T9999] loop6: detected capacity change from 0 to 512 [ 121.075559][ T9974] syz.5.2663: attempt to access beyond end of device [ 121.075559][ T9974] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 121.178465][T10012] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2677'. [ 121.187617][T10012] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2677'. [ 121.192561][ T9999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.196725][T10012] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2677'. [ 121.237892][ T9999] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.339102][T10022] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 121.506521][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2685'. [ 121.533544][T10042] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.842575][T10070] netlink: 'syz.5.2694': attribute type 1 has an invalid length. [ 121.860712][T10072] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 122.100025][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.425122][T10098] loop7: detected capacity change from 0 to 8192 [ 122.589416][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.604531][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.908235][T10136] 9pnet: p9_errstr2errno: server reported unknown error ٫á]>.1S@|iuYeft%^ [ 123.004193][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2727'. [ 123.150960][T10153] lo speed is unknown, defaulting to 1000 [ 123.164312][T10153] lo speed is unknown, defaulting to 1000 [ 123.183355][T10153] lo speed is unknown, defaulting to 1000 [ 123.268671][T10160] loop6: detected capacity change from 0 to 1024 [ 123.284192][T10160] EXT4-fs: inline encryption not supported [ 123.294900][T10160] ext4: Unknown parameter 'noacl' [ 123.311437][T10153] infiniband syz0: set active [ 123.316252][T10153] infiniband syz0: added lo [ 123.322157][ T3373] lo speed is unknown, defaulting to 1000 [ 123.354754][T10153] RDS/IB: syz0: added [ 123.360181][T10153] smc: adding ib device syz0 with port count 1 [ 123.366686][T10153] smc: ib device syz0 port 1 has pnetid [ 123.372725][ T3373] lo speed is unknown, defaulting to 1000 [ 123.494620][T10166] lo speed is unknown, defaulting to 1000 [ 123.578892][T10153] lo speed is unknown, defaulting to 1000 [ 123.641604][T10153] lo speed is unknown, defaulting to 1000 [ 123.642505][T10173] loop0: detected capacity change from 0 to 1024 [ 123.665878][T10173] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.715114][T10173] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 123.736616][T10153] lo speed is unknown, defaulting to 1000 [ 123.747416][T10173] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.778890][T10170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.788321][T10173] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 123.819693][T10170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.845545][T10173] EXT4-fs (loop0): Remounting filesystem read-only [ 123.869088][T10173] EXT4-fs (loop0): 1 orphan inode deleted [ 123.886109][T10169] lo speed is unknown, defaulting to 1000 [ 123.886344][T10173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 123.938947][T10173] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 123.970025][T10173] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.030508][T10153] lo speed is unknown, defaulting to 1000 [ 124.104194][T10153] lo speed is unknown, defaulting to 1000 [ 124.141211][T10153] lo speed is unknown, defaulting to 1000 [ 124.187162][T10153] lo speed is unknown, defaulting to 1000 [ 124.211920][T10182] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.223343][T10153] lo speed is unknown, defaulting to 1000 [ 124.243850][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 124.255057][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 124.301271][T10188] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 124.388876][T10196] loop6: detected capacity change from 0 to 512 [ 124.412773][T10196] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.2748: casefold flag without casefold feature [ 124.446468][T10196] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2748: couldn't read orphan inode 15 (err -117) [ 124.463765][T10196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.510749][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.519437][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.552105][T10215] ebt_among: src integrity fail: 300 [ 124.567037][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.592968][T10221] loop6: detected capacity change from 0 to 128 [ 124.648713][T10224] loop6: detected capacity change from 0 to 512 [ 124.663518][T10224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.681710][T10224] EXT4-fs: old and new quota format mixing [ 124.729577][T10224] loop6: detected capacity change from 0 to 128 [ 124.990761][T10256] usb usb8: usbfs: process 10256 (syz.6.2771) did not claim interface 0 before use [ 125.098305][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2775'. [ 125.429635][T10313] netlink: 'syz.7.2788': attribute type 4 has an invalid length. [ 125.441769][T10310] loop0: detected capacity change from 0 to 1024 [ 125.471034][T10310] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 125.481401][T10313] infiniband syz0: set down [ 125.493519][ T24] lo speed is unknown, defaulting to 1000 [ 125.499634][T10310] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 125.510738][T10313] netlink: 'syz.7.2788': attribute type 4 has an invalid length. [ 125.519322][ T24] lo speed is unknown, defaulting to 1000 [ 125.533731][T10313] infiniband syz0: set active [ 125.539329][ T3377] lo speed is unknown, defaulting to 1000 [ 125.545152][T10310] EXT4-fs (loop0): invalid journal inode [ 125.551305][ T3377] lo speed is unknown, defaulting to 1000 [ 125.560826][T10313] infiniband syz0: set down [ 125.616876][ T3377] lo speed is unknown, defaulting to 1000 [ 125.647578][ T3375] lo speed is unknown, defaulting to 1000 [ 125.720464][T10334] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 125.744849][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 125.744867][ T29] audit: type=1400 audit(1734219593.149:3451): avc: denied { create } for pid=10335 comm="syz.5.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.783508][ T29] audit: type=1400 audit(1734219593.189:3452): avc: denied { bind } for pid=10336 comm="syz.0.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.804478][ T29] audit: type=1400 audit(1734219593.189:3453): avc: denied { setopt } for pid=10336 comm="syz.0.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.824383][ T29] audit: type=1400 audit(1734219593.189:3454): avc: denied { write } for pid=10336 comm="syz.0.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.878065][T10346] syz.5.2801[10346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.878187][T10346] syz.5.2801[10346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.897498][ T29] audit: type=1400 audit(1734219593.229:3455): avc: denied { write } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.930133][T10346] syz.5.2801[10346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.930501][ T29] audit: type=1400 audit(1734219593.229:3456): avc: denied { remove_name } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.942330][T10346] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2801'. [ 125.964557][ T29] audit: type=1400 audit(1734219593.229:3457): avc: denied { rename } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.964590][ T29] audit: type=1400 audit(1734219593.229:3458): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.018550][ T29] audit: type=1400 audit(1734219593.229:3459): avc: denied { unlink } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.041011][ T29] audit: type=1400 audit(1734219593.239:3460): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.073071][T10350] loop8: detected capacity change from 0 to 128 [ 126.140558][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2805'. [ 126.428184][T10350] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.452004][T10350] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.556485][ T8018] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.628238][T10380] loop7: detected capacity change from 0 to 1024 [ 126.651160][T10380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.774459][T10380] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 126.789629][T10380] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 126.797337][T10386] lo speed is unknown, defaulting to 1000 [ 126.802248][T10380] EXT4-fs (loop7): This should not happen!! Data will be lost [ 126.802248][T10380] [ 126.817625][T10380] EXT4-fs (loop7): Total free blocks count 0 [ 126.823705][T10380] EXT4-fs (loop7): Free/Dirty block details [ 126.829641][T10380] EXT4-fs (loop7): free_blocks=68451041280 [ 126.835480][T10380] EXT4-fs (loop7): dirty_blocks=3600 [ 126.840811][T10380] EXT4-fs (loop7): Block reservation details [ 126.846821][T10380] EXT4-fs (loop7): i_reserved_data_blocks=225 [ 126.904134][T10386] chnl_net:caif_netlink_parms(): no params data found [ 126.932474][ T3408] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1548 with error 28 [ 126.952216][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2824'. [ 127.025367][T10386] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.032580][T10386] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.039900][T10386] bridge_slave_0: entered allmulticast mode [ 127.046360][T10386] bridge_slave_0: entered promiscuous mode [ 127.053250][T10386] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.060378][T10386] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.067814][T10386] bridge_slave_1: entered allmulticast mode [ 127.076262][T10386] bridge_slave_1: entered promiscuous mode [ 127.087876][T10419] ref_ctr_offset mismatch. inode: 0x3fa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 127.125860][T10386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.140939][T10386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.183453][T10421] loop8: detected capacity change from 0 to 1024 [ 127.198849][T10386] team0: Port device team_slave_0 added [ 127.203286][T10421] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 127.216734][T10421] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 127.217938][T10386] team0: Port device team_slave_1 added [ 127.228674][T10421] EXT4-fs (loop8): invalid journal inode [ 127.287940][T10423] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2831'. [ 127.297444][T10386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.304409][T10386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.330451][T10386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.345416][T10386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.352411][T10386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.378430][T10386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.433028][T10386] hsr_slave_0: entered promiscuous mode [ 127.449831][T10386] hsr_slave_1: entered promiscuous mode [ 127.458826][T10386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.467564][T10386] Cannot create hsr debugfs directory [ 127.473322][T10431] netlink: 'syz.5.2835': attribute type 4 has an invalid length. [ 127.510050][T10431] netlink: 'syz.5.2835': attribute type 4 has an invalid length. [ 127.563397][T10442] sg_write: data in/out 219/547 bytes for SCSI command 0x0-- guessing data in; [ 127.563397][T10442] program syz.7.2840 not setting count and/or reply_len properly [ 127.675865][T10386] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 127.702328][T10386] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 127.715372][T10386] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 127.725114][T10386] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 127.790603][T10386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.799231][T10462] tipc: Enabling of bearer rejected, failed to enable media [ 127.814460][T10386] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.824519][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.831651][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.843376][ T4917] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.850486][ T4917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.978316][T10386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.990067][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'. [ 128.079029][T10467] netlink: 112865 bytes leftover after parsing attributes in process `syz.6.2852'. [ 128.213314][T10386] veth0_vlan: entered promiscuous mode [ 128.223912][T10386] veth1_vlan: entered promiscuous mode [ 128.263229][T10386] veth0_macvtap: entered promiscuous mode [ 128.279767][T10386] veth1_macvtap: entered promiscuous mode [ 128.316439][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.327022][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.336950][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.347559][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.357467][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.368083][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.377998][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.388511][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.398419][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.409114][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.418988][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.435349][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.445329][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.455828][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.529569][T10386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.556199][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.566728][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.576680][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.587181][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.597153][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.607612][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.617523][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.620284][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.627981][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.646306][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.656790][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.657566][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.666641][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.684777][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.694639][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.705094][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.758807][T10386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.767745][T10386] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.776605][T10386] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.785337][T10386] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.794178][T10386] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.172042][T10541] batman_adv: batadv0: Adding interface: geneve2 [ 129.178469][T10541] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 129.376668][T10564] loop7: detected capacity change from 0 to 128 [ 129.396271][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2886'. [ 129.417421][T10564] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 129.427632][T10564] FAT-fs (loop7): Filesystem has been set read-only [ 129.679303][T10586] loop6: detected capacity change from 0 to 512 [ 129.690493][T10586] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.713389][T10586] EXT4-fs (loop6): 1 truncate cleaned up [ 129.722024][T10586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.762618][T10586] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.2897: inode #1073372648: comm syz.6.2897: iget: illegal inode # [ 129.787864][T10586] EXT4-fs error (device loop6): ext4_xattr_inode_iget:445: comm syz.6.2897: error while reading EA inode 1073372648 err=-117 [ 129.802962][T10586] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2897: corrupted xattr block 33: invalid header [ 129.820425][T10586] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 129.853402][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.939723][T10607] loop6: detected capacity change from 0 to 1024 [ 129.968613][T10607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.036310][T10621] syz.5.2912[10621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.036499][T10621] syz.5.2912[10621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.048168][T10621] syz.5.2912[10621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.060812][T10621] syz.5.2912[10621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.072769][T10621] syz.5.2912[10621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.084725][T10621] syz.5.2912[10621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.136122][T10626] geneve0: entered allmulticast mode [ 130.153508][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2914'. [ 130.167227][T10607] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 130.205801][T10607] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 130.218365][T10607] EXT4-fs (loop6): This should not happen!! Data will be lost [ 130.218365][T10607] [ 130.228254][T10607] EXT4-fs (loop6): Total free blocks count 0 [ 130.234312][T10607] EXT4-fs (loop6): Free/Dirty block details [ 130.240337][T10607] EXT4-fs (loop6): free_blocks=68451041280 [ 130.246199][T10607] EXT4-fs (loop6): dirty_blocks=2320 [ 130.251582][T10607] EXT4-fs (loop6): Block reservation details [ 130.257619][T10607] EXT4-fs (loop6): i_reserved_data_blocks=145 [ 130.267258][T10628] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.275579][T10628] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.283837][T10628] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.292113][T10628] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.313544][T10628] vxlan0: entered promiscuous mode [ 130.318745][T10628] vxlan0: entered allmulticast mode [ 130.432509][ T4926] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 256 with error 28 [ 130.498108][T10649] xt_hashlimit: size too large, truncated to 1048576 [ 130.774453][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 130.774471][ T29] audit: type=1400 audit(1734219598.179:3593): avc: denied { ioctl } for pid=10665 comm="syz.8.2929" path="socket:[30380]" dev="sockfs" ino=30380 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.873864][ T29] audit: type=1400 audit(1734219598.279:3594): avc: denied { ioctl } for pid=10670 comm="syz.8.2932" path="socket:[29427]" dev="sockfs" ino=29427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.982874][T10676] loop8: detected capacity change from 0 to 1024 [ 131.037363][T10676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.081875][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2936'. [ 131.135121][T10685] bond1: entered promiscuous mode [ 131.140305][T10685] bond1: entered allmulticast mode [ 131.145695][T10685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.177992][T10683] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 131.288286][T10676] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 131.300880][T10676] EXT4-fs (loop8): This should not happen!! Data will be lost [ 131.300880][T10676] [ 131.310717][T10676] EXT4-fs (loop8): Total free blocks count 0 [ 131.316741][T10676] EXT4-fs (loop8): Free/Dirty block details [ 131.322729][T10676] EXT4-fs (loop8): free_blocks=68451041280 [ 131.328574][T10676] EXT4-fs (loop8): dirty_blocks=3088 [ 131.333884][T10676] EXT4-fs (loop8): Block reservation details [ 131.339900][T10676] EXT4-fs (loop8): i_reserved_data_blocks=193 [ 131.535363][ T4926] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1024 with error 28 [ 131.663057][ T29] audit: type=1400 audit(1734219599.069:3595): avc: denied { name_bind } for pid=10704 comm="syz.9.2943" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 131.770478][T10712] random: crng reseeded on system resumption [ 131.771911][ T29] audit: type=1400 audit(1734219599.179:3596): avc: denied { append } for pid=10711 comm="syz.8.2947" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.799925][ T29] audit: type=1400 audit(1734219599.179:3597): avc: denied { open } for pid=10711 comm="syz.8.2947" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.877574][T10710] hub 9-0:1.0: USB hub found [ 131.898792][ T29] audit: type=1400 audit(1734219599.309:3598): avc: denied { read } for pid=10716 comm="syz.7.2949" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.900030][T10710] hub 9-0:1.0: 8 ports detected [ 131.994023][ T29] audit: type=1400 audit(1734219599.339:3599): avc: denied { open } for pid=10716 comm="syz.7.2949" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.017328][ T29] audit: type=1400 audit(1734219599.339:3600): avc: denied { ioctl } for pid=10716 comm="syz.7.2949" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.042229][ T29] audit: type=1400 audit(1734219599.349:3601): avc: denied { name_bind } for pid=10718 comm="syz.6.2951" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 132.098622][T10727] loop9: detected capacity change from 0 to 1024 [ 132.116115][ T29] audit: type=1326 audit(1734219599.479:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10726 comm="syz.7.2955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 132.153102][T10727] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.285262][T10727] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 132.300652][T10727] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1392 with error 28 [ 132.313157][T10727] EXT4-fs (loop9): This should not happen!! Data will be lost [ 132.313157][T10727] [ 132.323082][T10727] EXT4-fs (loop9): Total free blocks count 0 [ 132.327700][T10754] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2963'. [ 132.329299][T10727] EXT4-fs (loop9): Free/Dirty block details [ 132.344452][T10727] EXT4-fs (loop9): free_blocks=68451041280 [ 132.350405][T10727] EXT4-fs (loop9): dirty_blocks=1408 [ 132.355975][T10727] EXT4-fs (loop9): Block reservation details [ 132.362069][T10727] EXT4-fs (loop9): i_reserved_data_blocks=88 [ 132.374730][T10758] batadv1: entered promiscuous mode [ 132.392298][T10758] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.500185][T10386] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.658406][T10781] loop8: detected capacity change from 0 to 512 [ 132.676738][T10781] EXT4-fs (loop8): blocks per group (255) and clusters per group (8192) inconsistent [ 132.825398][T10793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.847268][T10793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.865324][T10793] bond0 (unregistering): Released all slaves [ 133.286194][T10802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10802 comm=syz.9.2983 [ 133.317507][T10805] loop7: detected capacity change from 0 to 512 [ 133.354401][T10805] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.2984: corrupted in-inode xattr: invalid ea_ino [ 133.408106][T10805] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2984: couldn't read orphan inode 15 (err -117) [ 133.428840][T10812] loop9: detected capacity change from 0 to 512 [ 133.445080][T10805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.461358][T10812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.484665][T10812] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.535246][T10386] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.565153][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.804225][T10840] @: renamed from vlan0 (while UP) [ 133.838570][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3004'. [ 133.890942][T10844] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.899878][T10844] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.908636][T10844] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.917481][T10844] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.932213][T10844] vxlan0: entered promiscuous mode [ 133.937473][T10844] vxlan0: entered allmulticast mode [ 134.000100][T10862] netlink: 'syz.8.3013': attribute type 10 has an invalid length. [ 134.013090][T10864] loop6: detected capacity change from 0 to 7 [ 134.020114][T10862] geneve1: entered promiscuous mode [ 134.026815][T10864] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.040387][T10862] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 134.049199][T10864] Buffer I/O error on dev loop6, logical block 0, async page read [ 134.057214][T10864] loop6: unable to read partition table [ 134.063469][T10864] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 134.063469][T10864] ) failed (rc=-5) [ 134.187531][ T2999] udevd[2999]: worker [3290] terminated by signal 33 (Unknown signal 33) [ 134.262582][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3026'. [ 134.476999][T10910] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 134.622451][T10920] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3038'. [ 135.122893][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3043'. [ 135.570357][T10948] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3061'. [ 135.660167][T10961] futex_wake_op: syz.6.3056 tries to shift op by -1; fix this program [ 135.671231][T10956] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3052'. [ 135.747963][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3052'. [ 135.782938][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 135.782955][ T29] audit: type=1326 audit(1734219603.189:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 135.833822][ T29] audit: type=1326 audit(1734219603.219:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 135.857282][ T29] audit: type=1400 audit(1734219603.229:3758): avc: denied { create } for pid=10967 comm="syz.7.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 135.876913][ T29] audit: type=1326 audit(1734219603.229:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 135.900564][ T29] audit: type=1326 audit(1734219603.229:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 135.924063][ T29] audit: type=1326 audit(1734219603.229:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 135.947740][ T29] audit: type=1400 audit(1734219603.229:3762): avc: denied { write } for pid=10967 comm="syz.7.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 135.967256][ T29] audit: type=1326 audit(1734219603.229:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 135.990745][ T29] audit: type=1326 audit(1734219603.229:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.7.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 136.014331][ T29] audit: type=1400 audit(1734219603.229:3765): avc: denied { listen } for pid=10969 comm="syz.6.3060" lport=33553 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.082805][T10990] loop9: detected capacity change from 0 to 256 [ 136.092185][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.099467][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.170562][T10999] loop7: detected capacity change from 0 to 764 [ 136.196704][T11003] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3078'. [ 136.211425][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'. [ 136.237643][T11005] ip6gre1: entered allmulticast mode [ 136.265346][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3080'. [ 136.456283][T11039] loop6: detected capacity change from 0 to 128 [ 136.504285][ T4917] kworker/u8:30: attempt to access beyond end of device [ 136.504285][ T4917] loop6: rw=1, sector=145, nr_sectors = 33 limit=128 [ 136.604785][T11053] sd 0:0:1:0: device reset [ 136.730693][T11058] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3101'. [ 136.739776][T11058] netem: unknown loss type 13 [ 136.744472][T11058] netem: change failed [ 136.834305][T11069] loop8: detected capacity change from 0 to 512 [ 136.862055][T11069] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.881874][T11069] EXT4-fs (loop8): re-mounted 00800000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 136.900695][T11073] loop7: detected capacity change from 0 to 512 [ 136.907329][T11069] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 136.926703][T11073] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 136.934983][T11073] EXT4-fs (loop7): orphan cleanup on readonly fs [ 136.944108][T11073] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.960737][T11073] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 136.968149][T11073] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3108: bg 0: block 40: padding at end of block bitmap is not set [ 136.985137][T11073] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 136.994579][T11073] EXT4-fs (loop7): 1 truncate cleaned up [ 137.001444][T11073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.017868][T11073] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #16: comm syz.7.3108: corrupted xattr block 31: invalid header [ 137.031463][T11073] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 137.051800][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.083312][ T8018] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 137.092799][T11087] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3112'. [ 137.165564][T11095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.175019][T11095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.369676][T11107] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.930339][T11097] cgroup: fork rejected by pids controller in /syz7 [ 138.103323][T11155] smc: net device bond0 applied user defined pnetid SYZ0 [ 138.124673][T11155] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 138.151077][T11155] smc: net device bond0 erased user defined pnetid SYZ0 [ 138.171576][T11155] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 138.208963][T11158] team0 (unregistering): Port device team_slave_0 removed [ 138.265621][T11158] team0 (unregistering): Port device team_slave_1 removed [ 138.328101][T11164] serio: Serial port ptm0 [ 138.545678][T11175] Falling back ldisc for ttyS3. [ 138.915231][T11215] syz.6.3154[11215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.915342][T11215] syz.6.3154[11215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.927326][T11215] syz.6.3154[11215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.001555][T11222] pim6reg1: entered promiscuous mode [ 139.018484][T11222] pim6reg1: entered allmulticast mode [ 139.033338][T11224] netlink: 'syz.9.3159': attribute type 3 has an invalid length. [ 139.104353][T11235] loop9: detected capacity change from 0 to 512 [ 139.112077][T11235] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.138371][T11235] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3164: bg 0: block 248: padding at end of block bitmap is not set [ 139.153337][T11235] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.3164: Failed to acquire dquot type 1 [ 139.165422][T11235] EXT4-fs (loop9): 1 truncate cleaned up [ 139.171573][T11235] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.185752][T11235] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.203206][T11235] EXT4-fs error (device loop9): __ext4_remount:6749: comm syz.9.3164: Abort forced by user [ 139.220214][T11248] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.225846][T11235] EXT4-fs (loop9): Remounting filesystem read-only [ 139.231416][T11250] loop6: detected capacity change from 0 to 512 [ 139.236385][T11235] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 139.257176][T11250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.290250][T10386] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.312946][T11259] loop9: detected capacity change from 0 to 256 [ 139.319752][T11259] FAT-fs (loop9): bogus number of FAT sectors [ 139.325894][T11259] FAT-fs (loop9): Can't find a valid FAT filesystem [ 139.371779][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.373523][T11264] loop7: detected capacity change from 0 to 128 [ 139.671956][T11299] hub 9-0:1.0: USB hub found [ 139.678430][T11299] hub 9-0:1.0: 8 ports detected [ 139.892428][T11329] loop8: detected capacity change from 0 to 1024 [ 139.903805][T11329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.923376][T11329] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 139.948760][ T8018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.970599][T11342] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 140.021672][T11344] lo speed is unknown, defaulting to 1000 [ 140.152825][T11352] loop8: detected capacity change from 0 to 8192 [ 140.228455][T11360] pim6reg1: entered promiscuous mode [ 140.233873][T11360] pim6reg1: entered allmulticast mode [ 140.341031][T11362] __nla_validate_parse: 5 callbacks suppressed [ 140.341050][T11362] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3219'. [ 140.389524][T11366] xt_hashlimit: size too large, truncated to 1048576 [ 140.559630][T11376] vlan1: entered promiscuous mode [ 140.573939][T11376] vlan1: left promiscuous mode [ 140.816065][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 140.816084][ T29] audit: type=1326 audit(1734219608.229:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 140.886341][ T29] audit: type=1326 audit(1734219608.229:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 140.910043][ T29] audit: type=1326 audit(1734219608.229:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 140.933644][ T29] audit: type=1326 audit(1734219608.229:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 140.957262][ T29] audit: type=1326 audit(1734219608.229:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 140.980853][ T29] audit: type=1326 audit(1734219608.229:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 141.004559][ T29] audit: type=1326 audit(1734219608.229:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 141.028067][ T29] audit: type=1326 audit(1734219608.229:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 141.051709][ T29] audit: type=1326 audit(1734219608.229:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 141.075575][ T29] audit: type=1326 audit(1734219608.249:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.7.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 141.341483][T11409] loop8: detected capacity change from 0 to 2048 [ 141.427515][T11409] EXT4-fs (loop8): failed to initialize system zone (-117) [ 141.459272][T11409] EXT4-fs (loop8): mount failed [ 141.661626][T11428] loop8: detected capacity change from 0 to 128 [ 141.670068][T11428] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.684787][T11428] ext4 filesystem being mounted at /278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.751707][ T8018] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.784141][T11439] loop8: detected capacity change from 0 to 512 [ 141.801683][T11439] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3247: invalid indirect mapped block 256 (level 2) [ 141.825902][T11439] EXT4-fs (loop8): 2 truncates cleaned up [ 141.832044][T11439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.888725][ T8018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.891437][T11444] lo speed is unknown, defaulting to 1000 [ 141.921259][T11451] loop6: detected capacity change from 0 to 1024 [ 141.924887][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3253'. [ 141.936322][T11451] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.960340][T11451] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 141.969633][T11451] EXT4-fs (loop6): orphan cleanup on readonly fs [ 141.986241][T11451] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 142.007475][T11451] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.3251: mark_inode_dirty error [ 142.024684][T11451] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3251: Invalid block bitmap block 3 in block_group 0 [ 142.048486][T11451] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3251: Invalid block bitmap block 3 in block_group 0 [ 142.065083][T11451] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3251: Invalid block bitmap block 3 in block_group 0 [ 142.079820][T11451] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 142.096690][T11451] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.3251: mark_inode_dirty error [ 142.109408][T11451] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm syz.6.3251: lblock 6 mapped to illegal pblock 1 (length 1) [ 142.130124][T11451] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.3251: lblock 0 mapped to illegal pblock 48 (length 1) [ 142.160027][T11472] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 142.171410][T11451] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3251: Failed to acquire dquot type 0 [ 142.190581][T11451] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 49: comm syz.6.3251: lblock 1 mapped to illegal pblock 49 (length 1) [ 142.223645][T11451] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3251: Failed to acquire dquot type 0 [ 142.248647][T11451] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 142.271024][T11451] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #15: comm syz.6.3251: mark_inode_dirty error [ 142.286951][T11451] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 142.299672][T11451] EXT4-fs (loop6): 1 orphan inode deleted [ 142.307094][T11451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.337116][T11478] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3266'. [ 142.348573][T11478] 0X: renamed from caif0 [ 142.355321][T11478] 0X: entered allmulticast mode [ 142.360617][T11478] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 142.421887][T11480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3267'. [ 142.442559][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.495663][T11483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3267'. [ 142.546052][T11487] loop7: detected capacity change from 0 to 512 [ 142.582403][T11487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.672589][T11492] loop6: detected capacity change from 0 to 1024 [ 142.682928][T11492] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.694542][T11492] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 142.704611][T11492] EXT4-fs (loop6): orphan cleanup on readonly fs [ 142.742402][ T8014] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.753501][T11492] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 142.775255][T11492] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.3272: mark_inode_dirty error [ 142.800362][T11492] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3272: Invalid block bitmap block 3 in block_group 0 [ 142.824021][T11492] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3272: Invalid block bitmap block 3 in block_group 0 [ 142.841331][T11492] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3272: Invalid block bitmap block 3 in block_group 0 [ 142.855095][T11492] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 142.866190][T11492] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.3272: mark_inode_dirty error [ 142.870534][T11501] syz.9.3276[11501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.877755][T11492] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm syz.6.3272: lblock 6 mapped to illegal pblock 1 (length 1) [ 142.877932][T11501] syz.9.3276[11501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.891248][T11492] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.3272: lblock 0 mapped to illegal pblock 48 (length 1) [ 142.903583][T11501] syz.9.3276[11501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.928883][T11492] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3272: Failed to acquire dquot type 0 [ 142.959362][T11492] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 49: comm syz.6.3272: lblock 1 mapped to illegal pblock 49 (length 1) [ 142.980456][T11492] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3272: Failed to acquire dquot type 0 [ 142.994616][T11492] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 142.997968][T11506] loop8: detected capacity change from 0 to 256 [ 143.004830][T11492] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #15: comm syz.6.3272: mark_inode_dirty error [ 143.013276][T11506] FAT-fs (loop8): bogus number of FAT sectors [ 143.022146][T11492] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 143.027951][T11506] FAT-fs (loop8): Can't find a valid FAT filesystem [ 143.038274][T11492] EXT4-fs (loop6): 1 orphan inode deleted [ 143.051038][T11492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 143.080890][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.117634][T11509] loop6: detected capacity change from 0 to 512 [ 143.131178][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3280'. [ 143.141008][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3280'. [ 143.142881][T11509] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.165728][T11514] syz.8.3281[11514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.165882][T11514] syz.8.3281[11514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.177807][T11514] syz.8.3281[11514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.189433][T11509] EXT4-fs (loop6): re-mounted 00800000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 143.213783][T11509] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 143.239150][T11519] loop8: detected capacity change from 0 to 164 [ 143.248282][T11521] netlink: 'syz.9.3284': attribute type 10 has an invalid length. [ 143.261190][T11519] syz.8.3283: attempt to access beyond end of device [ 143.261190][T11519] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 143.275232][T11519] syz.8.3283: attempt to access beyond end of device [ 143.275232][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.275820][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.288918][T11519] syz.8.3283: attempt to access beyond end of device [ 143.288918][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.295962][T11521] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.309912][T11519] syz.8.3283: attempt to access beyond end of device [ 143.309912][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.330003][T11519] syz.8.3283: attempt to access beyond end of device [ 143.330003][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.343872][T11519] syz.8.3283: attempt to access beyond end of device [ 143.343872][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.357933][ T7885] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 143.359105][T11521] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.374077][T11521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.374143][T11519] syz.8.3283: attempt to access beyond end of device [ 143.374143][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.381474][T11521] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.395595][T11519] syz.8.3283: attempt to access beyond end of device [ 143.395595][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.401829][T11521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.415630][T11519] syz.8.3283: attempt to access beyond end of device [ 143.415630][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.443856][T11519] syz.8.3283: attempt to access beyond end of device [ 143.443856][T11519] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.445349][T11521] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.596026][T11536] xt_hashlimit: size too large, truncated to 1048576 [ 143.646490][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3292'. [ 143.883288][T11542] lo speed is unknown, defaulting to 1000 [ 144.000478][T11557] loop6: detected capacity change from 0 to 512 [ 144.021959][T11557] EXT4-fs (loop6): Unsupported encryption level 9 [ 144.296006][T11573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=11573 comm=syz.8.3304 [ 144.357506][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3307'. [ 144.386332][T11579] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3309'. [ 144.416465][T11584] loop6: detected capacity change from 0 to 128 [ 144.466539][T11588] loop6: detected capacity change from 0 to 764 [ 145.108412][T11617] loop6: detected capacity change from 0 to 1024 [ 145.115482][T11617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.144003][T11617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.189601][T11633] random: crng reseeded on system resumption [ 145.199877][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.262045][T11636] 0X: renamed from caif0 [ 145.268806][T11636] 0X: entered allmulticast mode [ 145.274107][T11636] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 145.653379][T11656] __nla_validate_parse: 4 callbacks suppressed [ 145.653400][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3338'. [ 145.747045][T11664] syz.9.3343[11664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.747274][T11664] syz.9.3343[11664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.759104][T11664] syz.9.3343[11664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.790839][T11666] veth0_to_team: entered promiscuous mode [ 145.808039][T11666] veth0_to_team: entered allmulticast mode [ 146.577326][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3345'. [ 146.669134][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 146.669152][ T29] audit: type=1326 audit(1734219614.079:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.701507][ T29] audit: type=1326 audit(1734219614.079:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.725239][ T29] audit: type=1326 audit(1734219614.079:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.748818][ T29] audit: type=1326 audit(1734219614.079:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.772505][ T29] audit: type=1326 audit(1734219614.079:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.796044][ T29] audit: type=1326 audit(1734219614.079:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.819636][ T29] audit: type=1326 audit(1734219614.079:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.843852][ T29] audit: type=1326 audit(1734219614.079:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.867724][ T29] audit: type=1326 audit(1734219614.079:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.891216][ T29] audit: type=1326 audit(1734219614.079:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde16175d19 code=0x7ffc0000 [ 146.955947][T11699] pimreg: entered allmulticast mode [ 146.963523][T11699] pimreg: left allmulticast mode [ 147.381689][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3375'. [ 147.424381][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3375'. [ 147.453586][T11736] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3378'. [ 147.895617][T11780] loop6: detected capacity change from 0 to 512 [ 147.930859][T11780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.945689][T11780] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.964490][T11780] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #18: comm syz.6.3396: corrupted inode contents [ 147.987930][T11786] loop9: detected capacity change from 0 to 2048 [ 147.995537][T11780] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #18: comm syz.6.3396: mark_inode_dirty error [ 148.016042][T11780] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #18: comm syz.6.3396: corrupted inode contents [ 148.030640][T11780] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #18: comm syz.6.3396: mark_inode_dirty error [ 148.043075][T11780] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #18: comm syz.6.3396: mark inode dirty (error -117) [ 148.058102][T11780] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 148.082080][T11786] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.141573][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.309756][T10386] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.329837][T10386] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.378162][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.397920][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.616099][T11846] loop8: detected capacity change from 0 to 512 [ 148.628776][T11846] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.641783][T11846] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.874603][ T8018] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.314730][T10386] ================================================================== [ 149.322864][T10386] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 149.330362][T10386] [ 149.332685][T10386] read-write to 0xffff888117e78bb0 of 8 bytes by task 11878 on cpu 1: [ 149.340835][T10386] shmem_recalc_inode+0x36/0x1b0 [ 149.345778][T10386] shmem_get_folio_gfp+0x7ce/0xd90 [ 149.350891][T10386] shmem_write_begin+0xa2/0x180 [ 149.355750][T10386] generic_perform_write+0x1a8/0x4a0 [ 149.361047][T10386] shmem_file_write_iter+0xc2/0xe0 [ 149.366168][T10386] __kernel_write_iter+0x24b/0x4e0 [ 149.371297][T10386] dump_user_range+0x3ac/0x550 [ 149.376073][T10386] elf_core_dump+0x1bdc/0x1ce0 [ 149.380938][T10386] do_coredump+0x1898/0x1f40 [ 149.385539][T10386] get_signal+0xd4f/0x1000 [ 149.389967][T10386] arch_do_signal_or_restart+0x95/0x4b0 [ 149.395527][T10386] irqentry_exit_to_user_mode+0xa7/0x120 [ 149.401181][T10386] irqentry_exit+0x12/0x50 [ 149.405608][T10386] asm_exc_page_fault+0x26/0x30 [ 149.410483][T10386] [ 149.412804][T10386] read to 0xffff888117e78bb0 of 8 bytes by task 10386 on cpu 0: [ 149.420439][T10386] shmem_getattr+0x42/0x200 [ 149.424953][T10386] vfs_statx_path+0x171/0x2d0 [ 149.429636][T10386] vfs_statx+0xe1/0x170 [ 149.433793][T10386] __se_sys_newfstatat+0xdc/0x300 [ 149.438841][T10386] __x64_sys_newfstatat+0x55/0x70 [ 149.443869][T10386] x64_sys_call+0x236d/0x2dc0 [ 149.448547][T10386] do_syscall_64+0xc9/0x1c0 [ 149.453053][T10386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.458963][T10386] [ 149.461281][T10386] value changed: 0x0000000000000743 -> 0x0000000000000744 [ 149.468410][T10386] [ 149.470734][T10386] Reported by Kernel Concurrency Sanitizer on: [ 149.476889][T10386] CPU: 0 UID: 0 PID: 10386 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 149.487827][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.497907][T10386] ==================================================================