last executing test programs: 1m47.790679674s ago: executing program 32 (id=275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a240, 0x0) fcntl$setlease(r1, 0x400, 0x0) fremovexattr(r1, &(0x7f00000004c0)=@known='trusted.overlay.redirect\x00') 46.631529567s ago: executing program 3 (id=2765): r0 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 46.567107208s ago: executing program 3 (id=2768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 46.494989299s ago: executing program 3 (id=2770): unshare(0x2c020400) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) 46.4614537s ago: executing program 3 (id=2773): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 46.296571022s ago: executing program 1 (id=2780): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) dup(0xffffffffffffffff) 46.294603172s ago: executing program 3 (id=2782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 46.193383073s ago: executing program 1 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x2c, r3, 0x1, 0xd0, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 46.117679164s ago: executing program 1 (id=2791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 46.093955194s ago: executing program 1 (id=2793): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 45.922298077s ago: executing program 1 (id=2794): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xf60, 0x40ffffffff}, 0x0, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 45.885927827s ago: executing program 3 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e028008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1d7e, &(0x7f00000004c0)={0x0, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0xd, 0x0, 0x20) 45.840465408s ago: executing program 33 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e028008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1d7e, &(0x7f00000004c0)={0x0, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0xd, 0x0, 0x20) 45.706850499s ago: executing program 1 (id=2802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) 45.706608199s ago: executing program 34 (id=2802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) 33.506256179s ago: executing program 6 (id=3242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 33.390798531s ago: executing program 6 (id=3244): unshare(0x4020400) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x2000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x123000, 0x800, 0x80009, 0x2}, 0x20) 33.210234744s ago: executing program 6 (id=3251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 33.191722444s ago: executing program 6 (id=3253): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 33.160672024s ago: executing program 6 (id=3255): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3000000000005"]) 32.910648828s ago: executing program 6 (id=3272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.910519748s ago: executing program 35 (id=3272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.509775033s ago: executing program 7 (id=3286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 32.204987737s ago: executing program 7 (id=3301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfe58}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 32.170242807s ago: executing program 7 (id=3293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 32.121192258s ago: executing program 7 (id=3294): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 32.078231168s ago: executing program 7 (id=3307): r0 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) 31.812613762s ago: executing program 7 (id=3306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 31.812409142s ago: executing program 36 (id=3306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 17.914343144s ago: executing program 5 (id=3771): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) bind$can_raw(r1, &(0x7f0000000200), 0x10) 17.880391485s ago: executing program 5 (id=3774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ioperm(0x2, 0x1, 0x7) 17.849892745s ago: executing program 5 (id=3778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000980), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 17.800704246s ago: executing program 5 (id=3781): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 17.677425847s ago: executing program 5 (id=3784): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) close_range(r1, r2, 0x200000000000000) 17.275004253s ago: executing program 5 (id=3802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 17.229696043s ago: executing program 37 (id=3802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 2.130921631s ago: executing program 4 (id=4374): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) 2.050285852s ago: executing program 4 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2.015282753s ago: executing program 4 (id=4380): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) acct(0x0) 1.937958864s ago: executing program 4 (id=4384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1) 1.893113525s ago: executing program 4 (id=4388): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 1.799731506s ago: executing program 4 (id=4394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1d}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x70bd22, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x49}, 0x4040) 831.140838ms ago: executing program 9 (id=4452): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 797.354049ms ago: executing program 9 (id=4455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r1, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x40006) 796.600509ms ago: executing program 0 (id=4457): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(0x0, 0x0, 0x0) mkdirat(r2, 0x0, 0x8) 782.627919ms ago: executing program 9 (id=4458): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) 761.183359ms ago: executing program 0 (id=4460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000da0000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 730.27834ms ago: executing program 0 (id=4462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000b80), 0x3, 0x4d5, &(0x7f0000001300)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107842, 0x0) sendfile(r2, r2, 0x0, 0x80000000) 729.95622ms ago: executing program 9 (id=4463): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 661.666241ms ago: executing program 9 (id=4465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x2f4c, &(0x7f0000000140)={0x0, 0x52fa, 0x0, 0xffffffff, 0x100320}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 634.072601ms ago: executing program 0 (id=4466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000050000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 618.888821ms ago: executing program 9 (id=4467): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) exit(0x0) 558.972682ms ago: executing program 0 (id=4468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 558.771532ms ago: executing program 0 (id=4469): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 558.572642ms ago: executing program 2 (id=4470): r0 = getpid() capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setns(r1, 0x24020000) 534.337072ms ago: executing program 2 (id=4472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 516.018453ms ago: executing program 2 (id=4473): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x40003}, 0x18) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 390.990164ms ago: executing program 8 (id=4474): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r2) 390.802444ms ago: executing program 2 (id=4475): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setregid(0x0, 0xee01) 333.614955ms ago: executing program 8 (id=4476): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 328.222735ms ago: executing program 2 (id=4477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 275.619696ms ago: executing program 2 (id=4478): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = epoll_create(0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 275.158276ms ago: executing program 8 (id=4479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f00000000c0)="f5bb3894c56bf7e0") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 166.871137ms ago: executing program 8 (id=4480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 41.455979ms ago: executing program 8 (id=4481): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500adc427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f09000000ff00e9ef3ac7100003ffffffffffffffffffffffe7ee000000de03dc0eb561602be20000000000", 0x58}], 0x1) 0s ago: executing program 8 (id=4482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000000000)) kernel console output (not intermixed with test programs): nable:7129: comm syz.6.3021: Bad quota inode: 3, type: 0 [ 110.769067][T10542] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 110.783797][T10542] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 110.790948][T10542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.818905][ T9994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.874704][T10556] loop7: detected capacity change from 0 to 512 [ 110.886431][T10555] bond1: entered promiscuous mode [ 110.891727][T10555] bond1: entered allmulticast mode [ 110.897235][T10555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.908263][T10555] bond1 (unregistering): Released all slaves [ 110.925482][T10556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.941493][T10556] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.941716][T10560] serio: Serial port ptm1 [ 110.980992][T10006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.018300][T10568] batadv1: entered promiscuous mode [ 111.025119][T10567] netlink: 'gtp': attribute type 1 has an invalid length. [ 111.077045][T10574] loop7: detected capacity change from 0 to 512 [ 111.105721][T10574] EXT4-fs (loop7): orphan cleanup on readonly fs [ 111.118038][T10574] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3032: bad orphan inode 13 [ 111.141596][T10583] netlink: 'syz.2.3035': attribute type 6 has an invalid length. [ 111.159643][T10574] ext4_test_bit(bit=12, block=18) = 1 [ 111.165114][T10574] is_bad_inode(inode)=0 [ 111.169338][T10574] NEXT_ORPHAN(inode)=2130706432 [ 111.174309][T10574] max_ino=32 [ 111.177564][T10574] i_nlink=1 [ 111.181553][T10574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.281671][T10006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.784020][T10643] loop0: detected capacity change from 0 to 1024 [ 111.793429][T10643] EXT4-fs: Ignoring removed bh option [ 111.798897][T10643] EXT4-fs: inline encryption not supported [ 111.806689][T10643] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.822842][T10643] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 111.842880][T10643] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.3063: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.857380][T10643] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.3063: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.871701][T10643] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3063: Failed to acquire dquot type 0 [ 111.883494][T10643] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 111.893613][T10643] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.3063: mark_inode_dirty error [ 111.905738][T10643] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 111.916797][T10643] EXT4-fs (loop0): 1 orphan inode deleted [ 111.923127][T10643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.935830][ T5205] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.952994][ T5205] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:28: Failed to release dquot type 0 [ 111.973997][T10643] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.3063: lblock 0 mapped to illegal pblock 48 (length 1) [ 112.024408][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.097330][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3071'. [ 112.243781][T10683] sit0: entered promiscuous mode [ 112.253607][T10683] netlink: 'syz.6.3082': attribute type 1 has an invalid length. [ 112.261459][T10683] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3082'. [ 112.275051][T10685] loop5: detected capacity change from 0 to 512 [ 112.302089][T10685] EXT4-fs (loop5): orphan cleanup on readonly fs [ 112.319635][T10685] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3083: bad orphan inode 13 [ 112.333314][T10685] ext4_test_bit(bit=12, block=18) = 1 [ 112.338818][T10685] is_bad_inode(inode)=0 [ 112.343084][T10685] NEXT_ORPHAN(inode)=2130706432 [ 112.347956][T10685] max_ino=32 [ 112.351205][T10685] i_nlink=1 [ 112.356264][T10685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.388827][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.474485][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3088'. [ 112.478108][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 112.478128][ T29] audit: type=1400 audit(1746899275.586:3610): avc: denied { append } for pid=10705 comm="syz.5.3092" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.555876][ T29] audit: type=1326 audit(1746899275.656:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.6.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc66e969 code=0x7ffc0000 [ 112.579516][ T29] audit: type=1326 audit(1746899275.656:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.6.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc66e969 code=0x7ffc0000 [ 112.603068][ T29] audit: type=1326 audit(1746899275.656:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 112.626677][ T29] audit: type=1326 audit(1746899275.656:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 112.650482][ T29] audit: type=1326 audit(1746899275.656:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 112.674121][ T29] audit: type=1326 audit(1746899275.656:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 112.697631][ T29] audit: type=1326 audit(1746899275.656:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 112.721312][ T29] audit: type=1326 audit(1746899275.656:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 112.744985][ T29] audit: type=1326 audit(1746899275.656:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 112.858267][T10733] netlink: 'syz.5.3104': attribute type 1 has an invalid length. [ 112.934522][T10733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.945738][T10743] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 112.958429][T10747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.967448][T10747] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.008052][T10747] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 113.126635][T10777] loop2: detected capacity change from 0 to 512 [ 113.169186][T10777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.188071][T10777] ext4 filesystem being mounted at /621/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.214449][T10790] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 113.401063][T10811] loop5: detected capacity change from 0 to 1024 [ 113.408296][T10811] EXT4-fs: Ignoring removed bh option [ 113.410637][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3130'. [ 113.431233][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.441677][T10811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.496502][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.563233][T10826] loop5: detected capacity change from 0 to 1024 [ 113.570158][T10826] EXT4-fs: Ignoring removed bh option [ 113.575661][T10826] EXT4-fs: inline encryption not supported [ 113.586303][T10826] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.602322][T10826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 113.606936][T10834] vti0: entered promiscuous mode [ 113.616508][T10826] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.3137: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.634818][T10826] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.3137: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.668015][T10826] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3137: Failed to acquire dquot type 0 [ 113.679810][T10826] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 113.690113][T10826] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #11: comm syz.5.3137: mark_inode_dirty error [ 113.712763][T10826] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 113.738705][T10826] EXT4-fs (loop5): 1 orphan inode deleted [ 113.744892][T10826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.757505][ T5198] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.777849][ T5198] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:21: Failed to release dquot type 0 [ 113.818774][T10826] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.3137: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.839572][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3148'. [ 113.851469][T10849] 9pnet: p9_errstr2errno: server reported unknown error @ÿÿÿÿ [ 113.859716][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.894776][T10857] netlink: 'syz.6.3152': attribute type 1 has an invalid length. [ 113.911273][T10857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.933523][T10857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.941115][T10857] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.954705][T10857] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 113.969699][T10860] vti0: entered promiscuous mode [ 114.062086][T10867] SELinux: ebitmap: truncated map [ 114.070004][T10870] netlink: 'syz.7.3157': attribute type 17 has an invalid length. [ 114.072072][T10867] SELinux: failed to load policy [ 114.077952][T10870] netlink: 'syz.7.3157': attribute type 41 has an invalid length. [ 114.162183][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3163'. [ 114.171233][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3163'. [ 114.201749][T10888] loop5: detected capacity change from 0 to 128 [ 114.204459][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3163'. [ 114.243747][T10886] loop7: detected capacity change from 0 to 512 [ 114.279423][T10886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.317717][T10886] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.343974][T10901] loop5: detected capacity change from 0 to 512 [ 114.370505][T10901] EXT4-fs: Ignoring removed nobh option [ 114.380764][T10907] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 114.381213][T10906] IPVS: stopping master sync thread 10907 ... [ 114.462757][T10901] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.3171: corrupted inode contents [ 114.497519][T10901] EXT4-fs (loop5): Remounting filesystem read-only [ 114.504734][T10006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.513838][T10901] EXT4-fs (loop5): 1 truncate cleaned up [ 114.519957][T10901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.537663][ T5230] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.537959][T10901] ext4 filesystem being mounted at /606/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.548518][ T5230] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.602093][ T5230] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 114.616393][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.625525][T10923] loop2: detected capacity change from 0 to 512 [ 114.632653][T10923] EXT4-fs: inline encryption not supported [ 114.655240][T10922] loop6: detected capacity change from 0 to 1024 [ 114.664603][T10922] EXT4-fs: Ignoring removed bh option [ 114.671499][T10923] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.680843][T10927] netlink: 'syz.5.3183': attribute type 21 has an invalid length. [ 114.699575][T10922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.717099][T10923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.730005][T10923] ext4 filesystem being mounted at /636/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.765014][ T9994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.782773][T10944] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3190'. [ 114.848968][T10949] loop5: detected capacity change from 0 to 512 [ 114.856867][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.866363][T10949] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.881764][T10949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 114.903648][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 114.913310][T10960] bridge0: port 3(batadv1) entered disabled state [ 114.919901][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.920760][T10966] netlink: 'syz.7.3197': attribute type 9 has an invalid length. [ 114.927041][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.944361][T10949] EXT4-fs (loop5): 1 truncate cleaned up [ 114.953222][T10949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.968415][T10949] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 114.996687][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.029020][T10972] batadv1: entered promiscuous mode [ 115.046440][T10970] SELinux: ebitmap: truncated map [ 115.060514][T10970] SELinux: failed to load policy [ 115.126436][T10987] lo speed is unknown, defaulting to 1000 [ 115.134052][T10987] lo speed is unknown, defaulting to 1000 [ 115.140792][T10987] lo speed is unknown, defaulting to 1000 [ 115.146996][T10987] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.155997][T10987] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 115.168859][T10987] lo speed is unknown, defaulting to 1000 [ 115.175053][T10987] lo speed is unknown, defaulting to 1000 [ 115.181421][T10987] lo speed is unknown, defaulting to 1000 [ 115.187659][T10987] lo speed is unknown, defaulting to 1000 [ 115.194073][T10987] lo speed is unknown, defaulting to 1000 [ 115.237302][T10999] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.281035][T11007] loop7: detected capacity change from 0 to 1024 [ 115.288216][T11007] EXT4-fs: Ignoring removed bh option [ 115.312269][T11007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.339419][T10006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.392892][T11021] batadv1: entered promiscuous mode [ 115.951199][T11044] loop0: detected capacity change from 0 to 512 [ 115.983520][T11044] EXT4-fs (loop0): 1 orphan inode deleted [ 115.989695][T11044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.004659][ T5214] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:37: Failed to release dquot type 1 [ 116.015211][T11052] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.024913][T11052] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.027117][T11044] ext4 filesystem being mounted at /685/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.033710][T11052] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.052903][T11052] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.084698][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.098796][T11052] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.107907][T11052] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.116967][T11052] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.125902][T11052] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.135779][T11058] openvswitch: netlink: Message has 6 unknown bytes. [ 116.452825][T11078] netlink: 'syz.0.3246': attribute type 1 has an invalid length. [ 116.469932][T11080] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 116.779352][ T5198] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.843809][ T5198] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.883944][ T5198] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.917981][T11131] lo speed is unknown, defaulting to 1000 [ 116.926970][ T5198] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.032440][T11131] chnl_net:caif_netlink_parms(): no params data found [ 117.056355][ T5198] bridge_slave_1: left allmulticast mode [ 117.062145][ T5198] bridge_slave_1: left promiscuous mode [ 117.067903][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.082611][ T5198] bridge_slave_0: left allmulticast mode [ 117.088412][ T5198] bridge_slave_0: left promiscuous mode [ 117.094405][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.207343][ T5198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.216867][T11166] loop5: detected capacity change from 0 to 1024 [ 117.226385][ T5198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.236769][ T5198] bond0 (unregistering): Released all slaves [ 117.246152][ T5198] bond1 (unregistering): Released all slaves [ 117.254748][T11166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.271503][T11166] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 117.292354][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.327648][ T5198] hsr_slave_0: left promiscuous mode [ 117.334113][ T5198] hsr_slave_1: left promiscuous mode [ 117.339774][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.347302][ T5198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.358820][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.366516][ T5198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.400901][ T5198] veth1_macvtap: left promiscuous mode [ 117.406423][ T5198] veth0_macvtap: left promiscuous mode [ 117.421176][ T5198] veth1_vlan: left promiscuous mode [ 117.426477][ T5198] veth0_vlan: left promiscuous mode [ 117.549551][ T5198] team0 (unregistering): Port device team_slave_1 removed [ 117.574172][ T5198] team0 (unregistering): Port device team_slave_0 removed [ 117.661958][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.669085][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.687160][T11131] bridge_slave_0: entered allmulticast mode [ 117.694143][T11131] bridge_slave_0: entered promiscuous mode [ 117.706948][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.714159][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.723319][T11131] bridge_slave_1: entered allmulticast mode [ 117.734798][T11131] bridge_slave_1: entered promiscuous mode [ 117.753026][T11207] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.754948][T11210] __nla_validate_parse: 13 callbacks suppressed [ 117.754967][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 117.769778][T11207] xt_HMARK: spi-set and port-set can't be combined [ 117.796037][T11131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.811418][T11131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.820773][T11212] netem: incorrect ge model size [ 117.825804][T11212] netem: change failed [ 117.857287][T11131] team0: Port device team_slave_0 added [ 117.864666][T11131] team0: Port device team_slave_1 added [ 117.899426][T11131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.906557][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.932637][T11131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.969577][T11131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.976634][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.002646][T11131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.026989][T11229] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3312'. [ 118.086602][T11131] hsr_slave_0: entered promiscuous mode [ 118.092880][T11131] hsr_slave_1: entered promiscuous mode [ 118.107685][T11237] lo speed is unknown, defaulting to 1000 [ 118.236273][T11224] lo speed is unknown, defaulting to 1000 [ 118.354631][T11131] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 118.375242][T11131] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 118.408881][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 118.408995][ T29] audit: type=1326 audit(1746899281.516:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.438897][ T29] audit: type=1326 audit(1746899281.516:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.464234][ T29] audit: type=1326 audit(1746899281.516:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.487801][ T29] audit: type=1326 audit(1746899281.536:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.511474][ T29] audit: type=1326 audit(1746899281.536:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.535166][ T29] audit: type=1326 audit(1746899281.536:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.558707][ T29] audit: type=1326 audit(1746899281.536:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.582505][ T29] audit: type=1326 audit(1746899281.536:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.606064][ T29] audit: type=1326 audit(1746899281.536:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.629703][ T29] audit: type=1326 audit(1746899281.536:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.5.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 118.662294][ T5210] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.684846][T11131] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 118.694388][T11131] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 118.716625][T11267] loop2: detected capacity change from 0 to 512 [ 118.729015][ T5210] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.757945][T11267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.775163][T11274] loop0: detected capacity change from 0 to 512 [ 118.785733][T11267] ext4 filesystem being mounted at /661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.796010][T11274] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 118.806994][ T5210] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.818557][T11274] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 118.827043][T11274] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.3325: corrupted in-inode xattr: e_value size too large [ 118.843669][T11274] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3325: couldn't read orphan inode 15 (err -117) [ 118.852813][T11131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.856380][T11274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.864131][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.885708][T11224] chnl_net:caif_netlink_parms(): no params data found [ 118.906552][ T5210] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.005393][T11131] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.102476][T11224] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.109605][T11224] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.118533][T11224] bridge_slave_0: entered allmulticast mode [ 119.125457][T11224] bridge_slave_0: entered promiscuous mode [ 119.133994][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.141092][ T5214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.190414][T11224] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.197680][T11224] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.206161][T11224] bridge_slave_1: entered allmulticast mode [ 119.212609][T11287] loop2: detected capacity change from 0 to 8192 [ 119.220016][T11224] bridge_slave_1: entered promiscuous mode [ 119.232001][T11287] VFS: Lookup of 'file0' in vfat loop2 would have caused loop [ 119.248723][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.255849][ T5214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.287336][ T5210] bridge_slave_1: left allmulticast mode [ 119.293125][ T5210] bridge_slave_1: left promiscuous mode [ 119.298850][ T5210] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.317322][ T5210] bridge_slave_0: left allmulticast mode [ 119.323093][ T5210] bridge_slave_0: left promiscuous mode [ 119.328879][ T5210] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.339063][T11289] loop2: detected capacity change from 0 to 512 [ 119.354935][T11289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.397533][T11289] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.415100][ T5210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.429314][ T5210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.441820][ T5210] bond0 (unregistering): Released all slaves [ 119.457821][T11224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.475855][T11131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.486295][T11131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.524277][T11224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.550044][T11224] team0: Port device team_slave_0 added [ 119.565069][ T5210] hsr_slave_0: left promiscuous mode [ 119.572165][ T5210] hsr_slave_1: left promiscuous mode [ 119.582673][ T5210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.590134][ T5210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.602408][ T5210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.610060][ T5210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.640748][ T5210] veth1_macvtap: left promiscuous mode [ 119.646413][ T5210] veth0_macvtap: left promiscuous mode [ 119.652402][ T5210] veth1_vlan: left promiscuous mode [ 119.657852][ T5210] veth0_vlan: left promiscuous mode [ 119.755284][ T5210] team0 (unregistering): Port device team_slave_1 removed [ 119.766552][ T5210] team0 (unregistering): Port device team_slave_0 removed [ 119.815827][T11224] team0: Port device team_slave_1 added [ 119.823751][T11303] smc: net device bond0 applied user defined pnetid SYZ2 [ 119.823782][ T3167] lo speed is unknown, defaulting to 1000 [ 119.836649][ T3167] infiniband syz0: ib_query_port failed (-19) [ 119.857660][T11310] smc: net device bond0 erased user defined pnetid SYZ2 [ 119.887580][T11131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.906362][T11224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.913410][T11224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.939506][T11224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.962734][T11318] loop0: detected capacity change from 0 to 512 [ 119.978138][T11318] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.989351][T11224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.996468][T11224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.022461][T11224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.046717][T11318] EXT4-fs (loop0): 1 truncate cleaned up [ 120.118190][T11224] hsr_slave_0: entered promiscuous mode [ 120.139624][T11224] hsr_slave_1: entered promiscuous mode [ 120.147380][T11224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.156653][T11224] Cannot create hsr debugfs directory [ 120.254128][T11348] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 120.340223][T11131] veth0_vlan: entered promiscuous mode [ 120.365586][T11131] veth1_vlan: entered promiscuous mode [ 120.384206][T11358] loop2: detected capacity change from 0 to 8192 [ 120.385259][T11224] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 120.399675][T11224] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 120.409329][T11360] loop0: detected capacity change from 0 to 1024 [ 120.421065][T11224] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 120.431041][T11131] veth0_macvtap: entered promiscuous mode [ 120.438921][T11131] veth1_macvtap: entered promiscuous mode [ 120.445881][T11224] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 120.463678][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.474338][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.484242][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.494759][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.504640][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.508692][T11360] EXT4-fs: Ignoring removed orlov option [ 120.515082][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.517390][T11131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.520955][T11360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.532113][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.555244][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.565102][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.575571][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.585399][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.595836][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.607323][T11131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.623389][T11131] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.632299][T11131] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.641140][T11131] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.649850][T11131] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.753838][T11224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.766746][T11224] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.775659][T11381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3361'. [ 120.790182][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.797320][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.814821][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.822022][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.957375][T11224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.017524][T11401] syz.5.3369: attempt to access beyond end of device [ 121.017524][T11401] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.156350][T11422] openvswitch: netlink: Message has 6 unknown bytes. [ 121.210995][T11431] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 121.244030][T11224] veth0_vlan: entered promiscuous mode [ 121.249942][T11432] loop2: detected capacity change from 0 to 512 [ 121.259668][T11224] veth1_vlan: entered promiscuous mode [ 121.271496][T11432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.297639][T11432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.310132][T11224] veth0_macvtap: entered promiscuous mode [ 121.324626][T11224] veth1_macvtap: entered promiscuous mode [ 121.335397][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.341626][T11444] loop5: detected capacity change from 0 to 512 [ 121.346018][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.362205][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.372825][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.382961][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.385345][T11432] ext4 filesystem being mounted at /683/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.393549][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.393573][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.393589][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.395862][T11444] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.426386][T11224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.453809][T11448] sch_tbf: peakrate 64 is lower than or equals to rate 14020585672542658070 ! [ 121.467306][T11444] ext4 filesystem being mounted at /663/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.483479][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.494083][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.504131][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.515141][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.525195][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.535706][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.545552][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.556130][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.594081][T11224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.603263][T11456] tipc: Enabling of bearer rejected, failed to enable media [ 121.613611][T11224] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.622550][T11224] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.631360][T11224] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.640156][T11224] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.642035][T11463] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 121.729717][T11474] loop8: detected capacity change from 0 to 256 [ 121.807192][T11490] atomic_op ffff888102633528 conn xmit_atomic 0000000000000000 [ 121.894244][T11502] loop8: detected capacity change from 0 to 512 [ 121.948887][T11502] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.960408][T11504] vhci_hcd: default hub control req: 8010 v0002 i0000 l86 [ 121.965957][T11502] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3407: corrupted inode contents [ 121.971791][T11512] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 121.982343][T11502] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #2: comm syz.8.3407: mark_inode_dirty error [ 122.006381][T11502] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3407: corrupted inode contents [ 122.018823][T11502] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.3407: mark_inode_dirty error [ 122.043278][T11502] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3407: corrupted inode contents [ 122.070469][T11502] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #2: comm syz.8.3407: mark_inode_dirty error [ 122.082958][T11502] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3407: corrupted inode contents [ 122.096275][T11515] loop2: detected capacity change from 0 to 512 [ 122.105301][T11502] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3407: corrupted inode contents [ 122.127126][T11515] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.144771][T11502] EXT4-fs error (device loop8): add_dirent_to_buf:2155: inode #2: comm syz.8.3407: mark_inode_dirty error [ 122.154408][T11515] EXT4-fs (loop2): mount failed [ 122.168421][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3416'. [ 122.177575][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3417'. [ 122.190650][T11528] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.199583][T11528] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.208465][T11528] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.217412][T11528] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.235480][T11528] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.244545][T11528] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.253550][T11528] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.262536][T11528] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.316029][T11540] loop2: detected capacity change from 0 to 512 [ 122.325221][T11540] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.357164][T11540] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 122.373346][T11542] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3424'. [ 122.393452][T11540] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 122.413672][T11540] EXT4-fs (loop2): 1 truncate cleaned up [ 122.438391][T11552] loop9: detected capacity change from 0 to 256 [ 122.477938][T11556] loop8: detected capacity change from 0 to 512 [ 122.491001][T11556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.500475][T11556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.515151][T11559] sch_tbf: peakrate 64 is lower than or equals to rate 14020585672542658070 ! [ 122.516633][T11561] loop2: detected capacity change from 0 to 256 [ 122.533794][T11556] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.644396][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3440'. [ 122.715559][T11592] IPVS: Error joining to the multicast group [ 122.761424][T11599] loop9: detected capacity change from 0 to 512 [ 122.774240][T11599] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.794527][T11599] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.819810][T11603] loop0: detected capacity change from 0 to 512 [ 122.854648][T11609] loop9: detected capacity change from 0 to 256 [ 122.874417][T11603] ext4 filesystem being mounted at /728/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.887984][T11603] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3448: corrupted inode contents [ 122.903169][T11603] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.3448: mark_inode_dirty error [ 122.915289][T11603] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3448: corrupted inode contents [ 122.928786][T11618] __nla_validate_parse: 2 callbacks suppressed [ 122.928803][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 122.929321][T11603] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.3448: mark_inode_dirty error [ 122.935333][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.953657][T11603] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3448: corrupted inode contents [ 122.955277][T11618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.970667][T11603] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.3448: mark_inode_dirty error [ 122.993428][T11603] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3448: corrupted inode contents [ 122.994293][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.010872][T11603] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3448: corrupted inode contents [ 123.012797][T11618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.027378][T11603] EXT4-fs error (device loop0): add_dirent_to_buf:2155: inode #2: comm syz.0.3448: mark_inode_dirty error [ 123.078870][T11623] loop9: detected capacity change from 0 to 512 [ 123.086232][T11623] EXT4-fs: Ignoring removed oldalloc option [ 123.105157][T11623] EXT4-fs error (device loop9): ext4_quota_enable:7126: inode #4: comm syz.9.3456: unexpected EA_INODE flag [ 123.123035][T11623] EXT4-fs error (device loop9): ext4_quota_enable:7129: comm syz.9.3456: Bad quota inode: 4, type: 1 [ 123.134818][T11623] EXT4-fs warning (device loop9): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.152020][T11623] EXT4-fs (loop9): mount failed [ 123.152514][T11631] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3459' sets config #1 [ 123.228838][T11644] loop0: detected capacity change from 0 to 1024 [ 123.235933][T11644] EXT4-fs: Ignoring removed nobh option [ 123.241623][T11644] EXT4-fs: Ignoring removed bh option [ 123.306986][T11652] openvswitch: netlink: Message has 6 unknown bytes. [ 123.443224][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 123.443243][ T29] audit: type=1326 audit(1746899286.556:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.475363][ T29] audit: type=1326 audit(1746899286.556:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.499161][ T29] audit: type=1326 audit(1746899286.556:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.522904][ T29] audit: type=1326 audit(1746899286.556:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.546523][ T29] audit: type=1326 audit(1746899286.556:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.570074][ T29] audit: type=1326 audit(1746899286.556:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.593973][ T29] audit: type=1326 audit(1746899286.556:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.617631][ T29] audit: type=1326 audit(1746899286.556:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.641212][ T29] audit: type=1326 audit(1746899286.556:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5823fe969 code=0x7ffc0000 [ 123.696348][T11670] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3476'. [ 123.705523][T11670] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3476'. [ 123.714731][T11670] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3476'. [ 123.766557][T11679] openvswitch: netlink: Message has 6 unknown bytes. [ 123.794778][T11683] loop5: detected capacity change from 0 to 512 [ 123.801980][T11683] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 123.810754][T11685] wireguard0: entered promiscuous mode [ 123.823326][T11683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 123.831834][T11683] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3482: corrupted in-inode xattr: e_value size too large [ 123.846324][T11683] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3482: couldn't read orphan inode 15 (err -117) [ 123.934014][ T29] audit: type=1326 audit(1746899287.046:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.8.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c04ee969 code=0x7ffc0000 [ 124.326272][T11712] loop8: detected capacity change from 0 to 512 [ 124.333494][T11712] EXT4-fs: Ignoring removed nobh option [ 124.359094][T11712] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.3494: corrupted inode contents [ 124.371902][T11712] EXT4-fs (loop8): Remounting filesystem read-only [ 124.378907][T11712] EXT4-fs (loop8): 1 truncate cleaned up [ 124.385858][T11712] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.396370][ T5230] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.407219][ T5230] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.421203][ T5230] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 124.725135][T11743] unsupported nlmsg_type 40 [ 124.787877][T11753] loop8: detected capacity change from 0 to 1024 [ 124.836596][T11757] loop5: detected capacity change from 0 to 512 [ 124.844119][T11757] EXT4-fs: Ignoring removed oldalloc option [ 124.872580][T11757] EXT4-fs error (device loop5): ext4_quota_enable:7126: inode #4: comm syz.5.3512: unexpected EA_INODE flag [ 124.885383][T11757] EXT4-fs error (device loop5): ext4_quota_enable:7129: comm syz.5.3512: Bad quota inode: 4, type: 1 [ 124.898379][T11757] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.913609][T11757] EXT4-fs (loop5): mount failed [ 125.026971][T11766] wireguard0: entered promiscuous mode [ 125.097642][T11771] loop8: detected capacity change from 0 to 512 [ 125.104753][T11771] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 125.114851][T11771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 125.123611][T11771] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.3517: corrupted in-inode xattr: e_value size too large [ 125.139864][T11771] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3517: couldn't read orphan inode 15 (err -117) [ 125.257213][T11781] loop2: detected capacity change from 0 to 512 [ 125.264053][T11781] EXT4-fs: Ignoring removed nobh option [ 125.283010][T11781] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3521: invalid indirect mapped block 256 (level 2) [ 125.297028][T11781] EXT4-fs (loop2): 2 truncates cleaned up [ 125.361317][T11780] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3521: bg 0: block 5: invalid block bitmap [ 125.375286][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748400 > max in inode 15 [ 125.386345][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748404 > max in inode 15 [ 125.397603][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748408 > max in inode 15 [ 125.452132][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748412 > max in inode 15 [ 125.470579][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748416 > max in inode 15 [ 125.490753][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748420 > max in inode 15 [ 125.501552][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748424 > max in inode 15 [ 125.511909][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748428 > max in inode 15 [ 125.522381][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748432 > max in inode 15 [ 125.533006][T11781] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748436 > max in inode 15 [ 125.620519][T11789] loop5: detected capacity change from 0 to 512 [ 125.689194][T11789] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.792400][T11789] EXT4-fs (loop5): 1 truncate cleaned up [ 125.990725][T11806] netlink: 'syz.5.3531': attribute type 3 has an invalid length. [ 126.052231][T11808] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 126.115124][T11814] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 126.212614][T11825] binfmt_misc: register: failed to install interpreter file ./file0 [ 126.242350][T11830] netlink: 'syz.5.3542': attribute type 21 has an invalid length. [ 126.418650][T11855] loop5: detected capacity change from 0 to 128 [ 126.427305][T11855] ext4 filesystem being mounted at /704/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.441018][T11858] loop0: detected capacity change from 0 to 256 [ 126.447870][T11858] msdos: Bad value for 'gid' [ 126.452651][T11858] msdos: Bad value for 'gid' [ 126.558618][T11874] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3561'. [ 126.584897][T11876] loop0: detected capacity change from 0 to 736 [ 126.644166][T11880] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3564'. [ 126.653289][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'. [ 126.678913][T11886] loop9: detected capacity change from 0 to 1024 [ 126.701885][T11892] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 126.800512][T11901] 9pnet: Could not find request transport: 0xffffffffffffffff [ 126.904651][T11912] netlink: 'syz.0.3576': attribute type 1 has an invalid length. [ 126.929777][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3577'. [ 126.956779][T11916] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3578'. [ 127.008373][T11922] loop0: detected capacity change from 0 to 128 [ 127.018129][T11922] ext4 filesystem being mounted at /775/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.182825][T11947] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3591'. [ 127.202687][T11947] 0ªX¹¦À: renamed from caif0 [ 127.225002][T11947] 0ªX¹¦À: entered allmulticast mode [ 127.230262][T11947] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 127.296943][T11964] loop9: detected capacity change from 0 to 512 [ 127.304960][T11964] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 127.327678][T11964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 127.336782][T11964] EXT4-fs error (device loop9): ext4_iget_extra_inode:4693: inode #15: comm syz.9.3599: corrupted in-inode xattr: e_value size too large [ 127.355158][T11964] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3599: couldn't read orphan inode 15 (err -117) [ 127.428723][T11981] loop8: detected capacity change from 0 to 736 [ 127.497288][T11985] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11985 comm=syz.5.3610 [ 127.509999][T11985] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11985 comm=syz.5.3610 [ 127.751520][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.778570][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.209882][T12032] __nla_validate_parse: 1 callbacks suppressed [ 128.209899][T12032] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3633'. [ 128.346090][T12041] infiniband syz2: set active [ 128.350935][T12041] infiniband syz2: added veth0_to_bond [ 128.386576][T12063] loop2: detected capacity change from 0 to 512 [ 128.392327][T12041] RDS/IB: syz2: added [ 128.400363][T12041] smc: adding ib device syz2 with port count 1 [ 128.406943][T12063] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 128.409317][T12041] smc: ib device syz2 port 1 has pnetid [ 128.428015][T12063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 128.500592][T12063] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.3647: corrupted in-inode xattr: e_value size too large [ 128.531810][T12063] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3647: couldn't read orphan inode 15 (err -117) [ 128.572308][T12063] EXT4-fs mount: 42 callbacks suppressed [ 128.572324][T12063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.623091][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 128.623109][ T29] audit: type=1400 audit(1746899291.736:4126): avc: denied { create } for pid=12072 comm="syz.8.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.655723][ T29] audit: type=1400 audit(1746899291.736:4127): avc: denied { ioctl } for pid=12072 comm="syz.8.3650" path="socket:[33699]" dev="sockfs" ino=33699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.681219][ T29] audit: type=1400 audit(1746899291.736:4128): avc: denied { bind } for pid=12072 comm="syz.8.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.700916][ T29] audit: type=1400 audit(1746899291.736:4129): avc: denied { mount } for pid=12062 comm="syz.2.3647" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 128.729374][ T29] audit: type=1400 audit(1746899291.766:4130): avc: denied { write } for pid=12062 comm="syz.2.3647" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.751281][ T29] audit: type=1400 audit(1746899291.766:4131): avc: denied { add_name } for pid=12062 comm="syz.2.3647" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.772101][ T29] audit: type=1400 audit(1746899291.766:4132): avc: denied { create } for pid=12062 comm="syz.2.3647" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.792399][ T29] audit: type=1400 audit(1746899291.766:4133): avc: denied { read write open } for pid=12062 comm="syz.2.3647" path="/722/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.845599][ T29] audit: type=1400 audit(1746899291.956:4134): avc: denied { mounton } for pid=12076 comm="syz.5.3652" path="/717/file0" dev="tmpfs" ino=3711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.847432][T12078] loop8: detected capacity change from 0 to 1024 [ 128.868484][ T29] audit: type=1400 audit(1746899291.956:4135): avc: denied { create } for pid=12074 comm="syz.9.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.895295][T12078] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.906292][T12078] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 128.918468][T12078] JBD2: no valid journal superblock found [ 128.924280][T12078] EXT4-fs (loop8): Could not load journal inode [ 128.942450][T12078] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 128.974619][T12083] loop8: detected capacity change from 0 to 1024 [ 129.000125][T12085] loop9: detected capacity change from 0 to 512 [ 129.004309][T12087] loop5: detected capacity change from 0 to 512 [ 129.009457][T12083] EXT4-fs: Ignoring removed oldalloc option [ 129.015203][T12087] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.018959][T12083] EXT4-fs: Ignoring removed oldalloc option [ 129.028657][T12085] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 129.046688][T12085] EXT4-fs (loop9): 1 truncate cleaned up [ 129.048456][T12087] EXT4-fs (loop5): 1 truncate cleaned up [ 129.055982][T12085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.072352][T12083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.085457][T12087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.128637][T11224] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.146782][T12083] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 129.162726][T12083] EXT4-fs (loop8): Remounting filesystem read-only [ 129.196418][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.342483][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.386682][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.495954][T12121] loop5: detected capacity change from 0 to 1024 [ 129.510831][T12121] EXT4-fs: Ignoring removed oldalloc option [ 129.519565][T12121] EXT4-fs: Ignoring removed oldalloc option [ 129.567449][T12121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.659559][T12121] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 129.691289][T12121] EXT4-fs (loop5): Remounting filesystem read-only [ 129.741091][ T4085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.796618][T12145] SELinux: failed to load policy [ 129.814894][T12149] netlink: 'syz.5.3681': attribute type 11 has an invalid length. [ 129.833810][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.846562][T12154] loop8: detected capacity change from 0 to 1024 [ 129.855848][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.870643][T12149] netlink: 448 bytes leftover after parsing attributes in process `syz.5.3681'. [ 129.880301][T12154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.893408][T12154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.909071][T12154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.951431][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 129.959245][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.003958][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.014682][T12168] loop0: detected capacity change from 0 to 2048 [ 130.045724][T12170] loop2: detected capacity change from 0 to 1024 [ 130.057300][T12168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.058920][T12170] EXT4-fs: Ignoring removed nobh option [ 130.095413][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.115210][T12170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.133677][T12177] loop8: detected capacity change from 0 to 1024 [ 130.141477][T12177] EXT4-fs: Ignoring removed nobh option [ 130.147161][T12177] EXT4-fs: Ignoring removed nobh option [ 130.154469][T12177] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 130.165384][T12177] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: comm syz.8.3693: inode #4294967295: comm syz.8.3693: iget: illegal inode # [ 130.200150][T12177] EXT4-fs (loop8): no journal found [ 130.205469][T12177] EXT4-fs (loop8): can't get journal size [ 130.216642][T12170] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 130.237946][T12177] EXT4-fs (loop8): failed to initialize system zone (-22) [ 130.251864][T12177] EXT4-fs (loop8): mount failed [ 130.263592][T12188] IPv6: Can't replace route, no match found [ 130.332610][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.527582][T12224] loop8: detected capacity change from 0 to 256 [ 130.537628][T12228] IPv6: Can't replace route, no match found [ 130.547772][T12224] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 130.555787][T12224] FAT-fs (loop8): Filesystem has been set read-only [ 130.597664][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3718'. [ 130.648070][T12237] mmap: syz.8.3720 (12237): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 130.776040][T12254] loop0: detected capacity change from 0 to 164 [ 130.783237][T12254] Unable to read rock-ridge attributes [ 130.835047][T12264] loop0: detected capacity change from 0 to 1024 [ 130.841931][T12264] EXT4-fs: Ignoring removed oldalloc option [ 130.848189][T12264] EXT4-fs: Ignoring removed oldalloc option [ 130.873603][T12271] xt_hashlimit: size too large, truncated to 1048576 [ 130.882870][T12264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.923068][T12264] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 130.938015][T12264] EXT4-fs (loop0): Remounting filesystem read-only [ 130.990429][T12274] loop8: detected capacity change from 0 to 4096 [ 131.017998][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.037891][T12274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.072734][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.118779][T12289] loop8: detected capacity change from 0 to 2048 [ 131.165220][T12289] loop8: p2 p3 p7 [ 131.296422][T12303] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.3750'. [ 131.332536][T12305] loop9: detected capacity change from 0 to 512 [ 131.344274][T12305] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 131.356891][T12305] block device autoloading is deprecated and will be removed. [ 131.377170][T12305] syz.9.3751: attempt to access beyond end of device [ 131.377170][T12305] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 131.395975][T12305] EXT4-fs (loop9): couldn't read superblock of external journal [ 131.433487][ T9] IPVS: starting estimator thread 0... [ 131.439409][T12309] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 131.520602][T12312] IPVS: using max 2112 ests per chain, 105600 per kthread [ 131.540114][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3757'. [ 131.549214][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3757'. [ 131.565743][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3757'. [ 131.586089][T12321] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3758'. [ 131.589038][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3757'. [ 131.604091][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3757'. [ 131.620282][T12324] loop9: detected capacity change from 0 to 164 [ 131.658920][T12324] syz.9.3759: attempt to access beyond end of device [ 131.658920][T12324] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 131.690129][T12324] syz.9.3759: attempt to access beyond end of device [ 131.690129][T12324] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 131.724509][T12334] loop0: detected capacity change from 0 to 2048 [ 131.750320][T12334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.783313][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.943126][T12377] loop5: detected capacity change from 0 to 512 [ 131.949972][T12377] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.956835][T12374] loop9: detected capacity change from 0 to 2048 [ 131.963552][T12378] loop8: detected capacity change from 0 to 512 [ 131.971619][T12378] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 131.982905][T12377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.996174][T12374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.018478][T12378] syz.8.3782: attempt to access beyond end of device [ 132.018478][T12378] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 132.046188][T12378] EXT4-fs (loop8): couldn't read superblock of external journal [ 132.080594][T11224] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.252522][T12403] loop0: detected capacity change from 0 to 1024 [ 132.259307][T12403] EXT4-fs: Ignoring removed orlov option [ 132.265077][T12403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.274025][T12405] dvmrp0: entered allmulticast mode [ 132.291801][T12405] dvmrp0: left allmulticast mode [ 132.333659][T12413] loop8: detected capacity change from 0 to 164 [ 132.337932][T12403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.355259][T12413] syz.8.3797: attempt to access beyond end of device [ 132.355259][T12413] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 132.370490][T12403] random: crng reseeded on system resumption [ 132.371469][T12413] syz.8.3797: attempt to access beyond end of device [ 132.371469][T12413] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.418581][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.473590][ T5244] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.554877][ T5244] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.594051][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.625267][ T5244] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.690278][T12432] loop8: detected capacity change from 0 to 8192 [ 132.705625][T12432] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.724263][T12446] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 132.724426][T12445] IPVS: stopping backup sync thread 12446 ... [ 132.761279][ T5244] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.829921][T12453] loop7: detected capacity change from 0 to 16384 [ 132.868599][T12455] loop8: detected capacity change from 0 to 1024 [ 132.878573][T12455] EXT4-fs: Ignoring removed nobh option [ 132.897749][T12455] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.919544][ T5244] bridge_slave_1: left allmulticast mode [ 132.925298][ T5244] bridge_slave_1: left promiscuous mode [ 132.931168][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.949938][ T5244] bridge_slave_0: left allmulticast mode [ 132.955785][ T5244] bridge_slave_0: left promiscuous mode [ 132.961530][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.972281][T12455] EXT4-fs warning (device loop8): ext4_rename_delete:3728: inode #12: comm syz.8.3813: Deleting old file: nlink 2, error=-2 [ 133.023610][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.074051][ T5244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.086437][ T5244] bond_slave_0: left allmulticast mode [ 133.093507][ T5244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.106393][T12471] atomic_op ffff88813129c528 conn xmit_atomic 0000000000000000 [ 133.114706][ T5244] bond_slave_1: left allmulticast mode [ 133.131246][ T5244] bond0 (unregistering): (slave team0): Releasing backup interface [ 133.146611][ T5244] team0: left allmulticast mode [ 133.151572][ T5244] team_slave_0: left allmulticast mode [ 133.157132][ T5244] team_slave_1: left allmulticast mode [ 133.165328][ T5244] bond0 (unregistering): Released all slaves [ 133.174652][ T5244] bond1 (unregistering): Released all slaves [ 133.183900][ T5244] bond2 (unregistering): Released all slaves [ 133.193114][ T3167] syz2: Port: 1 Link DOWN [ 133.233346][T12425] chnl_net:caif_netlink_parms(): no params data found [ 133.265042][T12479] loop9: detected capacity change from 0 to 2048 [ 133.283009][T12482] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 133.286221][T12478] IPVS: stopping backup sync thread 12482 ... [ 133.300355][ T5244] hsr_slave_0: left promiscuous mode [ 133.306361][ T5244] hsr_slave_1: left promiscuous mode [ 133.312525][ T5244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.320013][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.329486][ T5244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.333966][T12479] loop9: p2 p3 p7 [ 133.337139][ T5244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.351654][ T5244] veth1_macvtap: left promiscuous mode [ 133.357298][ T5244] veth1_vlan: left promiscuous mode [ 133.362709][ T5244] veth0_vlan: left promiscuous mode [ 133.443700][ T5244] team0 (unregistering): Port device team_slave_1 removed [ 133.456385][ T5244] team0 (unregistering): Port device team_slave_0 removed [ 133.474137][ T5230] smc: removing ib device syz2 [ 133.624675][T12495] loop0: detected capacity change from 0 to 512 [ 133.632526][T12425] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.639666][T12425] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.642611][T12495] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 133.658354][T12495] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it [ 133.668480][T12495] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.3828: Corrupt directory, running e2fsck is recommended [ 133.670753][T12425] bridge_slave_0: entered allmulticast mode [ 133.687782][T12495] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 133.743456][T12425] bridge_slave_0: entered promiscuous mode [ 133.761566][T12425] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.768685][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.793357][T12495] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.3828: corrupted in-inode xattr: invalid ea_ino [ 133.833688][T12425] bridge_slave_1: entered allmulticast mode [ 133.852098][T12425] bridge_slave_1: entered promiscuous mode [ 133.858386][T12495] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3828: couldn't read orphan inode 15 (err -117) [ 133.861027][T12499] rdma_op ffff88813129c580 conn xmit_rdma 0000000000000000 [ 133.896917][T12495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.933958][T12425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.944810][T12425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.973020][T12425] team0: Port device team_slave_0 added [ 133.979917][T12425] team0: Port device team_slave_1 added [ 133.988148][T12495] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 133.999827][T12495] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it [ 134.009981][T12495] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.3828: Corrupt directory, running e2fsck is recommended [ 134.055498][T12425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.062541][T12425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.089184][T12425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.103187][ T5244] IPVS: stop unused estimator thread 0... [ 134.114915][T12425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.122104][T12425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.148105][T12425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.158919][T12495] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.170493][T12495] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it [ 134.180637][T12495] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.3828: Corrupt directory, running e2fsck is recommended [ 134.233009][T12425] hsr_slave_0: entered promiscuous mode [ 134.239066][T12425] hsr_slave_1: entered promiscuous mode [ 134.247077][T12425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.254879][T12425] Cannot create hsr debugfs directory [ 134.313119][T12502] loop9: detected capacity change from 0 to 1024 [ 134.329955][T12502] EXT4-fs: Ignoring removed orlov option [ 134.335773][T12502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.342898][T12495] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.354642][T12495] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it [ 134.364863][T12495] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.3828: Corrupt directory, running e2fsck is recommended [ 134.386315][T12495] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 134.412786][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.419492][T12502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.442701][T12502] random: crng reseeded on system resumption [ 134.539616][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 134.539633][ T29] audit: type=1326 audit(1746899297.646:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12501 comm="syz.9.3831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5b1b5e969 code=0x0 [ 134.697870][T12515] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 134.710944][T12514] IPVS: stopping backup sync thread 12515 ... [ 134.812167][T12425] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.832509][T12425] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.847284][T12525] netlink: 'syz.2.3841': attribute type 1 has an invalid length. [ 134.847677][T12425] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.855082][ T29] audit: type=1400 audit(1746899297.956:4361): avc: denied { create } for pid=12522 comm="syz.8.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.901690][T12528] serio: Serial port ptm0 [ 134.906381][ T29] audit: type=1400 audit(1746899297.996:4362): avc: denied { connect } for pid=12522 comm="syz.8.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.911271][T12425] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.012292][T12425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.023709][T12545] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.033654][T12545] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.050350][T12425] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.059408][T12549] loop2: detected capacity change from 0 to 1024 [ 135.062125][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.066691][T12549] EXT4-fs: Ignoring removed bh option [ 135.072927][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.093091][T12545] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.103023][T12545] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.113955][ T29] audit: type=1326 audit(1746899298.226:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.8.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c04ee969 code=0x7ffc0000 [ 135.115119][T12549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.137633][ T29] audit: type=1326 audit(1746899298.226:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.8.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c04ee969 code=0x7ffc0000 [ 135.188743][ T29] audit: type=1326 audit(1746899298.266:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.8.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c04ee969 code=0x7ffc0000 [ 135.198125][T11224] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.212528][ T29] audit: type=1326 audit(1746899298.266:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.8.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c04ee969 code=0x7ffc0000 [ 135.244932][ T29] audit: type=1326 audit(1746899298.266:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.8.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c04ee969 code=0x7ffc0000 [ 135.248712][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.268619][ T29] audit: type=1326 audit(1746899298.266:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.8.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5c04ee969 code=0x7ffc0000 [ 135.275483][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.299145][ T29] audit: type=1326 audit(1746899298.266:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.8.3853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c04ee969 code=0x7ffc0000 [ 135.322688][T12425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.340277][T12425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.378892][T12559] __nla_validate_parse: 7 callbacks suppressed [ 135.378910][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3854'. [ 135.396086][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.396561][T12545] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.415108][T12545] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.475513][T12425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.488527][T12545] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.498552][T12545] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.550209][T12545] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.558679][T12545] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.570642][T12545] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.578988][T12545] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.598010][T12545] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.606454][T12545] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.622171][T12545] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.630579][T12545] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.681794][T12591] loop9: detected capacity change from 0 to 256 [ 135.762325][T12602] netlink: 24 bytes leftover after parsing attributes in process `&'. [ 135.773310][T12425] veth0_vlan: entered promiscuous mode [ 135.787530][T12425] veth1_vlan: entered promiscuous mode [ 135.806866][T12608] hub 9-0:1.0: USB hub found [ 135.820604][T12425] veth0_macvtap: entered promiscuous mode [ 135.826515][T12608] hub 9-0:1.0: 8 ports detected [ 135.835548][T12425] veth1_macvtap: entered promiscuous mode [ 135.846195][T12612] netlink: 'syz.0.3873': attribute type 1 has an invalid length. [ 135.858071][T12425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.868577][T12425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.878433][T12425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.888990][T12425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.898920][T12425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.909538][T12425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.920348][T12425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.929689][T12425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.940383][T12425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.950278][T12425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.961057][T12425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.970994][T12425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.981548][T12425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.998072][T12425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.014915][T12425] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.023800][T12425] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.032731][T12425] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.041616][T12425] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.099608][T12628] serio: Serial port ptm0 [ 136.129548][T12631] SELinux: failed to load policy [ 136.841178][T12656] loop8: detected capacity change from 0 to 164 [ 136.849584][T12656] syz.8.3895: attempt to access beyond end of device [ 136.849584][T12656] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 136.864037][T12656] syz.8.3895: attempt to access beyond end of device [ 136.864037][T12656] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 136.958986][T12665] loop4: detected capacity change from 0 to 512 [ 136.966494][T12665] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 136.975666][T12665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 136.986891][T12665] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.3896: corrupted in-inode xattr: e_value size too large [ 137.002631][T12665] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3896: couldn't read orphan inode 15 (err -117) [ 137.016081][T12665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.117923][T12682] loop2: detected capacity change from 0 to 2048 [ 137.171098][T12682] Alternate GPT is invalid, using primary GPT. [ 137.177437][T12682] loop2: p1 p2 p3 [ 137.211864][T12686] loop0: detected capacity change from 0 to 512 [ 137.219182][T12686] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.259859][T12686] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3904: bad orphan inode 131083 [ 137.317446][T12686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.432011][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.519679][T12705] loop9: detected capacity change from 0 to 512 [ 137.552994][T12705] EXT4-fs (loop9): orphan cleanup on readonly fs [ 137.563748][T12705] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3912: bad orphan inode 13 [ 137.581853][T12705] ext4_test_bit(bit=12, block=18) = 1 [ 137.587288][T12705] is_bad_inode(inode)=0 [ 137.591561][T12705] NEXT_ORPHAN(inode)=2130706432 [ 137.596425][T12705] max_ino=32 [ 137.599641][T12705] i_nlink=1 [ 137.603442][T12705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.710734][T11224] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.848304][T12726] netlink: 'syz.9.3922': attribute type 3 has an invalid length. [ 137.898101][T12425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.911084][T12730] loop8: detected capacity change from 0 to 512 [ 137.917659][T12730] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.924883][T12730] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 137.935888][T12734] loop9: detected capacity change from 0 to 1024 [ 137.944231][T12730] EXT4-fs (loop8): 1 truncate cleaned up [ 137.944929][T12734] EXT4-fs: Ignoring removed bh option [ 137.950881][T12730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.988115][T12734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.005880][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.051881][T11224] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.064866][T12750] serio: Serial port ptm0 [ 138.127382][T12763] loop8: detected capacity change from 0 to 512 [ 138.143080][T12763] EXT4-fs (loop8): orphan cleanup on readonly fs [ 138.174434][T12773] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3941'. [ 138.183776][T12763] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3938: bad orphan inode 13 [ 138.212242][T12763] ext4_test_bit(bit=12, block=18) = 1 [ 138.214629][T12775] loop4: detected capacity change from 0 to 1024 [ 138.217671][T12763] is_bad_inode(inode)=0 [ 138.217723][T12763] NEXT_ORPHAN(inode)=2130706432 [ 138.217732][T12763] max_ino=32 [ 138.217739][T12763] i_nlink=1 [ 138.221132][T12763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.229083][T12775] EXT4-fs: Ignoring removed bh option [ 138.281137][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.302794][T12775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.338131][T12425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.389890][T12790] hub 9-0:1.0: USB hub found [ 138.395290][T12790] hub 9-0:1.0: 8 ports detected [ 138.404133][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3950'. [ 138.413103][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3950'. [ 138.575906][T12820] loop8: detected capacity change from 0 to 128 [ 138.600889][T12820] EXT4-fs: Ignoring removed nobh option [ 138.620173][T12820] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.666570][T12820] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.688156][T12831] hub 9-0:1.0: USB hub found [ 138.702924][T12831] hub 9-0:1.0: 8 ports detected [ 138.771929][T11131] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.827201][T12842] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 138.827394][T12843] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.857823][T12843] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.923568][T12843] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.933549][T12843] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.002683][T12843] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.012586][T12843] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.031070][T12857] loop0: detected capacity change from 0 to 512 [ 139.037584][T12861] loop8: detected capacity change from 0 to 512 [ 139.056170][T12857] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.056841][T12861] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.064678][T12857] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3976: bad orphan inode 13 [ 139.074097][T12861] EXT4-fs warning (device loop8): dx_probe:851: Enable large directory feature to access it [ 139.094290][T12861] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.3978: Corrupt directory, running e2fsck is recommended [ 139.096956][T12857] ext4_test_bit(bit=12, block=18) = 1 [ 139.112790][T12857] is_bad_inode(inode)=0 [ 139.116955][T12857] NEXT_ORPHAN(inode)=2130706432 [ 139.120373][T12861] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 139.121832][T12857] max_ino=32 [ 139.121842][T12857] i_nlink=1 [ 139.132213][T12857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.135238][T12861] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.3978: corrupted in-inode xattr: invalid ea_ino [ 139.164855][T12861] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3978: couldn't read orphan inode 15 (err -117) [ 139.177855][T12843] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.178253][T12861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.187942][T12843] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.249268][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.260809][T12861] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.266323][T12843] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.272415][T12861] EXT4-fs warning (device loop8): dx_probe:851: Enable large directory feature to access it [ 139.272443][T12861] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.3978: Corrupt directory, running e2fsck is recommended [ 139.291582][T12861] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.303716][T12843] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.307377][T12843] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.315225][T12861] EXT4-fs warning (device loop8): dx_probe:851: Enable large directory feature to access it [ 139.323461][T12843] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.331835][T12861] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.3978: Corrupt directory, running e2fsck is recommended [ 139.345707][T12843] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.371440][T12843] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.388298][T12843] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.396630][T12843] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.429715][T12861] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.441373][T12861] EXT4-fs warning (device loop8): dx_probe:851: Enable large directory feature to access it [ 139.451700][T12861] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.3978: Corrupt directory, running e2fsck is recommended [ 139.483223][T12878] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.545497][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.575224][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 139.575244][ T29] audit: type=1400 audit(1746899302.686:4490): avc: denied { bind } for pid=12890 comm="syz.8.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.610658][ T29] audit: type=1400 audit(1746899302.686:4491): avc: denied { name_bind } for pid=12890 comm="syz.8.3992" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 139.632689][ T29] audit: type=1400 audit(1746899302.686:4492): avc: denied { node_bind } for pid=12890 comm="syz.8.3992" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 139.660029][ T29] audit: type=1326 audit(1746899302.746:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.2.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c8e6e969 code=0x7ffc0000 [ 139.683596][ T29] audit: type=1326 audit(1746899302.746:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.2.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c8e6e969 code=0x7ffc0000 [ 139.707197][ T29] audit: type=1326 audit(1746899302.766:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.2.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99c8e6e969 code=0x7ffc0000 [ 139.733646][ T29] audit: type=1326 audit(1746899302.766:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.2.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c8e6e969 code=0x7ffc0000 [ 139.757396][ T29] audit: type=1326 audit(1746899302.766:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.2.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c8e6e969 code=0x7ffc0000 [ 139.781106][ T29] audit: type=1326 audit(1746899302.846:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.2.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99c8e6e969 code=0x7ffc0000 [ 139.804673][ T29] audit: type=1326 audit(1746899302.846:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.2.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c8e6e969 code=0x7ffc0000 [ 139.894577][T12906] xt_hashlimit: max too large, truncated to 1048576 [ 139.901754][T12909] loop0: detected capacity change from 0 to 256 [ 139.908273][T12898] loop4: detected capacity change from 0 to 164 [ 139.937243][T12898] Unable to read rock-ridge attributes [ 139.943924][T12898] Unable to read rock-ridge attributes [ 139.959938][T12898] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.039327][T12927] loop2: detected capacity change from 0 to 128 [ 140.096406][T12927] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.182043][T12927] ext4 filesystem being mounted at /790/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.224368][T12951] ALSA: seq fatal error: cannot create timer (-22) [ 140.277439][T12960] xt_hashlimit: max too large, truncated to 1048576 [ 140.285837][T12960] Cannot find set identified by id 0 to match [ 140.324966][T12965] SELinux: policydb version 0 does not match my version range 15-34 [ 140.334333][T12965] SELinux: failed to load policy [ 140.351803][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.426974][T12981] serio: Serial port ptm0 [ 140.483651][T12990] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 140.533858][T12993] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.584207][T12993] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.639045][T12993] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.704048][T12993] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.771125][T12993] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.785045][T12993] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.796790][T12993] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.810465][T12993] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.819047][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'. [ 140.828099][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4051'. [ 140.873775][T13025] loop8: detected capacity change from 0 to 2048 [ 140.887603][T13027] loop2: detected capacity change from 0 to 512 [ 140.895499][T13027] EXT4-fs: Ignoring removed nobh option [ 140.904312][T13025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.918097][T13027] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 140.927475][T13027] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4053: invalid indirect mapped block 2683928664 (level 1) [ 140.942094][T13027] EXT4-fs (loop2): 1 truncate cleaned up [ 140.948371][T13027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.978485][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.016406][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.076574][T13044] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.229001][T13070] loop8: detected capacity change from 0 to 512 [ 141.237393][T13070] EXT4-fs (loop8): orphan cleanup on readonly fs [ 141.244322][T13070] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4072: bad orphan inode 13 [ 141.254808][T13070] ext4_test_bit(bit=12, block=18) = 1 [ 141.260228][T13070] is_bad_inode(inode)=0 [ 141.264454][T13070] NEXT_ORPHAN(inode)=2130706432 [ 141.269324][T13070] max_ino=32 [ 141.272636][T13070] i_nlink=1 [ 141.276305][T13070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.303181][T11131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.405084][T13085] loop8: detected capacity change from 0 to 1024 [ 141.413643][T13085] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 141.424661][T13085] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 141.439433][T13085] JBD2: no valid journal superblock found [ 141.445295][T13085] EXT4-fs (loop8): Could not load journal inode [ 141.481531][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4081'. [ 141.502833][T13095] loop8: detected capacity change from 0 to 512 [ 141.511565][T13095] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 141.526526][T13095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 141.535173][T13095] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.4083: corrupted in-inode xattr: e_value size too large [ 141.549851][T13095] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4083: couldn't read orphan inode 15 (err -117) [ 141.798326][T13118] binfmt_misc: register: failed to install interpreter file ./file2 [ 141.827508][T13120] futex_wake_op: syz.4.4095 tries to shift op by -1; fix this program [ 142.245672][T13150] loop9: detected capacity change from 0 to 512 [ 142.264490][T13150] EXT4-fs (loop9): 1 orphan inode deleted [ 142.282939][ T5244] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 1 [ 142.297554][T13150] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.378696][ T5244] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 1 [ 142.509689][T13182] loop0: detected capacity change from 0 to 1024 [ 142.582806][T13197] loop9: detected capacity change from 0 to 2048 [ 142.583001][T13200] loop0: detected capacity change from 0 to 512 [ 142.620758][T13200] ext4 filesystem being mounted at /877/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.848114][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4143'. [ 142.923687][T13238] loop9: detected capacity change from 0 to 512 [ 142.930490][T13238] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.945386][T13241] loop2: detected capacity change from 0 to 1024 [ 142.952418][T13241] ext4: Bad value for 'max_dir_size_kb' [ 143.228001][T13271] loop2: detected capacity change from 0 to 512 [ 143.255668][T13271] ext4 filesystem being mounted at /827/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.294934][T13280] loop9: detected capacity change from 0 to 1024 [ 143.302216][T13280] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 143.313206][T13280] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 143.324104][T13280] JBD2: no valid journal superblock found [ 143.329857][T13280] EXT4-fs (loop9): Could not load journal inode [ 143.454727][T13297] loop2: detected capacity change from 0 to 128 [ 143.553111][T13311] loop4: detected capacity change from 0 to 1024 [ 143.560132][T13311] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 143.571145][T13311] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 143.583502][T13313] loop9: detected capacity change from 0 to 2048 [ 143.584217][T13311] JBD2: no valid journal superblock found [ 143.595694][T13311] EXT4-fs (loop4): Could not load journal inode [ 143.616148][T13313] loop9: p1 < > p4 [ 143.621905][T13313] loop9: p4 size 8388608 extends beyond EOD, truncated [ 143.667336][T13321] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4186'. [ 143.667517][T13315] hub 2-0:1.0: USB hub found [ 143.704747][T13315] hub 2-0:1.0: 8 ports detected [ 143.735169][T13329] Cannot find add_set index 0 as target [ 143.755048][T13331] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 143.763450][T13333] loop9: detected capacity change from 0 to 512 [ 143.774971][T13333] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.784212][T13333] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 143.800174][T13333] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 143.812895][T13333] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 143.822067][T13333] System zones: 0-2, 18-18, 34-35 [ 143.869737][T13343] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.901682][T13347] loop0: detected capacity change from 0 to 512 [ 143.908835][T13347] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.984296][T13343] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.019610][T13355] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4201'. [ 144.028682][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 144.043574][T13343] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.093672][T13343] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.148762][T13343] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.158003][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4208'. [ 144.160745][T13343] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.178473][T13343] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.191757][T13343] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.294250][T13378] loop0: detected capacity change from 0 to 1024 [ 144.301660][T13378] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 144.312680][T13378] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 144.325638][T13378] JBD2: no valid journal superblock found [ 144.331515][T13378] EXT4-fs (loop0): Could not load journal inode [ 144.384592][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4216'. [ 144.412077][T13390] loop4: detected capacity change from 0 to 128 [ 144.432672][T13395] loop0: detected capacity change from 0 to 512 [ 144.443024][T13395] ext4 filesystem being mounted at /890/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.560358][T13421] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4230'. [ 144.611851][T13428] loop8: detected capacity change from 0 to 128 [ 144.626406][T13434] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 144.655996][T13434] SELinux: failed to load policy [ 144.678809][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 144.678827][ T29] audit: type=1326 audit(1746899307.786:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.709014][ T29] audit: type=1326 audit(1746899307.796:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.732667][ T29] audit: type=1326 audit(1746899307.796:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.756524][ T29] audit: type=1326 audit(1746899307.796:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.780300][ T29] audit: type=1326 audit(1746899307.796:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.803884][ T29] audit: type=1326 audit(1746899307.796:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.827451][ T29] audit: type=1326 audit(1746899307.796:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.851054][ T29] audit: type=1326 audit(1746899307.796:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.874710][ T29] audit: type=1326 audit(1746899307.826:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.907273][T13447] loop9: detected capacity change from 0 to 512 [ 144.943891][ T29] audit: type=1326 audit(1746899307.826:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.0.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874803e969 code=0x7ffc0000 [ 144.983785][T13453] loop2: detected capacity change from 0 to 512 [ 144.990719][T13453] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.042784][T13447] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.112112][T13471] loop9: detected capacity change from 0 to 128 [ 145.118921][T13463] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 145.206346][T13483] 9pnet: p9_errstr2errno: server reported unknown error %÷Uæ [ 145.262942][T13491] netlink: 'syz.0.4260': attribute type 1 has an invalid length. [ 145.278852][T13491] bond3: entered promiscuous mode [ 145.284134][T13491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.295386][T13496] loop8: detected capacity change from 0 to 512 [ 145.311418][T13491] bond3: (slave veth7): making interface the new active one [ 145.318736][T13491] veth7: entered promiscuous mode [ 145.324739][T13491] bond3: (slave veth7): Enslaving as an active interface with an up link [ 145.326028][T13496] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.427466][T13510] SELinux: policydb version 47706891 does not match my version range 15-34 [ 145.438388][T13512] SELinux: syz.8.4270 (13512) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 145.454958][T13510] SELinux: failed to load policy [ 145.479407][T13516] netlink: 'syz.2.4271': attribute type 1 has an invalid length. [ 145.525192][T13524] sch_fq: defrate 2048 ignored. [ 145.854165][T13543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.864213][T13541] ALSA: seq fatal error: cannot create timer (-19) [ 145.891729][T13550] loop2: detected capacity change from 0 to 128 [ 145.912807][T13543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.998495][T13543] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.019697][T13563] syz.2.4286: attempt to access beyond end of device [ 146.019697][T13563] loop2: rw=2049, sector=201, nr_sectors = 64 limit=128 [ 146.024414][T13566] loop8: detected capacity change from 0 to 512 [ 146.065591][ T5244] kworker/u8:64: attempt to access beyond end of device [ 146.065591][ T5244] loop2: rw=1, sector=265, nr_sectors = 776 limit=128 [ 146.081524][T13566] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.102383][T13566] EXT4-fs (loop8): mount failed [ 146.110522][T13543] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.161359][T13543] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.203809][T13543] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.229968][T13543] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.254657][T13543] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.420040][T13611] __nla_validate_parse: 5 callbacks suppressed [ 146.420057][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4315'. [ 146.440380][T13609] netlink: 'syz.9.4314': attribute type 3 has an invalid length. [ 146.459600][T13615] netlink: 'syz.4.4317': attribute type 11 has an invalid length. [ 146.529036][T13621] netlink: 'syz.2.4320': attribute type 1 has an invalid length. [ 146.543233][T13623] dvmrp0: entered allmulticast mode [ 146.551143][T13623] dvmrp0: left allmulticast mode [ 146.567972][T13621] bond2: entered promiscuous mode [ 146.574655][T13621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.598992][T13628] bond1: entered promiscuous mode [ 146.604260][T13628] bond1: entered allmulticast mode [ 146.609973][T13628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.634021][T13628] bond1 (unregistering): Released all slaves [ 146.663919][T13629] bond2: (slave veth3): making interface the new active one [ 146.671368][T13629] veth3: entered promiscuous mode [ 146.679993][T13629] bond2: (slave veth3): Enslaving as an active interface with an up link [ 146.885270][T13660] loop2: detected capacity change from 0 to 164 [ 146.904040][T13660] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 146.951159][T13665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.007689][T13671] netlink: 'syz.4.4341': attribute type 1 has an invalid length. [ 147.038513][T13671] bond1: entered promiscuous mode [ 147.045766][T13671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.094806][T13671] bond1: (slave veth3): making interface the new active one [ 147.102168][T13671] veth3: entered promiscuous mode [ 147.125464][T13671] bond1: (slave veth3): Enslaving as an active interface with an up link [ 147.277472][T13704] loop4: detected capacity change from 0 to 512 [ 147.287499][T13704] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.428020][ T1107] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 147.436251][ T1107] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.501806][T13732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4370'. [ 147.515259][T13732] netlink: 'syz.0.4370': attribute type 1 has an invalid length. [ 147.523142][T13732] netlink: 'syz.0.4370': attribute type 2 has an invalid length. [ 147.530965][T13732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4370'. [ 147.646958][T13742] syz.4.4374: attempt to access beyond end of device [ 147.646958][T13742] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 147.757798][T13756] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.907735][T13773] bond3: entered promiscuous mode [ 147.912896][T13773] bond3: entered allmulticast mode [ 147.927561][T13773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.953600][T13773] bond3 (unregistering): Released all slaves [ 147.998342][T13783] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.062488][T13783] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.122263][T13783] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.173693][T13783] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.190885][T13816] netlink: 'syz.9.4410': attribute type 4 has an invalid length. [ 148.208107][T13816] netlink: 'syz.9.4410': attribute type 4 has an invalid length. [ 148.256118][T13824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4414'. [ 148.294855][T13828] loop2: detected capacity change from 0 to 128 [ 148.303289][T13828] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 148.337024][T13828] FAT-fs (loop2): FAT read failed (blocknr 128) [ 148.410826][T13841] ip6gre1: entered allmulticast mode [ 148.422597][T13842] xt_hashlimit: max too large, truncated to 1048576 [ 148.507505][T13858] loop8: detected capacity change from 0 to 1024 [ 148.523803][T13858] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.536904][T13858] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 148.551915][T13858] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 148.564404][T13858] EXT4-fs (loop8): This should not happen!! Data will be lost [ 148.564404][T13858] [ 148.574095][T13858] EXT4-fs (loop8): Total free blocks count 0 [ 148.580105][T13858] EXT4-fs (loop8): Free/Dirty block details [ 148.586054][T13858] EXT4-fs (loop8): free_blocks=4293918720 [ 148.591817][T13858] EXT4-fs (loop8): dirty_blocks=32 [ 148.596941][T13858] EXT4-fs (loop8): Block reservation details [ 148.603139][T13858] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 148.669374][T13877] loop2: detected capacity change from 0 to 512 [ 148.702507][ T10] IPVS: starting estimator thread 0... [ 148.755161][T13888] bond1: entered promiscuous mode [ 148.760272][T13888] bond1: entered allmulticast mode [ 148.765790][T13888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.787686][T13888] bond1 (unregistering): Released all slaves [ 148.794735][T13882] IPVS: using max 2352 ests per chain, 117600 per kthread [ 148.822460][T13897] 9pnet_fd: Insufficient options for proto=fd [ 148.969502][T13921] loop2: detected capacity change from 0 to 512 [ 148.996954][T13921] EXT4-fs: Ignoring removed bh option [ 149.004529][T13921] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 149.019413][T13929] loop0: detected capacity change from 0 to 512 [ 149.027917][T13921] EXT4-fs (loop2): 1 truncate cleaned up [ 149.045477][T13921] 9pnet: p9_errstr2errno: server reported unknown error í