last executing test programs: 2m24.383118769s ago: executing program 32 (id=35): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 2m23.97366058s ago: executing program 33 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r2) 2m4.123907617s ago: executing program 2 (id=460): getpid() setreuid(0xee00, 0x0) setns(0xffffffffffffffff, 0x24020000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0), 0x69) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone3(&(0x7f00000008c0)={0x17140000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2m4.063464527s ago: executing program 2 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x21, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 2m4.062987447s ago: executing program 2 (id=463): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@data_err_abort}, {@minixdf}, {@minixdf}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 2m4.025024787s ago: executing program 2 (id=464): socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 2m3.731205298s ago: executing program 2 (id=473): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2m3.731058037s ago: executing program 34 (id=473): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1m55.070284664s ago: executing program 7 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1m54.971293304s ago: executing program 7 (id=664): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x5) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, 0x0, 0x40408c0) 1m54.971024894s ago: executing program 7 (id=665): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='dE\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfff5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m17.463738194s ago: executing program 5 (id=1351): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@data_err_abort}, {@minixdf}, {@minixdf}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 1m17.207771345s ago: executing program 5 (id=1354): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 1m16.735479815s ago: executing program 5 (id=1359): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0xc000000000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) 1m16.711170496s ago: executing program 36 (id=1359): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0xc000000000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) 58.074664011s ago: executing program 9 (id=1684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000000) fcntl$setlease(r2, 0x400, 0x2) 57.926835591s ago: executing program 9 (id=1686): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 57.255705082s ago: executing program 9 (id=1689): r0 = io_uring_setup(0x59f8, &(0x7f0000002040)={0x0, 0xffffffff, 0x0, 0x0, 0x39d}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}) close_range(r0, 0xffffffffffffffff, 0x0) 57.156996842s ago: executing program 9 (id=1691): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)="84", 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000200), &(0x7f0000000400)={0x0, 0xfb, 0x6c, 0x3, 0x1, "8ccaa77c0871db57e43377513f0445ee", "fa3046e066eeb7c652e601b37dcabfc29bd1bdc4ae10c53577a17bcac87bea12da0500fa11fca2afdd2ca1457272b2fb4d252915d0d67688b24b47a34859a16033f7afeda7263595a96f42aa543cfbe7465f00c2b87392"}, 0x6c, 0x1) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) 56.821442163s ago: executing program 9 (id=1695): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 55.535912256s ago: executing program 9 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ef5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1869d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f33ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a29459aff1374df5c49ca11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc006b340658342d2d9e06008c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e9dffd8918de33aed5bb09cb2a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf422b7473c24b93085c51e02af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00bb02000000000000c84799aa792cdaeb607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee127ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c435c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fceea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfe089e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cf594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f5bce1cdaa99705a8fa48f61071f548d411353965615c24c1860790dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9776f89c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba26bb91d7b1b98f11fb7a77b03206c151b00015305af815f7da19872085b503a21cbe722842c26ad8dd6b83018300000000000000000000f4ffffffffffffff000000000000000000000000000000000000798d011c62dbfdbad9e58e07d371e3a2399f2369631138ad4fb3aeb3f51233922b4c700fb163efbc55c912276685a774f2dce9bb9c54fd1f505eccf06323fad86c37adafb5e80b96ba9f925a6fd57de5fedf691e8b41c9835a840d12a224ed233c93ed92603401e5a61298294e9cab078c231121d4e32fb8286478fb12f5804d13c7bcff5dcffccd1d520dc04910239efc397b7736682e1c0ef0d001c17ec1441026ed4b1395b8e88a58d667a65cec1ddee1b30bcc96652a238c990a2701e2ee0915335fa4b8c33372bd00021f17c012451519ad56594c9469f164bb915edb1fd4ce76fb37bb9512632e9c9e7dcc772128c280c6e6cc0e859bd65c666e8b7732a2c2d517af56f4cde502f364922f3c2bbf9f4ced5c6f3d33428775b7399e6c6cf52bc8d5b48079700db251c7cdad3836c1e137b11917cff00e0ecc5e93fd7e8bdd83313a27197651c92f2f9be4a6f83662fa948c46632a979e8c66d22777a06601c5f5d3ab28b9f9e39543d2bb9de6ce57a6c1c3a635a0515c87abd11988cae405b9495f54b8d89503a8c9e96bdf08eb563e4cffe00e27272ca6e392ffca16b172ce8b6ee542ec9135e969b7b029beaeba12836110fcb686d82c066d0fc67fee8a00acda99a302a7aac9e920e34174323e7c6aeefd0a092545274fb164f21ac2f46849a6d0b51ad5a230a5ffab7a66e7dde5a335aeaa9736678319f344a32c99ac748bf200368963de24c237873ff5a01f14335de9a6d06c8b49ff27ddf0f13d5fe0901355765c397ce52791339d666eec141f0d33ca51f7b8aa6e9937631269b064d9c7323df8b7154f76708b912e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 55.478263425s ago: executing program 37 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 44.054253827s ago: executing program 1 (id=1825): creat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x1110400, &(0x7f0000000800)=ANY=[@ANYBLOB="7179f730084d3d", @ANYRESHEX=0x0, @ANYBLOB=',dos1xfloppy,dots,dots,dots,nodots,dots,nodots,umask=00000000000000000004263,dots,nocase,dots,dots,dots,nodots,dots,dos1xfloppy,nodots,time_offset=0x00000000000003ac,nodots,nodots,nodots,\x00'], 0xfd, 0x1bf, &(0x7f00000004c0)="$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") r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 43.624389908s ago: executing program 1 (id=1837): unshare(0x2c020400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 43.187445458s ago: executing program 1 (id=1835): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=r0, @ANYBLOB="270e00000000000000000407"], 0x88}, 0x1, 0x40030000000000}, 0x0) 42.733350549s ago: executing program 1 (id=1848): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x81000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x10, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0xe]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000008c0)='./file1\x00', 0xc0ed001e, &(0x7f0000000580)={[{@minixdf}, {@data_err_abort}, {@debug}, {@noauto_da_alloc}, {@debug}, {@commit={'commit', 0x3d, 0x7}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@usrjquota}]}, 0xfe, 0x481, &(0x7f0000000900)="$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") 42.29683136s ago: executing program 1 (id=1843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_pid(r2, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x8201fffc) 40.431445593s ago: executing program 1 (id=1869): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r3}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 40.416289543s ago: executing program 38 (id=1869): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r3}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.912362546s ago: executing program 6 (id=2424): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 1.869469856s ago: executing program 0 (id=2425): close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) 1.718848457s ago: executing program 0 (id=2438): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) msgctl$IPC_SET(0x0, 0x1, 0x0) mq_notify(0xffffffffffffffff, 0x0) 1.632150587s ago: executing program 6 (id=2430): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000000)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x200, 0x1aa) semop(0x0, 0x0, 0x0) 1.558874517s ago: executing program 0 (id=2431): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$eJzs3V1v29Ydx/Ef5SfFHYJiG4IgSJOTZAUcLFMouXFgZMCqUZTNTRIFUh5sYECRNXYRRE63JAMW3xS+2BPQvYHd9WK72IsYsOu9iu1uA4rtbsBuWPCQsiVbD1btJG3y/QStKPLPc/4kFf7BSDwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ49Vct+yoEbQ2Ns1oXi0Km2OWZ63N6WY2cXNiv5KT/qdiURezWRe/fbj4Qvq/67qcvbusYvpS1N5bF96+963ZQm/9MQl9GZq2wafP9x7d73a3n5wgdkZTN/8qqXCCoDW/FcRh0Kyu+SaIQ7O6suLeXq/Hph40/Hgr7vhN40V+oRNGZsm7acqrq8vGL22FG621WrXh92be/V7FdVfMjxayAy2pFHvrQaMRtNZsTLo4jblrPv1pFuBXm8bsPOxuL09KMg0qnySoMimo4lYq5XKlUl65s3rnruvOHpvhphz3gI5FnPmHFl8zZ3fyBk6pkNb/fzpSQ0W1tKFNmaF/PNUUKVRzxPJcr/6/e9sf229//e9V+YvSD/LFl2Tr/5Xs3ZVR9X9ELkbGrjBsiTNi/nR/5vJWnuq59vRI99VVV9t6cgZtG5mrp23h12eSxz+SzOiINflqKVCsUIGaqto5Jp9jtKoVrcjVB1pXXbGM6grUkK9YW4rVkW8/UZ4i+aqqo1CRjJbk6aaMylrVqpZl5KukLYXaUEtrqqmq/yVJsqOHdr8vj9kK9YLKIwIW+oMqY1oaVf9/9kn2Oc3rv0v9f1Nln4OF/Cw2Lgb4Ckjy6/8pXX0x2QAAAAAAgBfBsf/67tjv7t+RlKgeNHz3VacFAAAAAADOkKNkQZflyP6kTe/I4fofAAAAAIDXjWPvsXMkLdof9TuHd0Kd5B8BZl5CigAAAAAA4JTsnf9X5qXEDlpxVc5U1/8AAAAAAOBr4Hd9Y+zP9sbYTXpf6xckxe0F56//WVA05+y3N7/j7FbTJdXdPObYLwA69UvO+XygXvsyL8m+8/zLTt5bPgjmwbiDn+9MGuvfiY4kMD/T38CIBJy055XZ/J0+1bVslWv5OPMP9gqyS7JeFutBwy95YeNeWdXq+ULH3+z88vHDX0nRwXbuPOxulz78uPvA5rKfztrfTRv9ZCCdwvCdcZjLMzvegr3nYtgWn1O91+XvW81Fx/br9rZ/RtXdQn9H4w7AYZ+/0fXsmF1fzGIX9w5G3E+3v5huf7lkD9nA1kdzzmEW5aNbPuxAjMiiaLO4kcXcWLqRvfTyS9spOMXvzkiV0vFjMJBFpT+LyfvC+e+xfTEui3xfLKdZ/C1taEQWy9NlceyIAMCrsnNYhewg5sfqbq889E5qX6ruTK7u7w9W92d/TBK7wow0m383MbaXotIz+pJj69C87Il19tKQM7qb15WiRpzR3VNUt7Svvxw+AylP+1gW/0+S5F7Z9vuHI1X1s3SFz0b2GzcqM+kuvP1s9+d2APzUR9sfbT+uVJZX3Pdc905Fc3Yz8pcZHc2U32wCAE7wjJ2JEc57upZFXHvw73ezqYGK982DnxSU9KE+VlcPdKv3CIGrw1td7PsZwq3sqlV9V63mwtv3zklHY8u6NfKqztbSvtjKQeyceqsMVurD2OUXfBQAAHi5rk+ow8Prf3Gg/t/SUhaxdGnodfdgLT/6hOBRseXJyb9/1nsDAIA3gx997ix2futEUdD+oLy6Wq521n0Thd6PTRTU1nwTtDp+5K1XW2u+aUdhJ/TChmlHWghqfmzijXY7jDqmHkamHcbBpn3yu8kf/R77zWqrE3hxu+FXY994YatTnZGpBbFn2hs/bATxuh/ZleO27wX1wKt2grBl4nAj8vySMbHv9wUGNb/VCepBOtky7ShoVqMt85OwsdH0Tc2PvShod8KsQduX1zFBqx5GTdtsScnUDzoEAOB19PT53qP73e72kzET+5ock0/MD2mQ75sBAPiKOSzXU6xUfIEJAQAAAAAAAAAAAAAAAAAAAACAY05y/99UE3PDbhaUDub84vyRtf6kYe04OuvEppkoTLtW75aIvUd/HxN87mBOb/f3x+y/tA381zekt+wcZXNmz76vc3ZvvLwD9/2dbI+OjEkXDl20cHAsZs/+r0M68fjPIxYlSZKMX31hcB/Oj9vAwYlZSU/mT3EIBk4TjJsBvIa+CAAA//9z/kFZ") r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r3, 0x0) 1.413889427s ago: executing program 3 (id=2433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 1.191784327s ago: executing program 3 (id=2435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x58c, &(0x7f00000005c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_ima(r2, 0x0, 0x0, 0x52, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.165146838s ago: executing program 6 (id=2436): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0xd) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8682, 0x86) getdents64(r0, &(0x7f0000000640)=""/4096, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 992.446878ms ago: executing program 3 (id=2439): ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000100)=0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x10000000}]}]}}, &(0x7f0000001f40)=""/4089, 0x32, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = geteuid() quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@sg0, r1, &(0x7f0000000080)={0x9, 0xe81, 0x4, 0x3, 0x100000001, 0x1, 0x5, 0x7, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) lseek(r0, 0xa, 0x4) 730.650908ms ago: executing program 3 (id=2442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 588.433608ms ago: executing program 8 (id=2443): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 587.605229ms ago: executing program 3 (id=2444): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 543.230189ms ago: executing program 3 (id=2445): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) 463.305789ms ago: executing program 8 (id=2447): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x7c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x5}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 459.933659ms ago: executing program 4 (id=2448): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 443.091179ms ago: executing program 0 (id=2449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 356.316169ms ago: executing program 4 (id=2450): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0xf, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 341.009199ms ago: executing program 0 (id=2451): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept(r1, 0x0, 0x0) 319.422719ms ago: executing program 8 (id=2452): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) 243.392199ms ago: executing program 4 (id=2453): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 219.595169ms ago: executing program 0 (id=2454): syz_usbip_server_init(0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101400, 0x0) recvfrom$l2tp6(r1, &(0x7f0000000100)=""/9, 0x9, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x5, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 200.964769ms ago: executing program 6 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 194.523389ms ago: executing program 4 (id=2456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r1) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1a4203c, &(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYRESDEC, @ANYRESDEC, @ANYRES32, @ANYRES8, @ANYRES64], 0x0, 0x0, &(0x7f0000000000)) 166.935169ms ago: executing program 8 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000380), &(0x7f0000000440)='%ps \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) socket(0x10, 0x3, 0x0) 159.968599ms ago: executing program 6 (id=2458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000100000000000000000400", @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c0fe0968ce338b6779878d7121399dc7b62acc4e3869d852d5450482c4839cc1e361483b12e5b8701b8af875337ab28b97e5124de37baaf4aaee4ccbd7369705b9fe9d0d3c631f3c67a08a4de286a65207da31020d1ef00394cd000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) openat$cgroup_ro(r3, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 117.63067ms ago: executing program 4 (id=2459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) 53.951819ms ago: executing program 8 (id=2460): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 7.01425ms ago: executing program 4 (id=2461): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_io_uring_setup(0x2367, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 396.83µs ago: executing program 6 (id=2462): io_uring_setup(0x410f, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101641) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 0s ago: executing program 8 (id=2463): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) tkill(0x0, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000", @ANYRESHEX], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) kernel console output (not intermixed with test programs): T8513] vcan0 speed is unknown, defaulting to 1000 [ 125.654742][ T6612] hsr_slave_0: left promiscuous mode [ 125.669325][ T6612] hsr_slave_1: left promiscuous mode [ 125.800169][ T8544] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 126.302605][ T8548] netlink: 'syz.8.1719': attribute type 4 has an invalid length. [ 126.353481][ T8549] netlink: 'syz.8.1719': attribute type 4 has an invalid length. [ 126.515409][ T8558] loop6: detected capacity change from 0 to 128 [ 126.587550][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 126.694718][ T8563] loop1: detected capacity change from 0 to 1024 [ 126.734741][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.735666][ T8563] EXT4-fs: Ignoring removed oldalloc option [ 126.741862][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.742055][ T8513] bridge_slave_0: entered allmulticast mode [ 126.778636][ T8563] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 126.801924][ T8513] bridge_slave_0: entered promiscuous mode [ 126.833760][ T8563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.846956][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.854102][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.881210][ T8513] bridge_slave_1: entered allmulticast mode [ 126.897914][ T8513] bridge_slave_1: entered promiscuous mode [ 126.988627][ T7042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.005852][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.039844][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.088567][ T8581] loop8: detected capacity change from 0 to 128 [ 127.112174][ T8513] team0: Port device team_slave_0 added [ 127.128951][ T8513] team0: Port device team_slave_1 added [ 127.235411][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.242516][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.268511][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.345644][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.352713][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.378784][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.476988][ T8590] __nla_validate_parse: 1 callbacks suppressed [ 127.477006][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1735'. [ 127.509176][ T8594] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1736'. [ 127.520497][ T8513] hsr_slave_0: entered promiscuous mode [ 127.533226][ T8513] hsr_slave_1: entered promiscuous mode [ 127.543528][ T8513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.564166][ T8513] Cannot create hsr debugfs directory [ 127.598518][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1738'. [ 127.725175][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1738'. [ 127.833885][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 127.940259][ T8614] xt_hashlimit: size too large, truncated to 1048576 [ 128.108618][ T8513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.126840][ T8513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.146491][ T8513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.163952][ T8513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.239332][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.260656][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.278732][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.285882][ T4772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.309248][ T8513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.319762][ T8513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.335768][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.342881][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.468720][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.750176][ T8513] veth0_vlan: entered promiscuous mode [ 128.770493][ T8513] veth1_vlan: entered promiscuous mode [ 128.795566][ T8643] loop1: detected capacity change from 0 to 512 [ 128.827041][ T8513] veth0_macvtap: entered promiscuous mode [ 128.843525][ T8513] veth1_macvtap: entered promiscuous mode [ 128.852141][ T8643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 128.862281][ T8643] System zones: 1-12 [ 128.871603][ T8643] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1758: corrupted in-inode xattr: invalid ea_ino [ 128.886016][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.896638][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.906549][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.917166][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.928991][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.934258][ T8647] loop8: detected capacity change from 0 to 512 [ 128.939772][ T8643] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1758: couldn't read orphan inode 15 (err -117) [ 128.955756][ T8643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.959079][ T8647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.986037][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.996552][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.006481][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.017008][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.026882][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.037435][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.060731][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 129.060751][ T29] audit: type=1400 audit(1733738502.207:2910): avc: denied { setopt } for pid=8650 comm="syz.6.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.086865][ T29] audit: type=1400 audit(1733738502.207:2911): avc: denied { write } for pid=8650 comm="syz.6.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.106318][ T29] audit: type=1400 audit(1733738502.207:2912): avc: denied { connect } for pid=8650 comm="syz.6.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.126026][ T29] audit: type=1400 audit(1733738502.207:2913): avc: denied { name_connect } for pid=8650 comm="syz.6.1751" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 129.148379][ T8647] EXT4-fs (loop8): blocks per group (35) and clusters per group (32768) inconsistent [ 129.180905][ T29] audit: type=1400 audit(1733738502.317:2914): avc: denied { map } for pid=8642 comm="syz.1.1758" path="/117/file0/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.204116][ T29] audit: type=1400 audit(1733738502.317:2915): avc: denied { execute } for pid=8642 comm="syz.1.1758" path="/117/file0/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.261997][ T7042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.289334][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.300056][ T8513] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.308837][ T8513] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.317630][ T8513] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.326389][ T8513] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.370015][ T29] audit: type=1400 audit(1733738502.527:2916): avc: denied { mounton } for pid=8513 comm="syz-executor" path="/root/syzkaller.B0mVUR/syz-tmp" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 129.394635][ T29] audit: type=1400 audit(1733738502.527:2917): avc: denied { mount } for pid=8513 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.416857][ T29] audit: type=1400 audit(1733738502.527:2918): avc: denied { mount } for pid=8513 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 129.438921][ T29] audit: type=1400 audit(1733738502.527:2919): avc: denied { mounton } for pid=8513 comm="syz-executor" path="/root/syzkaller.B0mVUR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 129.507056][ T8662] loop4: detected capacity change from 0 to 1024 [ 129.649985][ T8669] loop1: detected capacity change from 0 to 512 [ 129.670709][ T8664] loop6: detected capacity change from 0 to 8192 [ 129.681598][ T8670] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.714562][ T8662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.767213][ T8669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 129.818397][ T8664] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.970862][ T8662] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 33 with error 28 [ 129.983432][ T8662] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.983432][ T8662] [ 129.993192][ T8662] EXT4-fs (loop4): Total free blocks count 0 [ 129.999202][ T8662] EXT4-fs (loop4): Free/Dirty block details [ 130.005128][ T8662] EXT4-fs (loop4): free_blocks=0 [ 130.010159][ T8662] EXT4-fs (loop4): dirty_blocks=0 [ 130.015282][ T8662] EXT4-fs (loop4): Block reservation details [ 130.021299][ T8662] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 130.058104][ T8669] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 130.224140][ T8664] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.232989][ T8664] FAT-fs (loop6): Filesystem has been set read-only [ 130.262627][ T7042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.337951][ T8664] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.358924][ T8664] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.382110][ T8674] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.408440][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.496769][ T7615] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 130.585196][ T8682] loop1: detected capacity change from 0 to 764 [ 130.621750][ T8682] iso9660: Unknown parameter '' [ 130.723374][ T8690] loop4: detected capacity change from 0 to 128 [ 130.753986][ T8690] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.768488][ T8690] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.982012][ T8698] pim6reg1: entered promiscuous mode [ 130.987466][ T8698] pim6reg1: entered allmulticast mode [ 131.001514][ T8690] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none. [ 131.203901][ T8513] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.240632][ T8707] loop4: detected capacity change from 0 to 512 [ 131.266827][ T8707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 131.278794][ T8707] System zones: 1-12 [ 131.288230][ T8707] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1766: corrupted in-inode xattr: invalid ea_ino [ 131.307842][ T8707] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1766: couldn't read orphan inode 15 (err -117) [ 131.323480][ T8707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.353789][ T8710] loop8: detected capacity change from 0 to 2048 [ 131.388448][ T8710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.479307][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.495192][ T8717] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 131.535452][ T8717] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 131.588968][ T5559] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.707198][ T8723] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 132.196246][ T8727] loop6: detected capacity change from 0 to 764 [ 132.260879][ T8727] iso9660: Unknown parameter '' [ 132.342605][ T8727] blktrace: Concurrent blktraces are not allowed on loop13 [ 132.407364][ T8731] loop4: detected capacity change from 0 to 8192 [ 132.477084][ T8735] loop8: detected capacity change from 0 to 128 [ 132.508976][ T8725] loop1: detected capacity change from 0 to 128 [ 132.515658][ T8731] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.526330][ T8725] EXT4-fs: Ignoring removed nobh option [ 132.547956][ T8725] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.610882][ T8735] bio_check_eod: 7917 callbacks suppressed [ 132.610903][ T8735] +}[@: attempt to access beyond end of device [ 132.610903][ T8735] loop8: rw=2049, sector=145, nr_sectors = 688 limit=128 [ 132.635120][ T8725] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.654956][ T8743] netlink: 'syz.6.1780': attribute type 4 has an invalid length. [ 132.703365][ T8743] netlink: 'syz.6.1780': attribute type 4 has an invalid length. [ 132.747560][ T8735] +}[@: attempt to access beyond end of device [ 132.747560][ T8735] loop8: rw=524288, sector=145, nr_sectors = 176 limit=128 [ 132.786873][ T8735] +}[@: attempt to access beyond end of device [ 132.786873][ T8735] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.815847][ T8735] +}[@: attempt to access beyond end of device [ 132.815847][ T8735] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.846526][ T8735] +}[@: attempt to access beyond end of device [ 132.846526][ T8735] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.869999][ T8748] loop6: detected capacity change from 0 to 128 [ 132.902655][ T8735] +}[@: attempt to access beyond end of device [ 132.902655][ T8735] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 132.928475][ T8748] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.948721][ T7042] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.010294][ T8748] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.098497][ T8748] EXT4-fs (loop6): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none. [ 133.160359][ T8752] loop8: detected capacity change from 0 to 512 [ 133.167217][ T7615] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.168639][ T8752] EXT4-fs: inline encryption not supported [ 133.199229][ T8731] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 133.208120][ T8731] FAT-fs (loop4): Filesystem has been set read-only [ 133.220842][ T8742] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 133.235631][ T8752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.285174][ T8752] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.304708][ T8761] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 133.312564][ T8761] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1787'. [ 133.322346][ T8752] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.1784: corrupted inode contents [ 133.335184][ T8752] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz.8.1784: mark_inode_dirty error [ 133.347866][ T8752] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.1784: corrupted inode contents [ 133.497939][ T8752] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.1784: corrupted inode contents [ 133.535084][ T8752] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz.8.1784: mark_inode_dirty error [ 133.563499][ T8752] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.1784: corrupted inode contents [ 133.591094][ T8752] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.1784: mark_inode_dirty error [ 133.614576][ T8752] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.1784: corrupted inode contents [ 133.639800][ T8752] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz.8.1784: mark_inode_dirty error [ 133.665907][ T8784] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.1784: corrupted inode contents [ 133.775031][ T5559] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.862912][ T8787] syzkaller0: entered promiscuous mode [ 133.868446][ T8787] syzkaller0: entered allmulticast mode [ 133.887552][ T8791] loop8: detected capacity change from 0 to 512 [ 133.910560][ T8791] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 133.976672][ T8791] EXT4-fs (loop8): 1 truncate cleaned up [ 134.004221][ T8791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.066607][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 134.066625][ T29] audit: type=1400 audit(1733738507.227:3086): avc: denied { setattr } for pid=8790 comm="syz.8.1796" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.127570][ T35] kernel write not supported for file /311/attr/keycreate (pid: 35 comm: kworker/1:1) [ 134.164564][ T8791] EXT4-fs error (device loop8): ext4_xattr_inode_iget:440: comm syz.8.1796: inode #1073372648: comm syz.8.1796: iget: illegal inode # [ 134.193160][ T29] audit: type=1400 audit(1733738507.297:3087): avc: denied { remove_name } for pid=8790 comm="syz.8.1796" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.215951][ T29] audit: type=1400 audit(1733738507.297:3088): avc: denied { unlink } for pid=8790 comm="syz.8.1796" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.248956][ T8791] EXT4-fs error (device loop8): ext4_xattr_inode_iget:445: comm syz.8.1796: error while reading EA inode 1073372648 err=-117 [ 134.284412][ T8791] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2977: inode #15: comm syz.8.1796: corrupted xattr block 33: invalid header [ 134.337522][ T8791] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -117) [ 134.340499][ T8797] ip6gre1: entered allmulticast mode [ 134.447334][ T29] audit: type=1400 audit(1733738507.607:3089): avc: denied { create } for pid=8799 comm="syz.6.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.466992][ T29] audit: type=1400 audit(1733738507.607:3090): avc: denied { bind } for pid=8799 comm="syz.6.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.486404][ T29] audit: type=1400 audit(1733738507.607:3091): avc: denied { write } for pid=8799 comm="syz.6.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.533176][ T8805] loop6: detected capacity change from 0 to 512 [ 134.540032][ T5559] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.576343][ T29] audit: type=1400 audit(1733738507.727:3092): avc: denied { ioctl } for pid=8798 comm="syz.1.1802" path="socket:[24042]" dev="sockfs" ino=24042 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.616129][ T8808] loop8: detected capacity change from 0 to 1024 [ 134.634389][ T8805] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 134.642358][ T8805] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 134.653341][ T8808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.665707][ T4767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 134.685058][ T8805] System zones: 0-1, 15-15, 18-18, 34-34 [ 134.690909][ T8805] EXT4-fs (loop6): orphan cleanup on readonly fs [ 134.711155][ T8808] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 33 with error 28 [ 134.711981][ T8805] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 134.723724][ T8808] EXT4-fs (loop8): This should not happen!! Data will be lost [ 134.723724][ T8808] [ 134.733232][ T8805] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 134.733270][ T8805] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 134.743123][ T8808] EXT4-fs (loop8): Total free blocks count 0 [ 134.758232][ T4762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 134.764297][ T8808] EXT4-fs (loop8): Free/Dirty block details [ 134.772859][ T8805] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1803: bad orphan inode 16 [ 134.780782][ T8808] EXT4-fs (loop8): free_blocks=0 [ 134.786868][ T8805] ext4_test_bit(bit=15, block=18) = 1 [ 134.796751][ T8808] EXT4-fs (loop8): dirty_blocks=0 [ 134.801720][ T8805] is_bad_inode(inode)=0 [ 134.807062][ T8808] EXT4-fs (loop8): Block reservation details [ 134.812094][ T8805] NEXT_ORPHAN(inode)=0 [ 134.816218][ T8808] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 134.822276][ T8805] max_ino=32 [ 134.835844][ T8805] i_nlink=2 [ 134.856964][ T8805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.873794][ T29] audit: type=1400 audit(1733738508.027:3093): avc: denied { read } for pid=8815 comm="syz.0.1816" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 134.896688][ T29] audit: type=1400 audit(1733738508.027:3094): avc: denied { open } for pid=8815 comm="syz.0.1816" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 134.942788][ T8818] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 134.950570][ T8818] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1804'. [ 134.991324][ T5559] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.028782][ T8817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.039232][ T8817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.053516][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1808'. [ 135.148925][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.164578][ T8817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.174955][ T8817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.225950][ T8817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.236482][ T8817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.336718][ T8843] bridge_slave_0: left allmulticast mode [ 135.342673][ T8843] bridge_slave_0: left promiscuous mode [ 135.348664][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.414883][ T8843] bridge_slave_1: left allmulticast mode [ 135.420649][ T8843] bridge_slave_1: left promiscuous mode [ 135.426477][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.498069][ T8843] bond0: (slave bond_slave_0): Releasing backup interface [ 135.535654][ T8843] bond0: (slave bond_slave_1): Releasing backup interface [ 135.567744][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.575308][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.603507][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.611244][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.681659][ T8817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.692337][ T8817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.837968][ T8817] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.846468][ T8817] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.880477][ T8817] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.888875][ T8817] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.930115][ T8817] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.938644][ T8817] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.978672][ T8817] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.987079][ T8817] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.288131][ T8873] loop1: detected capacity change from 0 to 256 [ 137.156198][ T8900] smc: net device bond0 applied user defined pnetid SYZ0 [ 137.177527][ T8900] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1835'. [ 137.199456][ T8900] smc: net device bond0 erased user defined pnetid SYZ0 [ 137.608853][ T8904] loop8: detected capacity change from 0 to 512 [ 137.618180][ T8905] loop1: detected capacity change from 0 to 512 [ 137.653183][ T8904] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 137.661172][ T8904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 137.676254][ T8905] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.691557][ T8904] System zones: 0-1, 15-15, 18-18, 34-34 [ 137.700957][ T8905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 137.701626][ T8904] EXT4-fs (loop8): orphan cleanup on readonly fs [ 137.709253][ T8905] System zones: 1-12 [ 137.717936][ T8904] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 137.733971][ T8904] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 137.743479][ T8905] EXT4-fs (loop1): 1 truncate cleaned up [ 137.749511][ T8905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.751624][ T8904] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1839: bad orphan inode 16 [ 137.774715][ T8904] ext4_test_bit(bit=15, block=18) = 1 [ 137.780163][ T8904] is_bad_inode(inode)=0 [ 137.784376][ T8904] NEXT_ORPHAN(inode)=0 [ 137.788474][ T8904] max_ino=32 [ 137.791723][ T8904] i_nlink=2 [ 137.795311][ T8904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.840242][ T5559] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.871091][ T8905] loop1: detected capacity change from 512 to 64 [ 137.880689][ T8918] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 137.908112][ T8918] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop1 ino=15 [ 137.948917][ T8923] loop8: detected capacity change from 0 to 512 [ 137.954054][ T8918] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -12) [ 137.968674][ T8923] EXT4-fs (loop8): orphan cleanup on readonly fs [ 138.024053][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.059753][ T8923] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 138.097122][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.123881][ T8923] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 138.142470][ T8923] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #13: comm syz.8.1842: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 138.166523][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.187306][ T8926] ªªªªªª: renamed from vlan0 (while UP) [ 138.195710][ T8923] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1842: couldn't read orphan inode 13 (err -117) [ 138.213444][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.238514][ T8923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.257701][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.285143][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.313220][ T8923] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 138.327086][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.341572][ T8928] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.346185][ T8923] EXT4-fs warning (device loop8): read_mmp_block:115: Error -117 while reading MMP block 2 [ 138.372615][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.400531][ T7042] EXT4-fs warning (device loop1): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 138.416606][ T8928] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.432658][ T5559] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.512379][ T8928] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.565425][ T8932] vcan0 speed is unknown, defaulting to 1000 [ 138.602574][ T8928] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.756127][ T8928] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.798200][ T8928] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.840563][ T8943] loop8: detected capacity change from 0 to 128 [ 138.869807][ T8928] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.883463][ T8928] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.116415][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 139.116431][ T29] audit: type=1400 audit(1733738512.277:3145): avc: denied { watch watch_reads } for pid=8951 comm="syz.6.1857" path="/93/file0" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.167855][ T29] audit: type=1400 audit(1733738512.307:3146): avc: denied { execute_no_trans } for pid=8951 comm="syz.6.1857" path="/93/file0" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.203319][ T8953] team0: Mode changed to "loadbalance" [ 139.331826][ T29] audit: type=1400 audit(1733738512.497:3147): avc: denied { cpu } for pid=8956 comm="syz.8.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.357360][ T8959] netlink: 'syz.6.1860': attribute type 29 has an invalid length. [ 139.376538][ T8959] netlink: 'syz.6.1860': attribute type 29 has an invalid length. [ 139.395887][ T29] audit: type=1400 audit(1733738512.557:3148): avc: denied { create } for pid=8958 comm="syz.6.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.397670][ T8959] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1860'. [ 139.425301][ T8959] unsupported nla_type 40 [ 139.457117][ T29] audit: type=1400 audit(1733738512.557:3149): avc: denied { write } for pid=8958 comm="syz.6.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.477403][ T29] audit: type=1400 audit(1733738512.557:3150): avc: denied { nlmsg_write } for pid=8958 comm="syz.6.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.492558][ T8963] loop8: detected capacity change from 0 to 2048 [ 139.547374][ T29] audit: type=1400 audit(1733738512.707:3151): avc: denied { connect } for pid=8964 comm="syz.4.1864" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.551607][ T8972] serio: Serial port ptm0 [ 139.571000][ T8963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.591163][ T29] audit: type=1400 audit(1733738512.747:3152): avc: denied { write } for pid=8964 comm="syz.4.1864" path="socket:[24600]" dev="sockfs" ino=24600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.677801][ T8963] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.697249][ T8963] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 139.709659][ T8963] EXT4-fs (loop8): This should not happen!! Data will be lost [ 139.709659][ T8963] [ 139.719383][ T8963] EXT4-fs (loop8): Total free blocks count 0 [ 139.725505][ T8963] EXT4-fs (loop8): Free/Dirty block details [ 139.731534][ T8963] EXT4-fs (loop8): free_blocks=2415919104 [ 139.737314][ T8963] EXT4-fs (loop8): dirty_blocks=2080 [ 139.742811][ T8963] EXT4-fs (loop8): Block reservation details [ 139.748889][ T8963] EXT4-fs (loop8): i_reserved_data_blocks=130 [ 139.777511][ T51] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2034 with error 28 [ 139.832814][ T7042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.852267][ T2964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.852757][ T4762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.966128][ T29] audit: type=1400 audit(1733738513.127:3153): avc: denied { mounton } for pid=8985 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 139.978542][ T8987] loop8: detected capacity change from 0 to 1024 [ 139.994832][ T8987] EXT4-fs: Ignoring removed orlov option [ 140.010931][ T8987] EXT4-fs: quotafile must be on filesystem root [ 140.117250][ T8998] loop8: detected capacity change from 0 to 512 [ 140.135020][ T8998] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 140.159052][ T8998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 140.174856][ T8985] vcan0 speed is unknown, defaulting to 1000 [ 140.181260][ T8998] System zones: 1-12 [ 140.191433][ T8998] EXT4-fs (loop8): 1 truncate cleaned up [ 140.209963][ T8998] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.275868][ T8985] chnl_net:caif_netlink_parms(): no params data found [ 140.301548][ T8998] loop8: detected capacity change from 512 to 64 [ 140.318878][ T8998] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop8 ino=15 [ 140.334142][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.341296][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.348538][ T8985] bridge_slave_0: entered allmulticast mode [ 140.355112][ T8985] bridge_slave_0: entered promiscuous mode [ 140.356418][ T8998] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop8 ino=15 [ 140.363334][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.377057][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.408319][ T8998] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -12) [ 140.424854][ T8985] bridge_slave_1: entered allmulticast mode [ 140.441708][ T8985] bridge_slave_1: entered promiscuous mode [ 140.484951][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.494835][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.504507][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.508184][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.538732][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.557727][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.584076][ T8985] team0: Port device team_slave_0 added [ 140.590463][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.604690][ T8985] team0: Port device team_slave_1 added [ 140.618181][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.650589][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.657791][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.683846][ T8985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.700131][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.701699][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.720607][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.738760][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.746552][ T8985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.777518][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.795877][ T8985] hsr_slave_0: entered promiscuous mode [ 140.803550][ T8985] hsr_slave_1: entered promiscuous mode [ 140.809602][ T5559] EXT4-fs warning (device loop8): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 140.825873][ T8985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.833533][ T8985] Cannot create hsr debugfs directory [ 140.879193][ T8993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.189559][ T8985] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.198711][ T8985] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.210338][ T8985] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.219317][ T8985] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.270701][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.292301][ T8985] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.303225][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.310309][ T4762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.334156][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.341450][ T4762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.360778][ T8985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.427518][ T8985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.520375][ T8985] veth0_vlan: entered promiscuous mode [ 141.528548][ T8985] veth1_vlan: entered promiscuous mode [ 141.547445][ T8985] veth0_macvtap: entered promiscuous mode [ 141.557879][ T8985] veth1_macvtap: entered promiscuous mode [ 141.569006][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.579561][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.589492][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.600138][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.616574][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.627381][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.638016][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.648092][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.658610][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.668575][ T8985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.679051][ T8985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.693666][ T8985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.705113][ T8985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.713952][ T8985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.722854][ T8985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.731669][ T8985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.821532][ T9033] vcan0 speed is unknown, defaulting to 1000 [ 141.880594][ T9044] loop4: detected capacity change from 0 to 512 [ 141.893079][ T29] audit: type=1400 audit(1733738515.057:3154): avc: denied { write } for pid=9032 comm="syz.0.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.960915][ T9044] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 141.972037][ T9044] EXT4-fs (loop4): invalid journal inode [ 141.977727][ T9044] EXT4-fs (loop4): can't get journal size [ 142.024082][ T9044] EXT4-fs (loop4): 1 truncate cleaned up [ 142.024367][ T9054] loop6: detected capacity change from 0 to 512 [ 142.045489][ T9044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.093856][ T9054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 142.110650][ T9054] System zones: 1-12 [ 142.118480][ T9054] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1878: corrupted in-inode xattr: invalid ea_ino [ 142.161302][ T9054] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1878: couldn't read orphan inode 15 (err -117) [ 142.176964][ T9054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.198301][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.204424][ T9036] vcan0 speed is unknown, defaulting to 1000 [ 142.340946][ T9067] pim6reg1: entered promiscuous mode [ 142.346341][ T9067] pim6reg1: entered allmulticast mode [ 142.390447][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.470104][ T9036] chnl_net:caif_netlink_parms(): no params data found [ 142.535950][ T9083] loop6: detected capacity change from 0 to 4096 [ 142.554971][ T9083] loop6: detected capacity change from 0 to 512 [ 142.561927][ T9083] EXT4-fs: Ignoring removed nobh option [ 142.567518][ T9083] EXT4-fs: Ignoring removed nobh option [ 142.575221][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.582430][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.604322][ T9083] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 142.614599][ T9083] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1889: invalid indirect mapped block 2683928664 (level 1) [ 142.636197][ T9036] bridge_slave_0: entered allmulticast mode [ 142.655239][ T9036] bridge_slave_0: entered promiscuous mode [ 142.667194][ T9083] EXT4-fs (loop6): 1 truncate cleaned up [ 142.690127][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.697282][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.717416][ T9083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.748441][ T9036] bridge_slave_1: entered allmulticast mode [ 142.774700][ T9036] bridge_slave_1: entered promiscuous mode [ 142.800608][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.845176][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.866537][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.950145][ T9036] team0: Port device team_slave_0 added [ 142.983923][ T9036] team0: Port device team_slave_1 added [ 143.086056][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.093361][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.119306][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.133309][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.140372][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.166354][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.229119][ T9036] hsr_slave_0: entered promiscuous mode [ 143.240570][ T9036] hsr_slave_1: entered promiscuous mode [ 143.268677][ T9036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.290400][ T9036] Cannot create hsr debugfs directory [ 143.432933][ T9119] loop6: detected capacity change from 0 to 1024 [ 143.467236][ T9036] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.491585][ T9119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.528352][ T9125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.581508][ T9036] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.678647][ T9036] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.780319][ T9036] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.904277][ T9036] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 143.925917][ T9036] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 143.948113][ T9036] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 143.970445][ T9036] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 144.056398][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.100347][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.128067][ T9036] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.150490][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.157735][ T4772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.190584][ T9129] loop6: detected capacity change from 0 to 512 [ 144.201158][ T4767] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.208286][ T4767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.220613][ T9129] EXT4-fs: Ignoring removed oldalloc option [ 144.241480][ T9129] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 144.259055][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 144.259071][ T29] audit: type=1326 audit(1733738517.417:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e703bfed9 code=0x7ffc0000 [ 144.316622][ T9129] EXT4-fs (loop6): 1 truncate cleaned up [ 144.333847][ T9036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.347271][ T29] audit: type=1326 audit(1733738517.457:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e703be98f code=0x7ffc0000 [ 144.370721][ T29] audit: type=1326 audit(1733738517.457:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e703bfed9 code=0x7ffc0000 [ 144.394321][ T29] audit: type=1326 audit(1733738517.457:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e703bfed9 code=0x7ffc0000 [ 144.410459][ T9129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.462922][ T29] audit: type=1400 audit(1733738517.607:3224): avc: denied { mount } for pid=9140 comm="syz.4.1906" name="/" dev="ramfs" ino=23121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 144.485257][ T29] audit: type=1400 audit(1733738517.627:3225): avc: denied { mounton } for pid=9128 comm="syz.6.1914" path="/105/bus/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.539411][ T9153] vcan0 speed is unknown, defaulting to 1000 [ 144.596195][ T9036] veth0_vlan: entered promiscuous mode [ 144.603979][ T29] audit: type=1400 audit(1733738517.677:3226): avc: denied { create } for pid=9149 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 144.623807][ T29] audit: type=1400 audit(1733738517.687:3227): avc: denied { sys_admin } for pid=9149 comm="syz.0.1918" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 144.624535][ T9036] veth1_vlan: entered promiscuous mode [ 144.667927][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.737471][ T9036] veth0_macvtap: entered promiscuous mode [ 144.757213][ T9036] veth1_macvtap: entered promiscuous mode [ 144.778899][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.789484][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.799404][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.809881][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.819857][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.830437][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.841983][ T29] audit: type=1400 audit(1733738518.007:3228): avc: denied { bind } for pid=9159 comm="syz.6.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.846745][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.861365][ T29] audit: type=1400 audit(1733738518.007:3229): avc: denied { node_bind } for pid=9159 comm="syz.6.1909" saddr=172.20.20.36 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 144.937404][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.948073][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.957956][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.968590][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.978666][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.989227][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.991812][ T2191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.999143][ T9036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.020295][ T9036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.101838][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.121786][ T9036] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.130543][ T9036] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.139539][ T9036] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.148582][ T9036] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.255270][ T9178] netlink: 'syz.8.1886': attribute type 1 has an invalid length. [ 145.288080][ T9178] bond1: entered allmulticast mode [ 145.300290][ T9178] bond1 (unregistering): Released all slaves [ 145.332781][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1886'. [ 145.433716][ T9125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.496013][ T9125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.556376][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1924'. [ 145.568533][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1924'. [ 145.614857][ T9125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.667797][ T9125] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.698507][ T9125] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.725845][ T9125] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.754806][ T9125] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.253517][ T4762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 146.327131][ T9215] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 146.417690][ T9215] bond2: entered allmulticast mode [ 146.430070][ T9215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.442453][ T9215] bond1: (slave bond2): making interface the new active one [ 146.450269][ T9215] bond1: (slave bond2): Enslaving as an active interface with an up link [ 146.459715][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1933'. [ 146.490115][ T9218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.660275][ T9224] hub 6-0:1.0: USB hub found [ 146.665423][ T9224] hub 6-0:1.0: 8 ports detected [ 146.868942][ T9231] vcan0 speed is unknown, defaulting to 1000 [ 146.904612][ T9238] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.045916][ T9244] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.165776][ T9244] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.232977][ T9244] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.318472][ T9244] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.393235][ T9250] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 147.418487][ T9244] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.475246][ T9244] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.534164][ T9244] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.581800][ T9244] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.841027][ T9253] syzkaller0: entered promiscuous mode [ 147.846636][ T9253] syzkaller0: entered allmulticast mode [ 147.980661][ T9261] pim6reg1: entered promiscuous mode [ 147.986189][ T9261] pim6reg1: entered allmulticast mode [ 148.069220][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 148.166074][ T9276] loop6: detected capacity change from 0 to 128 [ 148.272633][ T9279] loop4: detected capacity change from 0 to 1024 [ 148.283110][ T9279] EXT4-fs: Ignoring removed nobh option [ 148.288758][ T9279] EXT4-fs: Ignoring removed orlov option [ 148.299910][ T9284] vcan0 speed is unknown, defaulting to 1000 [ 148.328343][ T9285] loop6: detected capacity change from 0 to 512 [ 148.350355][ T9279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.361468][ T9285] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 148.429112][ T9285] EXT4-fs (loop6): orphan cleanup on readonly fs [ 148.487643][ T9285] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 148.546778][ T9285] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #11: comm syz.6.1963: corrupted inode contents [ 148.564157][ T9285] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #11: comm syz.6.1963: mark_inode_dirty error [ 148.583382][ T9285] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1963: invalid indirect mapped block 1 (level 1) [ 148.597599][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.606639][ T9285] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #11: comm syz.6.1963: corrupted inode contents [ 148.607515][ T9285] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 148.627478][ T9285] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #11: comm syz.6.1963: corrupted inode contents [ 148.642922][ T9285] EXT4-fs error (device loop6): ext4_truncate:4240: inode #11: comm syz.6.1963: mark_inode_dirty error [ 148.654824][ T9285] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 148.666299][ T9285] EXT4-fs (loop6): 1 truncate cleaned up [ 148.673287][ T9285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.767065][ T9303] syz.4.1969[9303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.767138][ T9303] syz.4.1969[9303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.799412][ T9303] syz.4.1969[9303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.826879][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.864794][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1973'. [ 149.041621][ T9317] hub 6-0:1.0: USB hub found [ 149.063231][ T9317] hub 6-0:1.0: 8 ports detected [ 149.130166][ T9323] loop4: detected capacity change from 0 to 4096 [ 149.196512][ T9323] loop4: detected capacity change from 0 to 512 [ 149.218075][ T9323] EXT4-fs: Ignoring removed nobh option [ 149.223756][ T9323] EXT4-fs: Ignoring removed nobh option [ 149.260299][ T9323] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 149.287403][ T9323] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1978: invalid indirect mapped block 2683928664 (level 1) [ 149.361463][ T9323] EXT4-fs (loop4): 1 truncate cleaned up [ 149.367566][ T9323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.398538][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 149.398553][ T29] audit: type=1400 audit(1733738522.557:3459): avc: denied { create } for pid=9327 comm="syz.0.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.428918][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1980'. [ 149.478618][ T29] audit: type=1400 audit(1733738522.587:3460): avc: denied { write } for pid=9327 comm="syz.0.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.499253][ T29] audit: type=1326 audit(1733738522.617:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e703be840 code=0x7ffc0000 [ 149.522807][ T29] audit: type=1326 audit(1733738522.617:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9e703bec27 code=0x7ffc0000 [ 149.538476][ T9331] syz.6.1982[9331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.546230][ T29] audit: type=1326 audit(1733738522.617:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e703be840 code=0x7ffc0000 [ 149.581102][ T29] audit: type=1326 audit(1733738522.617:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e703bfed9 code=0x7ffc0000 [ 149.604783][ T29] audit: type=1326 audit(1733738522.617:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e703bfed9 code=0x7ffc0000 [ 149.628641][ T9331] syz.6.1982[9331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.628840][ T9331] syz.6.1982[9331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.646854][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.686742][ T29] audit: type=1326 audit(1733738522.687:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e703bfed9 code=0x7ffc0000 [ 149.710225][ T29] audit: type=1326 audit(1733738522.687:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e703bfed9 code=0x7ffc0000 [ 149.733747][ T29] audit: type=1326 audit(1733738522.687:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.4.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e703bfed9 code=0x7ffc0000 [ 149.982485][ T9354] xt_TCPMSS: Only works on TCP SYN packets [ 149.989730][ T9353] loop6: detected capacity change from 0 to 1024 [ 150.001397][ T9353] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.069699][ T9353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.185733][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.230784][ T9369] vcan0 speed is unknown, defaulting to 1000 [ 150.606567][ T9389] loop8: detected capacity change from 0 to 1024 [ 150.657433][ T9389] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.668424][ T9389] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.727175][ T9389] JBD2: no valid journal superblock found [ 150.733054][ T9389] EXT4-fs (loop8): Could not load journal inode [ 150.733424][ T2191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.132365][ T9413] vcan0 speed is unknown, defaulting to 1000 [ 151.181121][ T9414] loop8: detected capacity change from 0 to 512 [ 151.194888][ T9414] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 151.213227][ T9414] EXT4-fs (loop8): orphan cleanup on readonly fs [ 151.220145][ T9414] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 151.235715][ T9414] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.2014: corrupted inode contents [ 151.307827][ T9414] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #11: comm syz.8.2014: mark_inode_dirty error [ 151.374485][ T9414] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2014: invalid indirect mapped block 1 (level 1) [ 151.451488][ T9414] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.2014: corrupted inode contents [ 151.463718][ T9414] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 151.482845][ T9414] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #11: comm syz.8.2014: corrupted inode contents [ 151.510544][ T9414] EXT4-fs error (device loop8): ext4_truncate:4240: inode #11: comm syz.8.2014: mark_inode_dirty error [ 151.551303][ T9414] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 151.577541][ T9414] EXT4-fs (loop8): 1 truncate cleaned up [ 151.597023][ T9414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.827229][ T9421] syzkaller0: entered promiscuous mode [ 151.832819][ T9421] syzkaller0: entered allmulticast mode [ 151.919132][ T9036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.072341][ T4767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.276035][ T9444] loop3: detected capacity change from 0 to 128 [ 152.308364][ T9444] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.370291][ T9444] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.584535][ T8985] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.813647][ T9467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.856303][ T9467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.893964][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2036'. [ 152.996946][ T9479] xt_hashlimit: max too large, truncated to 1048576 [ 153.018385][ T9475] loop3: detected capacity change from 0 to 8192 [ 153.019766][ T9479] Cannot find set identified by id 0 to match [ 153.043391][ T9475] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.599334][ T9492] loop3: detected capacity change from 0 to 2048 [ 153.639211][ T9492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.737773][ T9505] loop8: detected capacity change from 0 to 512 [ 153.744654][ T9492] Falling back ldisc for ttyS3. [ 153.775338][ T9505] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 153.820553][ T8985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.842060][ T9505] EXT4-fs (loop8): 1 truncate cleaned up [ 153.859758][ T9505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.929429][ T9509] loop3: detected capacity change from 0 to 512 [ 153.966579][ T9509] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 153.994792][ T9036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.011353][ T9509] EXT4-fs (loop3): orphan cleanup on readonly fs [ 154.030676][ T9509] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.095505][ T9509] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 154.131243][ T9509] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.2047: iget: immutable or append flags not allowed on symlinks [ 154.173979][ T9513] syzkaller0: entered promiscuous mode [ 154.179571][ T9513] syzkaller0: entered allmulticast mode [ 154.194798][ T9509] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2047: couldn't read orphan inode 16 (err -117) [ 154.226300][ T9509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.316735][ T8985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.430428][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 154.430446][ T29] audit: type=1400 audit(1733738527.587:3633): avc: denied { create } for pid=9522 comm="syz.8.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.499655][ T29] audit: type=1400 audit(1733738527.597:3634): avc: denied { setopt } for pid=9522 comm="syz.8.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.519271][ T29] audit: type=1400 audit(1733738527.597:3635): avc: denied { write } for pid=9522 comm="syz.8.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.538689][ T29] audit: type=1400 audit(1733738527.597:3636): avc: denied { connect } for pid=9522 comm="syz.8.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.558624][ T29] audit: type=1400 audit(1733738527.597:3637): avc: denied { name_connect } for pid=9522 comm="syz.8.2053" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 154.580939][ T29] audit: type=1400 audit(1733738527.607:3638): avc: denied { create } for pid=9525 comm="syz.3.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.600664][ T29] audit: type=1400 audit(1733738527.607:3639): avc: denied { create } for pid=9525 comm="syz.3.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.620483][ T29] audit: type=1400 audit(1733738527.627:3640): avc: denied { bind } for pid=9525 comm="syz.3.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.640106][ T29] audit: type=1400 audit(1733738527.657:3641): avc: denied { name_connect } for pid=9522 comm="syz.8.2053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 154.724641][ T9535] loop8: detected capacity change from 0 to 128 [ 154.755304][ T29] audit: type=1326 audit(1733738527.847:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.8.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 154.903801][ T9544] loop3: detected capacity change from 0 to 1024 [ 154.914893][ T9546] loop8: detected capacity change from 0 to 512 [ 154.943012][ T9544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.973907][ T9546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.011103][ T9546] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.023298][ T9544] netlink: 'syz.3.2063': attribute type 4 has an invalid length. [ 155.222075][ T9565] syz.3.2070[9565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.222211][ T9565] syz.3.2070[9565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.245163][ T9567] xt_hashlimit: max too large, truncated to 1048576 [ 155.250647][ T9565] syz.3.2070[9565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.277053][ T9567] Cannot find set identified by id 0 to match [ 155.319271][ T9565] loop3: detected capacity change from 0 to 1024 [ 155.346519][ T9570] loop8: detected capacity change from 0 to 256 [ 155.352898][ T9565] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 155.371197][ T3378] page_pool_release_retry() stalled pool shutdown: id 75, 1 inflight 60 sec [ 155.391567][ T9565] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 155.448352][ T9565] EXT4-fs (loop3): mount failed [ 155.687692][ T9582] loop3: detected capacity change from 0 to 2048 [ 155.732259][ T9582] EXT4-fs (loop3): failed to initialize system zone (-117) [ 155.750481][ T9582] EXT4-fs (loop3): mount failed [ 155.859785][ T9590] loop8: detected capacity change from 0 to 128 [ 155.886559][ T9590] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.126569][ T9599] loop3: detected capacity change from 0 to 4096 [ 156.173903][ T9599] loop3: detected capacity change from 0 to 512 [ 156.183800][ T9607] loop4: detected capacity change from 0 to 512 [ 156.197842][ T9599] EXT4-fs: Ignoring removed nobh option [ 156.203586][ T9599] EXT4-fs: Ignoring removed nobh option [ 156.217004][ T9607] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.228426][ T9599] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 156.239838][ T9599] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2082: invalid indirect mapped block 2683928664 (level 1) [ 156.269061][ T9607] EXT4-fs (loop4): 1 truncate cleaned up [ 156.278486][ T9599] EXT4-fs (loop3): 1 truncate cleaned up [ 156.414045][ T1075] page_pool_release_retry() stalled pool shutdown: id 76, 1 inflight 60 sec [ 156.492359][ T4772] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.530764][ T9628] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2095'. [ 157.772225][ T4772] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 157.872610][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 157.897982][ T9675] loop4: detected capacity change from 0 to 1024 [ 157.925217][ T9675] EXT4-fs: Ignoring removed nobh option [ 157.930887][ T9675] EXT4-fs: Ignoring removed orlov option [ 158.073230][ T9675] sit0: entered promiscuous mode [ 158.078244][ T9675] vlan2: entered promiscuous mode [ 158.091891][ T9675] sit0: left promiscuous mode [ 158.110766][ T9682] loop8: detected capacity change from 0 to 2048 [ 158.181231][ T9682] Falling back ldisc for ttyS3. [ 158.323546][ T9704] loop3: detected capacity change from 0 to 128 [ 158.348418][ T9706] pim6reg1: entered promiscuous mode [ 158.354040][ T9706] pim6reg1: entered allmulticast mode [ 158.370211][ T9704] FAT-fs (loop3): Directory bread(block 162) failed [ 158.378241][ T9704] FAT-fs (loop3): Directory bread(block 163) failed [ 158.388733][ T9704] FAT-fs (loop3): Directory bread(block 164) failed [ 158.397003][ T9708] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2128'. [ 158.413607][ T9704] FAT-fs (loop3): Directory bread(block 165) failed [ 158.420884][ T9704] FAT-fs (loop3): Directory bread(block 166) failed [ 158.430694][ T9704] FAT-fs (loop3): Directory bread(block 167) failed [ 158.439599][ T9704] FAT-fs (loop3): Directory bread(block 168) failed [ 158.455226][ T9704] FAT-fs (loop3): Directory bread(block 169) failed [ 158.484227][ T9717] loop6: detected capacity change from 0 to 512 [ 158.498020][ T9717] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 158.513781][ T9704] FAT-fs (loop3): Directory bread(block 162) failed [ 158.528409][ T9704] FAT-fs (loop3): Directory bread(block 163) failed [ 158.536862][ T9717] EXT4-fs (loop6): 1 truncate cleaned up [ 158.552146][ T9704] syz.3.2127: attempt to access beyond end of device [ 158.552146][ T9704] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 158.584494][ T9704] syz.3.2127: attempt to access beyond end of device [ 158.584494][ T9704] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 158.646693][ T9730] loop0: detected capacity change from 0 to 1024 [ 158.686045][ T9730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.751606][ T9730] Process accounting resumed [ 158.771976][ T9742] loop6: detected capacity change from 0 to 128 [ 158.786634][ T9730] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 158.820665][ T9742] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.918352][ T9752] loop3: detected capacity change from 0 to 128 [ 158.960647][ T9752] syz.3.2148: attempt to access beyond end of device [ 158.960647][ T9752] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 159.033419][ T9762] ref_ctr increment failed for inode: 0x322 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888108032a00 [ 159.046255][ T9761] uprobe: syz.6.2152:9761 failed to unregister, leaking uprobe [ 159.065711][ T9764] loop8: detected capacity change from 0 to 1024 [ 159.072737][ T9764] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.079693][ T9764] EXT4-fs (loop8): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 159.122095][ T9764] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 159.130166][ T9764] EXT4-fs (loop8): orphan cleanup on readonly fs [ 159.149461][ T9764] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.2151: Invalid inode table block 0 in block_group 0 [ 159.183196][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2153'. [ 159.191638][ T9764] EXT4-fs (loop8): Remounting filesystem read-only [ 159.203752][ T9764] EXT4-fs (loop8): 1 truncate cleaned up [ 159.220110][ T9764] EXT4-fs mount: 18 callbacks suppressed [ 159.220172][ T9764] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.260154][ T9764] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 159.283538][ T9764] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.415891][ T9785] syzkaller0: entered promiscuous mode [ 159.421468][ T9785] syzkaller0: entered allmulticast mode [ 159.509762][ T29] kauditd_printk_skb: 2502 callbacks suppressed [ 159.509777][ T29] audit: type=1400 audit(1733738532.667:6143): avc: denied { bind } for pid=9792 comm="syz.8.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.535558][ T29] audit: type=1400 audit(1733738532.667:6144): avc: denied { name_bind } for pid=9792 comm="syz.8.2163" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 159.537742][ T9794] vcan0 speed is unknown, defaulting to 1000 [ 159.557402][ T29] audit: type=1400 audit(1733738532.667:6145): avc: denied { node_bind } for pid=9792 comm="syz.8.2163" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 159.611995][ T3378] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec [ 159.676017][ T9800] loop8: detected capacity change from 0 to 128 [ 159.704832][ T9800] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 159.738061][ T9800] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 159.745977][ T9800] FAT-fs (loop8): Filesystem has been set read-only [ 159.768808][ T9800] syz.8.2174: attempt to access beyond end of device [ 159.768808][ T9800] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 159.813230][ T9800] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 159.821163][ T9800] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 159.869532][ T9800] syz.8.2174: attempt to access beyond end of device [ 159.869532][ T9800] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 159.922031][ T9800] syz.8.2174: attempt to access beyond end of device [ 159.922031][ T9800] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 159.976430][ T9800] syz.8.2174: attempt to access beyond end of device [ 159.976430][ T9800] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.031496][ T9800] syz.8.2174: attempt to access beyond end of device [ 160.031496][ T9800] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.187643][ T9804] loop6: detected capacity change from 0 to 256 [ 160.194059][ T29] audit: type=1400 audit(1733738533.347:6146): avc: denied { write } for pid=9805 comm="syz.8.2166" path="socket:[27035]" dev="sockfs" ino=27035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.217637][ T29] audit: type=1400 audit(1733738533.347:6147): avc: denied { create } for pid=9805 comm="syz.8.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 160.502778][ T29] audit: type=1400 audit(1733738533.657:6148): avc: denied { tracepoint } for pid=9814 comm="syz.4.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 160.614468][ T29] audit: type=1326 audit(1733738533.777:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c709ffed9 code=0x7ffc0000 [ 160.638029][ T29] audit: type=1326 audit(1733738533.777:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3c709ffed9 code=0x7ffc0000 [ 160.661603][ T29] audit: type=1326 audit(1733738533.777:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c709ffed9 code=0x7ffc0000 [ 160.685155][ T29] audit: type=1326 audit(1733738533.777:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3c709ffed9 code=0x7ffc0000 [ 160.821603][ T9832] loop6: detected capacity change from 0 to 512 [ 160.848082][ T9836] loop3: detected capacity change from 0 to 512 [ 160.849654][ T9832] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 160.895729][ T9836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.909035][ T9832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 160.927336][ T9832] System zones: 1-12 [ 160.933618][ T9832] EXT4-fs (loop6): 1 truncate cleaned up [ 160.941534][ T9832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.971390][ T9836] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.032526][ T9851] loop0: detected capacity change from 0 to 164 [ 161.049596][ T9851] Unable to read rock-ridge attributes [ 161.060082][ T9851] Unable to read rock-ridge attributes [ 161.064911][ T9828] loop4: detected capacity change from 0 to 32768 [ 161.125833][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.146996][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2185'. [ 161.208497][ T8985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.223742][ T9855] team0 (unregistering): Port device team_slave_0 removed [ 161.244667][ T9855] team0 (unregistering): Port device team_slave_1 removed [ 161.272310][ T9865] capability: warning: `syz.3.2188' uses 32-bit capabilities (legacy support in use) [ 161.440048][ T9879] loop8: detected capacity change from 0 to 1024 [ 161.489005][ T9879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.546808][ T9879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.569887][ T9883] syzkaller0: entered promiscuous mode [ 161.575488][ T9883] syzkaller0: entered allmulticast mode [ 161.619277][ T9879] Process accounting resumed [ 161.676278][ T9879] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 161.785559][ T9036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.948261][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2203'. [ 162.109200][ T9892] loop0: detected capacity change from 0 to 32768 [ 162.153148][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.261437][ T4767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.369369][ T9930] loop4: detected capacity change from 0 to 1024 [ 162.385811][ T9930] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 162.395731][ T9930] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 162.405640][ T9930] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 162.433278][ T9930] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: inode #5: comm syz.4.2215: unexpected bad inode w/o EXT4_IGET_BAD [ 162.465311][ T9930] EXT4-fs (loop4): no journal found [ 162.470590][ T9930] EXT4-fs (loop4): can't get journal size [ 162.483764][ T9930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.898573][ T4762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.094345][ T9966] bridge0: port 3(vlan2) entered blocking state [ 163.100716][ T9966] bridge0: port 3(vlan2) entered disabled state [ 163.144033][ T9966] vlan2: entered allmulticast mode [ 163.149226][ T9966] bridge0: entered allmulticast mode [ 163.191291][ T9966] vlan2: left allmulticast mode [ 163.196205][ T9966] bridge0: left allmulticast mode [ 163.204636][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.259039][ T9953] loop3: detected capacity change from 0 to 32768 [ 163.589064][ T9989] pim6reg1: entered promiscuous mode [ 163.594473][ T9989] pim6reg1: entered allmulticast mode [ 163.765318][T10006] loop3: detected capacity change from 0 to 128 [ 163.771933][T10006] EXT4-fs: Ignoring removed nobh option [ 163.779287][T10006] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.794823][T10006] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.862259][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.869976][T10015] batadv_slave_0: entered promiscuous mode [ 163.922170][ T8985] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.980123][T10011] loop8: detected capacity change from 0 to 32768 [ 163.984649][T10019] vcan0 speed is unknown, defaulting to 1000 [ 164.206079][T10030] loop8: detected capacity change from 0 to 512 [ 164.217007][T10026] loop3: detected capacity change from 0 to 1024 [ 164.224590][T10026] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.227164][T10030] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 164.241915][T10026] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 164.277343][T10026] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 164.288029][T10026] EXT4-fs (loop3): orphan cleanup on readonly fs [ 164.307043][T10030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 164.318147][T10026] EXT4-fs error (device loop3): __ext4_get_inode_loc:4435: comm syz.3.2255: Invalid inode table block 0 in block_group 0 [ 164.321308][T10030] System zones: 1-12 [ 164.336019][T10026] EXT4-fs (loop3): Remounting filesystem read-only [ 164.346109][T10030] EXT4-fs (loop8): 1 truncate cleaned up [ 164.354421][T10030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.369102][T10041] loop0: detected capacity change from 0 to 512 [ 164.375881][T10026] EXT4-fs (loop3): 1 truncate cleaned up [ 164.392679][T10026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.416224][T10041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.447072][T10041] EXT4-fs (loop0): 1 truncate cleaned up [ 164.454833][T10041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.471121][T10026] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 164.488336][T10026] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.717545][T10057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.747792][T10053] pim6reg1: entered promiscuous mode [ 164.753232][T10053] pim6reg1: entered allmulticast mode [ 164.763298][ T9036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.869682][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2254'. [ 164.895268][T10062] loop4: detected capacity change from 0 to 164 [ 164.948981][T10062] Unable to read rock-ridge attributes [ 164.955547][T10062] Unable to read rock-ridge attributes [ 164.985806][T10062] veth1_macvtap: left promiscuous mode [ 165.039070][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2259'. [ 165.703546][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.735806][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 165.735823][ T29] audit: type=1326 audit(1733738538.897:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 165.775492][T10073] loop6: detected capacity change from 0 to 1024 [ 165.797665][T10080] loop4: detected capacity change from 0 to 1024 [ 165.804635][T10073] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.820474][ T29] audit: type=1326 audit(1733738538.927:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 165.844122][ T29] audit: type=1326 audit(1733738538.927:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 165.867831][ T29] audit: type=1326 audit(1733738538.927:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 165.891440][ T29] audit: type=1326 audit(1733738538.927:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 165.904447][T10073] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 165.914961][ T29] audit: type=1326 audit(1733738538.927:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 165.948413][ T29] audit: type=1326 audit(1733738538.927:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 165.971965][ T29] audit: type=1400 audit(1733738538.927:6315): avc: denied { create } for pid=10071 comm="syz.3.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 165.992600][ T29] audit: type=1326 audit(1733738538.937:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 166.016221][ T29] audit: type=1326 audit(1733738538.937:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.8.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 166.050165][T10073] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 166.065089][T10080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.069340][T10073] EXT4-fs (loop6): orphan cleanup on readonly fs [ 166.086790][T10073] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.2264: Invalid inode table block 0 in block_group 0 [ 166.100470][T10073] EXT4-fs (loop6): Remounting filesystem read-only [ 166.108144][T10089] loop3: detected capacity change from 0 to 1024 [ 166.115044][T10089] EXT4-fs: Ignoring removed nobh option [ 166.120638][T10089] EXT4-fs: Ignoring removed orlov option [ 166.126720][T10073] EXT4-fs (loop6): 1 truncate cleaned up [ 166.137030][T10073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.149706][T10073] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 166.156854][T10073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.158167][T10089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.298476][ T8985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.327129][T10103] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 166.493205][T10109] loop3: detected capacity change from 0 to 512 [ 166.503192][T10109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.543825][T10109] EXT4-fs (loop3): 1 truncate cleaned up [ 166.560033][T10109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.603754][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.844847][T10119] loop4: detected capacity change from 0 to 512 [ 166.877793][T10119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.904562][T10119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 166.921607][T10119] System zones: 1-12 [ 166.936787][T10119] EXT4-fs (loop4): 1 truncate cleaned up [ 166.971663][T10119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.122849][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.135267][T10130] syz.6.2283[10130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.135361][T10130] syz.6.2283[10130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.153618][T10131] pim6reg1: entered promiscuous mode [ 167.170570][T10131] pim6reg1: entered allmulticast mode [ 167.185276][T10130] syz.6.2283[10130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.464727][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.500754][T10152] loop0: detected capacity change from 0 to 512 [ 167.519339][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.533199][T10152] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 167.700461][T10160] syz_tun: entered promiscuous mode [ 167.729625][T10160] syz_tun: left promiscuous mode [ 167.794261][T10165] vcan0 speed is unknown, defaulting to 1000 [ 167.874924][T10169] vlan0: entered promiscuous mode [ 167.880016][T10169] vlan0: entered allmulticast mode [ 167.932344][ T4762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.012028][ T4762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.071342][T10176] loop0: detected capacity change from 0 to 512 [ 168.128620][T10176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.182031][T10176] ext4 filesystem being mounted at /466/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.271577][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.284838][ T8985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.866169][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.876287][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.182374][T10212] loop3: detected capacity change from 0 to 1024 [ 169.190723][T10212] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.198843][T10212] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 169.212712][T10212] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 169.220785][T10212] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.229698][T10212] EXT4-fs error (device loop3): __ext4_get_inode_loc:4435: comm syz.3.2314: Invalid inode table block 0 in block_group 0 [ 169.245578][T10212] EXT4-fs (loop3): Remounting filesystem read-only [ 169.252615][T10212] EXT4-fs (loop3): 1 truncate cleaned up [ 169.258772][T10212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.274272][T10212] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 169.290218][T10212] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.447767][T10222] SELinux: failed to load policy [ 169.699592][T10228] vcan0 speed is unknown, defaulting to 1000 [ 169.883793][T10226] loop3: detected capacity change from 0 to 256 [ 169.904998][T10226] FAT-fs (loop3): bogus number of FAT sectors [ 169.911146][T10226] FAT-fs (loop3): Can't find a valid FAT filesystem [ 170.321700][T10236] loop3: detected capacity change from 0 to 1024 [ 170.343444][T10236] EXT4-fs: Ignoring removed orlov option [ 170.349196][T10236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.450934][T10236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.505767][T10246] loop8: detected capacity change from 0 to 512 [ 170.512790][T10246] ext4: Unknown parameter 'appraise' [ 170.605941][ T8985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.780083][T10254] syzkaller0: entered promiscuous mode [ 170.785732][T10254] syzkaller0: entered allmulticast mode [ 170.839868][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 170.839911][ T29] audit: type=1400 audit(1733738543.997:6425): avc: denied { connect } for pid=10258 comm="syz.8.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.936283][ T29] audit: type=1400 audit(1733738544.097:6426): avc: denied { create } for pid=10263 comm="syz.8.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.975634][T10262] loop0: detected capacity change from 0 to 1024 [ 170.976830][ T29] audit: type=1400 audit(1733738544.117:6427): avc: denied { read write } for pid=10263 comm="syz.8.2331" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.005634][ T29] audit: type=1400 audit(1733738544.117:6428): avc: denied { open } for pid=10263 comm="syz.8.2331" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.024986][T10262] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.050748][T10271] loop8: detected capacity change from 0 to 512 [ 171.061484][T10269] pim6reg1: entered promiscuous mode [ 171.066898][T10269] pim6reg1: entered allmulticast mode [ 171.078018][T10262] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 171.091902][T10271] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 171.108909][T10262] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 171.129154][T10262] EXT4-fs (loop0): orphan cleanup on readonly fs [ 171.137118][T10262] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz.0.2330: Invalid inode table block 0 in block_group 0 [ 171.151681][T10262] EXT4-fs (loop0): Remounting filesystem read-only [ 171.158228][T10262] Quota error (device loop0): write_blk: dquota write failed [ 171.165750][T10262] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 171.194649][T10262] EXT4-fs (loop0): 1 truncate cleaned up [ 171.198912][T10271] EXT4-fs (loop8): 1 truncate cleaned up [ 171.201520][T10262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.216277][T10271] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.220347][T10262] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 171.236571][T10280] syz.6.2337[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.237469][T10280] syz.6.2337[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.237965][T10262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.249728][T10279] xt_hashlimit: size too large, truncated to 1048576 [ 171.293248][T10280] syz.6.2337[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.667344][T10310] loop6: detected capacity change from 0 to 512 [ 171.795355][T10310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.825172][T10310] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.844262][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 171.919349][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.527158][ T9036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.639798][T10343] vcan0 speed is unknown, defaulting to 1000 [ 172.690587][T10347] loop4: detected capacity change from 0 to 512 [ 172.735623][T10347] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 172.745912][T10347] EXT4-fs (loop4): group descriptors corrupted! [ 172.826939][T10346] vcan0 speed is unknown, defaulting to 1000 [ 172.845244][ T29] audit: type=1326 audit(1733738546.007:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 172.868958][ T29] audit: type=1326 audit(1733738546.007:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 172.937516][ T29] audit: type=1326 audit(1733738546.007:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 172.961126][ T29] audit: type=1326 audit(1733738546.007:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a198fed9 code=0x7ffc0000 [ 173.136347][T10361] vcan0 speed is unknown, defaulting to 1000 [ 173.141753][ T4762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.176603][T10359] loop8: detected capacity change from 0 to 8192 [ 173.317038][T10367] loop4: detected capacity change from 0 to 2048 [ 173.343666][T10367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.462501][T10373] loop6: detected capacity change from 0 to 512 [ 173.512690][T10373] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.553956][T10373] EXT4-fs (loop6): 1 truncate cleaned up [ 173.560797][T10373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.675326][ T8513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.781817][ T2191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.641587][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.814917][T10411] loop6: detected capacity change from 0 to 1024 [ 174.839830][T10411] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.869721][T10411] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 174.905722][T10411] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 174.914869][T10411] EXT4-fs (loop6): orphan cleanup on readonly fs [ 174.951650][T10411] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.2367: Invalid inode table block 0 in block_group 0 [ 174.953183][T10422] loop3: detected capacity change from 0 to 1024 [ 174.973439][T10418] vcan0 speed is unknown, defaulting to 1000 [ 174.975288][T10422] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.992888][T10411] EXT4-fs (loop6): Remounting filesystem read-only [ 174.999527][T10411] EXT4-fs (loop6): 1 truncate cleaned up [ 175.007199][T10411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.023897][T10411] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 175.030905][T10411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.056146][T10424] loop0: detected capacity change from 0 to 512 [ 175.076395][T10424] ext4: Unknown parameter 'appraise' [ 175.170534][T10422] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 175.208247][T10422] EXT4-fs (loop3): orphan cleanup on readonly fs [ 175.236522][T10429] loop8: detected capacity change from 0 to 512 [ 175.253947][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.275930][T10422] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 175.287295][T10422] EXT4-fs (loop3): Remounting filesystem read-only [ 175.303747][T10435] loop4: detected capacity change from 0 to 164 [ 175.317931][T10422] EXT4-fs (loop3): 1 orphan inode deleted [ 175.330236][T10422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.345132][T10435] syz.4.2380: attempt to access beyond end of device [ 175.345132][T10435] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 175.358262][T10422] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 175.387870][T10439] loop8: detected capacity change from 0 to 512 [ 175.391803][T10435] syz.4.2380: attempt to access beyond end of device [ 175.391803][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.415357][T10422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.428087][T10439] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 175.436374][T10435] syz.4.2380: attempt to access beyond end of device [ 175.436374][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.454037][T10439] EXT4-fs (loop8): 1 truncate cleaned up [ 175.460183][T10439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.476078][T10435] syz.4.2380: attempt to access beyond end of device [ 175.476078][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.489722][T10435] syz.4.2380: attempt to access beyond end of device [ 175.489722][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.506297][T10435] syz.4.2380: attempt to access beyond end of device [ 175.506297][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.520398][T10435] syz.4.2380: attempt to access beyond end of device [ 175.520398][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.538311][T10435] syz.4.2380: attempt to access beyond end of device [ 175.538311][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.554334][T10435] syz.4.2380: attempt to access beyond end of device [ 175.554334][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.568283][T10435] syz.4.2380: attempt to access beyond end of device [ 175.568283][T10435] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.854089][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 175.854153][ T29] audit: type=1326 audit(1733738549.017:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0ee6fed9 code=0x7ffc0000 [ 175.884047][ T29] audit: type=1326 audit(1733738549.017:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0ee6fed9 code=0x7ffc0000 [ 175.927022][T10449] loop0: detected capacity change from 0 to 4096 [ 175.952219][T10449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.025136][ T29] audit: type=1326 audit(1733738549.077:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7a0ee6fed9 code=0x7ffc0000 [ 176.290046][ T29] audit: type=1326 audit(1733738549.447:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0ee6fed9 code=0x7ffc0000 [ 176.313789][ T29] audit: type=1326 audit(1733738549.447:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0ee6fed9 code=0x7ffc0000 [ 176.444042][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.455444][T10460] loop6: detected capacity change from 0 to 128 [ 176.488439][ T29] audit: type=1400 audit(1733738549.647:6786): avc: denied { remount } for pid=10458 comm="syz.6.2388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 176.578597][ T29] audit: type=1326 audit(1733738549.737:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10465 comm="syz.6.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c709ffed9 code=0x7ffc0000 [ 176.663504][ T29] audit: type=1326 audit(1733738549.767:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10465 comm="syz.6.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c709ffed9 code=0x7ffc0000 [ 176.687315][ T29] audit: type=1326 audit(1733738549.777:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10465 comm="syz.6.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c709ffed9 code=0x7ffc0000 [ 176.711016][ T29] audit: type=1326 audit(1733738549.777:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10465 comm="syz.6.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c709ffed9 code=0x7ffc0000 [ 176.757655][T10476] loop6: detected capacity change from 0 to 128 [ 176.767202][T10476] FAT-fs (loop6): Directory bread(block 162) failed [ 176.773935][T10476] FAT-fs (loop6): Directory bread(block 163) failed [ 176.780633][T10476] FAT-fs (loop6): Directory bread(block 164) failed [ 176.790303][T10476] FAT-fs (loop6): Directory bread(block 165) failed [ 176.798601][T10476] FAT-fs (loop6): Directory bread(block 166) failed [ 176.807621][T10476] FAT-fs (loop6): Directory bread(block 167) failed [ 176.815668][T10476] FAT-fs (loop6): Directory bread(block 168) failed [ 176.860348][T10481] loop3: detected capacity change from 0 to 2048 [ 176.871513][T10476] FAT-fs (loop6): Directory bread(block 169) failed [ 176.898785][T10476] FAT-fs (loop6): Directory bread(block 162) failed [ 176.918124][T10476] FAT-fs (loop6): Directory bread(block 163) failed [ 176.933668][T10481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.255082][T10496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10496 comm=syz.6.2402 [ 177.287704][T10496] netlink: 'syz.6.2402': attribute type 7 has an invalid length. [ 177.322458][ T8985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.408065][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2403'. [ 177.545264][T10504] batadv1: entered promiscuous mode [ 177.572750][T10504] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 177.643563][ T9036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.687298][T10512] vhci_hcd: invalid port number 97 [ 177.692538][T10512] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 177.795168][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.816967][T10523] loop6: detected capacity change from 0 to 2048 [ 177.867307][T10529] loop8: detected capacity change from 0 to 512 [ 177.869668][T10528] vcan0 speed is unknown, defaulting to 1000 [ 177.898769][T10529] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.2417: corrupted in-inode xattr: invalid ea_ino [ 177.919509][T10537] loop4: detected capacity change from 0 to 1024 [ 177.931508][T10523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.964453][T10529] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.2417: couldn't read orphan inode 15 (err -117) [ 177.979670][T10537] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.008689][T10529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.049779][T10537] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 178.088349][T10537] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.106932][T10537] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 178.129586][T10537] EXT4-fs (loop4): Remounting filesystem read-only [ 178.143742][T10537] EXT4-fs (loop4): 1 orphan inode deleted [ 178.157342][T10537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 178.180478][T10537] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 178.187449][T10537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.228741][ T9036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.252213][ T2191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.279288][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.615752][T10561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10561 comm=syz.4.2429 [ 178.653616][T10561] netlink: 'syz.4.2429': attribute type 7 has an invalid length. [ 178.672805][T10560] loop8: detected capacity change from 0 to 4096 [ 178.701820][T10560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.747403][T10566] loop6: detected capacity change from 0 to 512 [ 178.772573][T10566] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 178.811912][T10568] loop0: detected capacity change from 0 to 164 [ 178.826875][T10566] EXT4-fs (loop6): 1 truncate cleaned up [ 178.837739][T10566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.929600][T10575] ref_ctr increment failed for inode: 0x21d offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811f1e1500 [ 178.961780][T10574] uprobe: syz.3.2433:10574 failed to unregister, leaking uprobe [ 178.966239][T10566] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.2430: inode #1073372648: comm syz.6.2430: iget: illegal inode # [ 179.001020][T10566] EXT4-fs error (device loop6): ext4_xattr_inode_iget:445: comm syz.6.2430: error while reading EA inode 1073372648 err=-117 [ 179.058027][ T9036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.059374][T10577] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2430: corrupted xattr block 33: invalid header [ 179.107122][T10565] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2430: corrupted xattr block 33: invalid header [ 179.124231][T10565] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 179.149569][T10579] loop8: detected capacity change from 0 to 128 [ 179.160867][ T7615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.224985][T10584] loop3: detected capacity change from 0 to 1024 [ 179.244205][T10584] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.260219][T10584] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2435: bg 0: block 393: padding at end of block bitmap is not set [ 179.280032][T10584] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 179.292613][T10584] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.292613][T10584] [ 179.343918][T10591] loop3: detected capacity change from 0 to 512 [ 179.366827][T10591] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2439: corrupted in-inode xattr: invalid ea_ino [ 179.394705][T10591] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2439: couldn't read orphan inode 15 (err -117) [ 179.445656][T10595] loop8: detected capacity change from 0 to 512 [ 179.461704][T10595] EXT4-fs: inline encryption not supported [ 179.498400][T10595] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.511779][T10595] netlink: 'syz.8.2441': attribute type 10 has an invalid length. [ 179.520383][T10595] geneve1: entered promiscuous mode [ 179.529729][T10595] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 179.538696][ T2191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.543926][T10595] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.2441: corrupted inode contents [ 179.562812][T10595] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz.8.2441: mark_inode_dirty error [ 179.606039][T10595] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.2441: corrupted inode contents [ 179.652911][T10600] wg2: entered promiscuous mode [ 179.657849][T10600] wg2: entered allmulticast mode [ 179.804956][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.831729][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.885254][T10612] ipvlan2: entered promiscuous mode [ 179.894163][T10612] bridge0: port 3(ipvlan2) entered blocking state [ 179.900672][T10612] bridge0: port 3(ipvlan2) entered disabled state [ 179.912263][T10612] ipvlan2: entered allmulticast mode [ 179.917624][T10612] bridge0: entered allmulticast mode [ 179.926259][T10612] ipvlan2: left allmulticast mode [ 179.931386][T10612] bridge0: left allmulticast mode [ 179.995837][T10617] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 180.016131][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2452'. [ 180.157758][T10627] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 180.164339][T10627] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 180.171982][T10627] vhci_hcd vhci_hcd.0: Device attached [ 180.183603][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2458'. [ 180.235219][T10632] vhci_hcd: connection closed [ 180.235459][ T51] vhci_hcd: stop threads [ 180.242708][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2458'. [ 180.244599][ T51] vhci_hcd: release socket [ 180.257893][ T51] vhci_hcd: disconnect device [ 180.270106][T10643] IPv4: Oversized IP packet from 172.20.20.24 [ 180.276481][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 180.282646][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 180.337078][T10647] vcan0 speed is unknown, defaulting to 1000 [ 180.344903][T10649] vhci_hcd: invalid port number 97 [ 180.350262][T10649] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 180.372226][T10645] ================================================================== [ 180.380358][T10645] BUG: KCSAN: data-race in n_tty_poll / tty_set_termios [ 180.387348][T10645] [ 180.389681][T10645] write to 0xffff88813a4b5d1f of 1 bytes by task 10650 on cpu 0: [ 180.397419][T10645] tty_set_termios+0x3ee/0x8b0 [ 180.402204][T10645] set_termios+0x497/0x4e0 [ 180.406654][T10645] tty_mode_ioctl+0x391/0x5d0 [ 180.407084][T10651] loop6: detected capacity change from 0 to 1024 [ 180.411515][T10645] n_tty_ioctl_helper+0x8d/0x240 [ 180.411554][T10645] n_tty_ioctl+0xfd/0x200 [ 180.411577][T10645] tty_ioctl+0x87a/0xbe0 [ 180.411610][T10645] __se_sys_ioctl+0xc9/0x140 [ 180.411640][T10645] __x64_sys_ioctl+0x43/0x50 [ 180.411669][T10645] x64_sys_call+0x1690/0x2dc0 [ 180.436008][T10651] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.436154][T10645] do_syscall_64+0xc9/0x1c0 [ 180.451098][T10651] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 180.455628][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.468067][T10651] EXT4-fs (loop6): orphan cleanup on readonly fs [ 180.473935][T10645] [ 180.473945][T10645] read to 0xffff88813a4b5d1f of 1 bytes by task 10645 on cpu 1: [ 180.473968][T10645] n_tty_poll+0x256/0x490 [ 180.473998][T10645] tty_poll+0x78/0xf0 [ 180.484823][T10651] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 180.491304][T10645] io_write+0x1b2/0xc40 [ 180.491341][T10645] io_issue_sqe+0x150/0xc10 [ 180.491373][T10645] io_submit_sqes+0x64d/0x1090 [ 180.496672][T10651] EXT4-fs (loop6): Remounting filesystem read-only [ 180.499658][T10645] __se_sys_io_uring_enter+0x1b9/0x1ba0 [ 180.499698][T10645] __x64_sys_io_uring_enter+0x78/0x90 [ 180.499727][T10645] x64_sys_call+0xb5e/0x2dc0 [ 180.512393][T10651] EXT4-fs (loop6): 1 orphan inode deleted [ 180.513225][T10645] do_syscall_64+0xc9/0x1c0 [ 180.518405][T10651] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 180.522562][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.522608][T10645] [ 180.522612][T10645] value changed: 0x01 -> 0x33 [ 180.522624][T10645] [ 180.522628][T10645] Reported by Kernel Concurrency Sanitizer on: [ 180.522653][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.4.2461 Not tainted 6.13.0-rc2-syzkaller #0 [ 180.591801][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.601863][T10645] ================================================================== [ 184.011265][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.572380][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.051347][ T4772] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration