last executing test programs: 1m22.685038989s ago: executing program 32 (id=84): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r0 = syz_io_uring_setup(0x2e94, &(0x7f00000002c0)={0x0, 0x8a88, 0x13090, 0x4, 0x20c}, &(0x7f0000001600)=0x0, &(0x7f00000000c0)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x15, 0x2007, @fd_index=0x5, 0x100000001, 0x0, 0x0, 0x7}) io_uring_enter(r0, 0x497c, 0xe13b, 0x0, 0x0, 0x0) 1m1.097562973s ago: executing program 2 (id=894): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r1, 0x0, 0xfdef) 1m1.000162493s ago: executing program 2 (id=899): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x10f7, 0x0, 0xfff}, 0x10) 1m0.861436042s ago: executing program 2 (id=914): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x68, 0x0, 0x0, 0x0) 1m0.861332932s ago: executing program 33 (id=904): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m0.833362112s ago: executing program 2 (id=906): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200040, &(0x7f0000000200)={[{@noblock_validity}, {@discard}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@norecovery}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x57c, &(0x7f0000000bc0)="$eJzs3U1rHGUcAPD/bDZ916ZQinqQQA9WajdN4ksFofUoWizovS7JNpRsuiW7KU0stD3YixcpgogF8QN491j8An6KghaKlKAHL5HZzLabl83rYLbO7wfTPs/MJM88+8z/2f/s7GYDKKzh9J9SxKsR8U0ScbRrWzmyjcPL+y0+vTWRLkksLX32ZxJJtq6zf5L9fzirvBIRv34Vcbq0tt3m/MJ0tV6vzWb1kdbM9ZHm/MKZqzPVqdpU7drY+Pi5d8bH3n/v3YgYyKWvb176+/tPH3507uuTi9/9/PjY/SQuxJFsW3c/duFOd2U4hrPHZDAurNpxNIfG+kmy1wfAjgxkcT4Y6RxwNAayqAf+/25HxBJQUIn4h4Lq5AGda/ucroNfGE8+XL4AWtv/8vJrI3GgfW10aDFZcWWUXu8O5dB+2sYvfzy4ny6xyesQt3NoD6Djzt2IOFsur53/kmz+27mz7RePN7a6jaI9/8BeepjmP2+tl/+UnuU/sU7+c3id2N2JzeO/9DiHZnpK878P1s1/n01dQwNZ7aV2zjeYXLlar52NiJcj4lQM7k/rG93PObf4aKnXtu78L13S9ju5YHYcj8v7V/7MZLVV3U2fuz25G/Ha8/w3iTXz/4F2rrt6/NPH49IW2zhRe/B6r22b979b/hnw0k8Rb6w7/s/vaCUb358caZ8PI52zYq2/7p34rVf72+t/t3zuiabjf2jj/g8l3fdrm9tv48cD/9R6bdvp+b8v+bxd3petu1lttWZHI/Yln6xdP/b8Zzv1zv5p/0+d3Hj+W+/8PxgRX2yx//eO3+u5687HPx9p/ye3Nf7bLzz6+MsferW/tfF/u106la3Zyvy31QPczWMHAAAAAAAA/aYUEUciKVWelUulSmX5/R3H41Cp3mi2Tl9pzF2bjPZnZYdisNS503206/0Qo9n7YTv1sVX18Yg4FhHfDhxs1ysTjfrkXnceAAAAAAAAAAAAAAAAAAAA+sThHp//T/2ez5+YB/qZr/yG4to0/vP4piegL3n+h+IS/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8AAAAAAAAAAAAAAAAAAAAAAAAAAADk6tLFi+mytPj01kRan7wxPzfduHFmstacrszMTVQmGrPXK1ONxlS9VplozGz2++qNxvXRsZi7OdKqNVsjzfmFyzONuWuty1dnqlO1y7XB/6RXAAAAAAAAAAAAAAAAAAAA8GJpzi9MV+v12qxCz8L52PrO5Yjoh2PuLiSbjfL57GTYURPlve+gwspCEhG7/j17PDEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJd/AwAA//8sgDBd") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) 1m0.674834782s ago: executing program 2 (id=908): pipe2(0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100840, 0x0, 0x0, 0x1, 0x3, 0x3, 0x204, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r0, 0x20, 0x0, 0x8000) 1m0.16130303s ago: executing program 2 (id=925): sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 1m0.14215488s ago: executing program 34 (id=925): sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 42.455257519s ago: executing program 7 (id=1475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 42.417698369s ago: executing program 7 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008"], 0x30}}], 0x1, 0xc080) 42.382840149s ago: executing program 7 (id=1477): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x0) 42.359280299s ago: executing program 7 (id=1478): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) 42.295268738s ago: executing program 7 (id=1479): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000070000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 42.124511048s ago: executing program 7 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 42.122205078s ago: executing program 35 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 15.657966772s ago: executing program 6 (id=2410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = getpid() setreuid(0xee00, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58) 15.512374442s ago: executing program 6 (id=2416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) 15.415154001s ago: executing program 6 (id=2419): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15.03131073s ago: executing program 6 (id=2428): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214440, &(0x7f0000000540)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@errors_continue}, {@init_itable}, {@noload}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 14.871070649s ago: executing program 6 (id=2429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8001}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c00000013000100"/20, @ANYRES32=r4, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) 14.534995958s ago: executing program 6 (id=2446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2040, 0x0) 14.530934808s ago: executing program 36 (id=2446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2040, 0x0) 12.302586239s ago: executing program 3 (id=2515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) 12.278876919s ago: executing program 3 (id=2517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) 12.219655198s ago: executing program 3 (id=2518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 12.189610859s ago: executing program 3 (id=2519): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file1'}, 0xb) 11.905653808s ago: executing program 3 (id=2530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='mm_page_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0x100000001}) 11.622288627s ago: executing program 3 (id=2537): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 11.621826486s ago: executing program 37 (id=2537): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 11.476341976s ago: executing program 0 (id=2547): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x746}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.383078085s ago: executing program 0 (id=2550): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x285d, &(0x7f0000000480)={0x0, 0xb418, 0x0, 0x2, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x4440, 0x23456}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x13d8, 0x6, 0x0, 0x0, 0x0) 11.319310375s ago: executing program 0 (id=2554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000003, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 11.276527255s ago: executing program 0 (id=2556): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r3}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 11.199826705s ago: executing program 0 (id=2558): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214440, &(0x7f0000000540)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@errors_continue}, {@init_itable}, {@noload}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x102) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae65ddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff402000000000000006ee6afaaf755a3f6a00400", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x8000000000]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 10.926237893s ago: executing program 0 (id=2565): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0xfffffffffffffdb9, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400000, 0x100000000000000) 5.871254043s ago: executing program 9 (id=2742): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.849285393s ago: executing program 9 (id=2745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendfile(r2, r1, 0x0, 0x80) 5.743327993s ago: executing program 9 (id=2747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.742797823s ago: executing program 9 (id=2749): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x297881, 0x0) 5.732959273s ago: executing program 9 (id=2750): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001f00), &(0x7f0000002080), 0x8, 0x800, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.494024952s ago: executing program 9 (id=2760): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000020a0000060c00024000000000000000030900010073897231000040ff010000400000000000000003"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x400801c) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.479534482s ago: executing program 38 (id=2760): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000020a0000060c00024000000000000000030900010073897231000040ff010000400000000000000003"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x400801c) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 878.518053ms ago: executing program 8 (id=2854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) 837.215193ms ago: executing program 8 (id=2856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1402eadc}, 0x8041, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000875a0000040000000100000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27) 797.251973ms ago: executing program 5 (id=2857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) 774.979443ms ago: executing program 8 (id=2859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) 762.653193ms ago: executing program 5 (id=2860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000620"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x84, &(0x7f0000000100)=""/132, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 714.430933ms ago: executing program 5 (id=2862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 709.228813ms ago: executing program 8 (id=2863): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000140)='./file0\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 611.305042ms ago: executing program 8 (id=2865): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback, 0x826f}}}, 0x32) sendmmsg(r0, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040804) 611.133782ms ago: executing program 5 (id=2866): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x295, &(0x7f00000004c0)={0x0, 0x8000f33b, 0x10100, 0x2, 0x15f}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 610.843052ms ago: executing program 5 (id=2868): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88fa"], 0xdd12}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000300000000000004000000080002000500000006000b00"], 0x24}}, 0x0) 572.329952ms ago: executing program 5 (id=2871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 571.944322ms ago: executing program 8 (id=2881): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) tkill(r1, 0x7) 549.351772ms ago: executing program 1 (id=2872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) shutdown(r2, 0x0) 523.736532ms ago: executing program 1 (id=2875): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 358.135391ms ago: executing program 4 (id=2882): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000e80)=0x3f, 0x8) 283.434431ms ago: executing program 1 (id=2883): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000150a01020000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 235.329891ms ago: executing program 4 (id=2884): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4004550d, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) 235.136721ms ago: executing program 1 (id=2885): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r2, r2, 0x0, 0x80000000) 116.04437ms ago: executing program 1 (id=2886): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x10, &(0x7f00000014c0), 0x1, 0x79d, &(0x7f0000000800)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x66842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 95.00078ms ago: executing program 4 (id=2887): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0xffffff23, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff2}, {0x3, 0xfff2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 69.753551ms ago: executing program 4 (id=2888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 7.32482ms ago: executing program 4 (id=2889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 1.67269ms ago: executing program 1 (id=2890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5c00ffff0000", 0x6}]) 0s ago: executing program 4 (id=2891): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") unlink(&(0x7f0000000000)='./file1\x00') kernel console output (not intermixed with test programs): 69.849105][ T7037] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1469'. [ 69.869118][ T7034] loop0: detected capacity change from 0 to 2048 [ 69.907421][ T7034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.924471][ T7034] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.1468: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 69.951255][ T7034] EXT4-fs (loop0): Remounting filesystem read-only [ 69.973089][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.006785][ T7051] tipc: Started in network mode [ 70.011698][ T7051] tipc: Node identity ac14140f, cluster identity 4711 [ 70.013773][ T7053] loop0: detected capacity change from 0 to 1024 [ 70.024776][ T7051] tipc: New replicast peer: 10.1.1.2 [ 70.030292][ T7051] tipc: Enabled bearer , priority 10 [ 70.038501][ T7053] EXT4-fs: Ignoring removed nobh option [ 70.044088][ T7053] EXT4-fs: Ignoring removed orlov option [ 70.067915][ T7056] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.081676][ T7053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.187680][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.303097][ T7072] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 70.347212][ T3319] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.428827][ T3319] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.492318][ T3319] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.548691][ T7105] loop3: detected capacity change from 0 to 512 [ 70.559716][ T3319] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.571316][ T7105] EXT4-fs: Mount option(s) incompatible with ext3 [ 70.588919][ T7111] syz.0.1500[7111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.589049][ T7111] syz.0.1500[7111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.604462][ T7105] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1498'. [ 70.630148][ T7111] syz.0.1500[7111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.634856][ T7113] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 70.660499][ T7113] SELinux: failed to load policy [ 70.684807][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1502'. [ 70.693843][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1502'. [ 70.722759][ T3319] bridge_slave_1: left allmulticast mode [ 70.728456][ T3319] bridge_slave_1: left promiscuous mode [ 70.734091][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.742291][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1502'. [ 70.753046][ T3319] bridge_slave_0: left allmulticast mode [ 70.758767][ T3319] bridge_slave_0: left promiscuous mode [ 70.764392][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.777452][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1503'. [ 70.904696][ T3319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.957499][ T3319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.975420][ T3319] bond0 (unregistering): Released all slaves [ 71.084699][ T3319] tipc: Disabling bearer [ 71.089970][ T3319] tipc: Left network mode [ 71.105131][ T24] IPVS: starting estimator thread 0... [ 71.110935][ T7142] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 71.195739][ T7149] IPVS: using max 2880 ests per chain, 144000 per kthread [ 71.263325][ T3319] hsr_slave_0: left promiscuous mode [ 71.293492][ T3319] hsr_slave_1: left promiscuous mode [ 71.309018][ T3319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.316469][ T3319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.364308][ T3319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.371784][ T3319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.431896][ T3319] veth1_macvtap: left promiscuous mode [ 71.437518][ T3319] veth1_vlan: left promiscuous mode [ 71.442824][ T3319] veth0_vlan: left promiscuous mode [ 71.657420][ T3319] team0 (unregistering): Port device team_slave_1 removed [ 71.670174][ T3319] team0 (unregistering): Port device team_slave_0 removed [ 71.712887][ T7083] chnl_net:caif_netlink_parms(): no params data found [ 71.795943][ T7202] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 71.802487][ T7202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.809989][ T7202] vhci_hcd vhci_hcd.0: Device attached [ 71.823218][ T7209] syz.6.1538[7209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.823276][ T7209] syz.6.1538[7209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.841540][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.859964][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.860250][ T7209] syz.6.1538[7209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.868465][ T7083] bridge_slave_0: entered allmulticast mode [ 71.874616][ T7206] vhci_hcd: connection closed [ 71.880392][ T7083] bridge_slave_0: entered promiscuous mode [ 71.899038][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.904841][ T293] vhci_hcd: stop threads [ 71.906138][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.910326][ T293] vhci_hcd: release socket [ 71.919852][ T7083] bridge_slave_1: entered allmulticast mode [ 71.921749][ T293] vhci_hcd: disconnect device [ 71.928374][ T7083] bridge_slave_1: entered promiscuous mode [ 71.961325][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.972616][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.018527][ T7083] team0: Port device team_slave_0 added [ 72.029917][ T7083] team0: Port device team_slave_1 added [ 72.052922][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.059920][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.085936][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.099670][ T7227] loop0: detected capacity change from 0 to 512 [ 72.117012][ T7227] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.123481][ T7227] EXT4-fs: test_dummy_encryption option not supported [ 72.142384][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.149496][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.175526][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.211930][ T7083] hsr_slave_0: entered promiscuous mode [ 72.218141][ T7083] hsr_slave_1: entered promiscuous mode [ 72.265123][ T7240] loop0: detected capacity change from 0 to 512 [ 72.277429][ T7240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.295088][ T7083] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 72.304978][ T7083] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 72.314400][ T7083] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 72.346821][ T7083] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 72.362873][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.383673][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.390755][ T7083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.398043][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.405101][ T7083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.406624][ T7253] loop3: detected capacity change from 0 to 2048 [ 72.430489][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.456069][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.470437][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.480512][ T7253] EXT4-fs (loop3): failed to initialize system zone (-117) [ 72.491508][ T7253] EXT4-fs (loop3): mount failed [ 72.504913][ T7083] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.526046][ T7255] wireguard0: entered promiscuous mode [ 72.531534][ T7255] wireguard0: entered allmulticast mode [ 72.564240][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.571388][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.595910][ T7083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.606288][ T7083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.626472][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.633544][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.705872][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.782577][ T7276] loop3: detected capacity change from 0 to 8192 [ 72.866160][ T7302] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 72.905399][ T7083] veth0_vlan: entered promiscuous mode [ 72.913907][ T7083] veth1_vlan: entered promiscuous mode [ 72.939061][ T7311] __nla_validate_parse: 6 callbacks suppressed [ 72.939074][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1575'. [ 72.942801][ T7083] veth0_macvtap: entered promiscuous mode [ 72.945282][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1575'. [ 72.960680][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1575'. [ 72.976017][ T7083] veth1_macvtap: entered promiscuous mode [ 72.992085][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.002654][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.012493][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.022979][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.032776][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.043237][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.053067][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.063499][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.073314][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.083746][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.095163][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.103193][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.113688][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.123601][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.134026][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.143890][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.154357][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.164295][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.174742][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.184554][ T7083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.194991][ T7083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.206732][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.215268][ T7083] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.223960][ T7083] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.232833][ T7083] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.241534][ T7083] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.302789][ T7323] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 73.320748][ T7323] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 73.387195][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 73.387243][ T29] audit: type=1400 audit(1734677943.163:2137): avc: denied { name_bind } for pid=7332 comm="syz.5.1584" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.425605][ T29] audit: type=1400 audit(1734677943.193:2138): avc: denied { read } for pid=7332 comm="syz.5.1584" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.447300][ T29] audit: type=1400 audit(1734677943.193:2139): avc: denied { create } for pid=7312 comm="syz.3.1576" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.468182][ T29] audit: type=1400 audit(1734677943.193:2140): avc: denied { read } for pid=7312 comm="syz.3.1576" name="file0" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.490763][ T29] audit: type=1400 audit(1734677943.193:2141): avc: denied { open } for pid=7312 comm="syz.3.1576" path="/367/file0" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.514756][ T29] audit: type=1400 audit(1734677943.203:2142): avc: denied { ioctl } for pid=7312 comm="syz.3.1576" path="/367/file0" dev="tmpfs" ino=1920 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.571626][ T29] audit: type=1400 audit(1734677943.343:2143): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.599374][ T29] audit: type=1400 audit(1734677943.373:2144): avc: denied { tracepoint } for pid=7343 comm="syz.3.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.699222][ T29] audit: type=1326 audit(1734677943.473:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.5.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 73.761510][ T29] audit: type=1326 audit(1734677943.503:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 73.789998][ T7362] loop5: detected capacity change from 0 to 512 [ 73.817784][ T7362] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1597: corrupted in-inode xattr: invalid ea_ino [ 73.841274][ T7362] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1597: couldn't read orphan inode 15 (err -117) [ 73.854481][ T7367] pim6reg1: entered promiscuous mode [ 73.859798][ T7367] pim6reg1: entered allmulticast mode [ 73.879381][ T7362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.921588][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.987601][ T7380] vhci_hcd: invalid port number 255 [ 74.149175][ T7407] rdma_op ffff888102e62980 conn xmit_rdma 0000000000000000 [ 74.243377][ T7420] loop5: detected capacity change from 0 to 128 [ 74.274272][ T7420] FAT-fs (loop5): Invalid FSINFO signature: 0x41800000, 0x61417272 (sector = 1) [ 74.294132][ T7420] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 74.365545][ T293] FAT-fs (loop5): Invalid FSINFO signature: 0x41800000, 0x61417272 (sector = 1) [ 74.374536][ T7440] loop8: detected capacity change from 0 to 1024 [ 74.404898][ T7440] EXT4-fs: Ignoring removed nobh option [ 74.437617][ T7440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.454738][ T7448] vlan2: entered allmulticast mode [ 74.459938][ T7448] bridge_slave_0: entered allmulticast mode [ 74.489120][ T7448] bridge_slave_0: left allmulticast mode [ 74.500497][ T7454] loop3: detected capacity change from 0 to 512 [ 74.509393][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.557281][ T7454] EXT4-fs: inline encryption not supported [ 74.597606][ T7454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.635310][ T7454] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.660427][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.673845][ T7472] syz.0.1649[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.673947][ T7472] syz.0.1649[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.685583][ T7472] syz.0.1649[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.713767][ T7474] bond1: entered allmulticast mode [ 74.734605][ T7474] bond1 (unregistering): Released all slaves [ 74.746312][ T7472] netlink: 'syz.0.1649': attribute type 21 has an invalid length. [ 74.759587][ T7472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1649'. [ 75.103173][ T7512] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 75.143008][ T7516] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 75.184086][ T7522] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 75.219950][ T7526] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 75.231754][ T7526] SELinux: failed to load policy [ 75.291968][ T7534] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1675'. [ 75.371426][ T7552] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1684'. [ 75.475450][ T7563] 9pnet: p9_errstr2errno: server reported unknown error @b骩 [ 75.749502][ T7584] ALSA: seq fatal error: cannot create timer (-19) [ 75.910799][ T7604] wireguard0: entered promiscuous mode [ 75.916364][ T7604] wireguard0: entered allmulticast mode [ 76.243698][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.258640][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.349702][ T7639] netlink: 133492 bytes leftover after parsing attributes in process `syz.8.1719'. [ 76.398569][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.407645][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.606492][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 76.614191][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 76.623629][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.631391][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.639135][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.646869][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.654562][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.662312][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.670029][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.677698][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.685338][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.693053][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.700803][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.708455][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.716206][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.723847][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 76.776713][ T8] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 76.852991][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.865426][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.476124][ T7680] loop6: detected capacity change from 0 to 128 [ 77.492917][ T7680] FAT-fs (loop6): Invalid FSINFO signature: 0x41800000, 0x61417272 (sector = 1) [ 77.514811][ T7680] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 77.565725][ T3319] FAT-fs (loop6): Invalid FSINFO signature: 0x41800000, 0x61417272 (sector = 1) [ 77.654850][ T7696] bond1: entered allmulticast mode [ 77.662279][ T7696] bond1 (unregistering): Released all slaves [ 77.874047][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810a6ecc00: rx timeout, send abort [ 77.882301][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881044b8400: rx timeout, send abort [ 77.890537][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a6ecc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 77.904835][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881044b8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.085903][ T7724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1756'. [ 78.110320][ T7722] serio: Serial port pts0 [ 78.382072][ T7736] bond1: entered allmulticast mode [ 78.389864][ T7736] bond1 (unregistering): Released all slaves [ 78.445342][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 78.445354][ T29] audit: type=1400 audit(1734677948.223:2481): avc: denied { create } for pid=7740 comm="syz.3.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.504782][ T29] audit: type=1400 audit(1734677948.253:2482): avc: denied { setopt } for pid=7740 comm="syz.3.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.524767][ T29] audit: type=1400 audit(1734677948.253:2483): avc: denied { bind } for pid=7740 comm="syz.3.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.579636][ T29] audit: type=1400 audit(1734677948.333:2484): avc: denied { create } for pid=7744 comm="syz.3.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.599254][ T29] audit: type=1400 audit(1734677948.333:2485): avc: denied { create } for pid=7744 comm="syz.3.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.618674][ T29] audit: type=1400 audit(1734677948.343:2486): avc: denied { ioctl } for pid=7744 comm="syz.3.1766" path="socket:[19134]" dev="sockfs" ino=19134 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.650997][ T7749] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 78.662657][ T7752] loop3: detected capacity change from 0 to 128 [ 78.674390][ T29] audit: type=1400 audit(1734677948.453:2487): avc: denied { mounton } for pid=7751 comm="syz.3.1771" path="/398/file0" dev="tmpfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.676447][ T7753] loop6: detected capacity change from 0 to 512 [ 78.716034][ T7752] FAT-fs (loop3): Invalid FSINFO signature: 0x41800000, 0x61417272 (sector = 1) [ 78.719545][ T7753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.755183][ T29] audit: type=1400 audit(1734677948.513:2488): avc: denied { mount } for pid=7750 comm="syz.6.1780" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.776957][ T29] audit: type=1400 audit(1734677948.523:2489): avc: denied { write } for pid=7750 comm="syz.6.1780" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.798693][ T29] audit: type=1400 audit(1734677948.523:2490): avc: denied { add_name } for pid=7750 comm="syz.6.1780" name="blkio.bfq.empty_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.825069][ T7752] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 78.848641][ T28] FAT-fs (loop3): Invalid FSINFO signature: 0x41800000, 0x61417272 (sector = 1) [ 78.866118][ T5686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.897843][ T7766] loop3: detected capacity change from 0 to 1024 [ 78.908415][ T7766] EXT4-fs: Ignoring removed nobh option [ 78.933568][ T7768] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 78.937985][ T7773] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1778'. [ 78.969340][ T7768] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 78.994748][ T7766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.068842][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.077512][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.086869][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.144685][ T7796] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1789'. [ 79.234626][ T7804] loop3: detected capacity change from 0 to 1024 [ 79.247577][ T7804] EXT4-fs: Ignoring removed nobh option [ 79.253165][ T7804] EXT4-fs: Ignoring removed orlov option [ 79.278090][ T7804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.345298][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1796'. [ 79.365846][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.429623][ T7821] loop5: detected capacity change from 0 to 1024 [ 79.437589][ T7821] EXT4-fs: Ignoring removed nobh option [ 79.466021][ T7823] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 79.474883][ T7821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.475415][ T7823] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 79.541499][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.646166][ T7839] syzkaller0: entered promiscuous mode [ 79.667617][ T7844] syz.3.1809: attempt to access beyond end of device [ 79.667617][ T7844] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.853525][ T7861] loop6: detected capacity change from 0 to 1024 [ 79.885764][ T7865] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.902986][ T7861] EXT4-fs: Ignoring removed nobh option [ 79.934371][ T7861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.092750][ T5686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.170861][ T7892] loop6: detected capacity change from 0 to 2048 [ 80.244824][ T7903] batadv_slave_1: entered promiscuous mode [ 80.249094][ T7892] EXT4-fs (loop6): failed to initialize system zone (-117) [ 80.257928][ T7892] EXT4-fs (loop6): mount failed [ 80.320297][ T7905] loop3: detected capacity change from 0 to 512 [ 80.340105][ T7905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.346174][ T7902] batadv_slave_1: left promiscuous mode [ 80.401015][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.412027][ T7920] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1842'. [ 80.451886][ T7923] sd 0:0:1:0: device reset [ 80.459248][ T7927] Cannot find del_set index 0 as target [ 80.481755][ T7930] loop0: detected capacity change from 0 to 1024 [ 80.515217][ T7930] EXT4-fs: Ignoring removed nobh option [ 80.549969][ T7930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.568019][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.575486][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.582937][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.623885][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.631350][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.638912][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.646327][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.653908][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.661390][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.668996][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.676569][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.684026][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.691452][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.698857][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.706284][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.713719][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.721197][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.728774][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.736277][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.743678][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.751162][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.758604][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.766007][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.773438][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.780958][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.788364][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.795820][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.803218][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.810642][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.818055][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.825487][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.832924][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.840350][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.847794][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.855305][ T3374] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 80.863675][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.863794][ T3374] hid-generic 0000:0003:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 80.972797][ T7961] pim6reg: entered allmulticast mode [ 80.994311][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1867'. [ 81.249061][ T8005] pimreg: entered allmulticast mode [ 81.264330][ T8005] pimreg: left allmulticast mode [ 81.290065][ T8007] sg_write: data in/out 14238/64 bytes for SCSI command 0xd0-- guessing data in; [ 81.290065][ T8007] program syz.8.1880 not setting count and/or reply_len properly [ 81.454023][ T8024] atomic_op ffff888132ca6128 conn xmit_atomic 0000000000000000 [ 81.501272][ T8027] netlink: 'syz.6.1891': attribute type 3 has an invalid length. [ 81.590138][ T8041] loop8: detected capacity change from 0 to 2048 [ 81.614640][ T8047] loop6: detected capacity change from 0 to 512 [ 81.625139][ T8047] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.651529][ T8041] EXT4-fs (loop8): failed to initialize system zone (-117) [ 81.660156][ T8047] EXT4-fs (loop6): 1 truncate cleaned up [ 81.660428][ T8041] EXT4-fs (loop8): mount failed [ 81.681455][ T8047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.730561][ T8047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.748214][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1903'. [ 82.009587][ T8075] loop5: detected capacity change from 0 to 8192 [ 82.219565][ T8110] loop0: detected capacity change from 0 to 2048 [ 82.245602][ T8110] EXT4-fs (loop0): failed to initialize system zone (-117) [ 82.249403][ T8115] loop5: detected capacity change from 0 to 512 [ 82.252882][ T8110] EXT4-fs (loop0): mount failed [ 82.264647][ T8115] EXT4-fs: inline encryption not supported [ 82.283601][ T8115] EXT4-fs (loop5): blocks per group (64) and clusters per group (20800) inconsistent [ 82.503429][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 82.509547][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 82.529670][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1943'. [ 82.760869][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1952'. [ 82.769780][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1952'. [ 82.966688][ T8186] Falling back ldisc for ttyS3. [ 83.086395][ T8203] batadv1: entered promiscuous mode [ 83.091635][ T8203] batadv1: entered allmulticast mode [ 83.161656][ T8205] syzkaller0: entered promiscuous mode [ 83.511437][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 83.511452][ T29] audit: type=1400 audit(1734677953.283:2910): avc: denied { bind } for pid=8252 comm="syz.8.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.564360][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 83.572066][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 83.575061][ T29] audit: type=1326 audit(1734677953.343:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.592360][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.610773][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.618430][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.626150][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.633794][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.635577][ T29] audit: type=1326 audit(1734677953.383:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.641437][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.664847][ T29] audit: type=1326 audit(1734677953.383:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.672445][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.672469][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.672490][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.672512][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.695876][ T29] audit: type=1326 audit(1734677953.383:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.695900][ T29] audit: type=1326 audit(1734677953.383:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.695929][ T29] audit: type=1326 audit(1734677953.383:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.695952][ T29] audit: type=1326 audit(1734677953.383:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.703612][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.711213][ T29] audit: type=1326 audit(1734677953.383:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.711312][ T29] audit: type=1326 audit(1734677953.383:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4595af5d29 code=0x7ffc0000 [ 83.875794][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.883469][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.891168][ T9] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 83.899628][ T9] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 84.038379][ T8277] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.066099][ T8282] syz.5.2004[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.066155][ T8282] syz.5.2004[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.080225][ T8282] syz.5.2004[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.093629][ T8282] __nla_validate_parse: 2 callbacks suppressed [ 84.093644][ T8282] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2004'. [ 84.098836][ T8283] loop0: detected capacity change from 0 to 8192 [ 84.301449][ T8300] loop3: detected capacity change from 0 to 2048 [ 84.318022][ T8300] EXT4-fs (loop3): failed to initialize system zone (-117) [ 84.320028][ T8303] bond1: entered promiscuous mode [ 84.326409][ T8300] EXT4-fs (loop3): mount failed [ 84.330320][ T8303] bond1: entered allmulticast mode [ 84.341243][ T8303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.358816][ T8303] bond1 (unregistering): Released all slaves [ 84.409073][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 84.417634][ T8313] loop5: detected capacity change from 0 to 512 [ 84.434881][ T8313] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 84.459122][ T8313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 84.468493][ T8313] EXT4-fs (loop5): orphan cleanup on readonly fs [ 84.475095][ T8313] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2015: invalid indirect mapped block 2185560079 (level 1) [ 84.490812][ T8313] EXT4-fs (loop5): Remounting filesystem read-only [ 84.497540][ T8313] EXT4-fs (loop5): 1 truncate cleaned up [ 84.503659][ T8313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 84.522869][ T8313] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 84.530083][ T8313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 84.646526][ T8338] loop8: detected capacity change from 0 to 128 [ 84.749149][ T8350] loop5: detected capacity change from 0 to 128 [ 84.756780][ T8350] EXT4-fs: Ignoring removed nobh option [ 84.776048][ T8350] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.789161][ T8350] ext4 filesystem being mounted at /372/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.819014][ T3634] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.886102][ T8362] loop6: detected capacity change from 0 to 512 [ 84.906745][ T8362] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 84.935658][ T8362] EXT4-fs (loop6): 1 truncate cleaned up [ 84.953027][ T8362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.215287][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.222454][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.352944][ T8378] bridge_slave_0: left allmulticast mode [ 85.358778][ T8378] bridge_slave_0: left promiscuous mode [ 85.364661][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.498954][ T8378] bridge_slave_1: left allmulticast mode [ 85.504739][ T8378] bridge_slave_1: left promiscuous mode [ 85.510590][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.533768][ T5686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.555477][ T8378] bond0: (slave bond_slave_0): Releasing backup interface [ 85.594275][ T8378] bond0: (slave bond_slave_1): Releasing backup interface [ 85.624263][ T8378] team0: Port device team_slave_0 removed [ 85.634077][ T8378] team0: Port device team_slave_1 removed [ 85.683235][ T8378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.708800][ T8378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.732744][ T8378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.757727][ T8378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.918355][ T8378] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.927387][ T8378] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.936291][ T8378] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.945230][ T8378] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.066658][ T8376] Falling back ldisc for ttyS3. [ 86.188350][ T8439] loop5: detected capacity change from 0 to 1764 [ 86.241745][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2063'. [ 86.260566][ T8443] loop0: detected capacity change from 0 to 8192 [ 86.269109][ T8441] loop3: detected capacity change from 0 to 8192 [ 86.288284][ T8443] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.446326][ T8443] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 86.455132][ T8443] FAT-fs (loop0): Filesystem has been set read-only [ 86.485614][ T8443] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 86.515170][ T8443] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 86.528387][ T8452] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 86.610608][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2075'. [ 86.621007][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2075'. [ 86.636049][ T3300] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 86.751649][ T8490] loop6: detected capacity change from 0 to 256 [ 86.790444][ T8490] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.803374][ T8497] syz.5.2086[8497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.803433][ T8497] syz.5.2086[8497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.807807][ T8496] loop0: detected capacity change from 0 to 512 [ 86.815314][ T8497] syz.5.2086[8497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.844584][ T8493] IPv6: sit1: Disabled Multicast RS [ 86.869103][ T8496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.905282][ T8496] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.941169][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.422685][ T8513] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 87.451865][ T8513] bond1: entered promiscuous mode [ 87.469282][ T8507] loop8: detected capacity change from 0 to 8192 [ 87.489036][ T8513] team0: Port device team_slave_1 removed [ 87.498488][ T8513] bond1: (slave team_slave_1): making interface the new active one [ 87.506440][ T8513] team_slave_1: entered promiscuous mode [ 87.513965][ T8513] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 87.529624][ T8519] loop6: detected capacity change from 0 to 1024 [ 87.536351][ T8519] EXT4-fs: Ignoring removed nobh option [ 87.541912][ T8519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.596698][ T8519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.602379][ T8525] bond1: entered promiscuous mode [ 87.610323][ T8525] bond1: entered allmulticast mode [ 87.618943][ T8525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.631589][ T8525] bond1 (unregistering): Released all slaves [ 87.631648][ T8519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.655615][ T8530] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.663911][ T8519] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 87.682957][ T8519] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 87.710646][ T5686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.805307][ T8548] sd 0:0:1:0: device reset [ 87.877565][ T8558] 9p: Unknown access argument v: -22 [ 87.941043][ T8567] loop5: detected capacity change from 0 to 512 [ 87.958058][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2117'. [ 87.980864][ T8567] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.990108][ T8567] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 88.000538][ T8567] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 88.016187][ T8567] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 88.016224][ T8567] System zones: 0-2, 18-18, 34-34 [ 88.016514][ T8567] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.030794][ T8567] EXT4-fs (loop5): 1 truncate cleaned up [ 88.031142][ T8567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.043891][ T8579] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.087654][ T8567] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 88.123371][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.289645][ T8596] loop6: detected capacity change from 0 to 512 [ 88.344393][ T8596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.357036][ T8596] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.412473][ T5686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.473746][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 88.541269][ T8620] loop6: detected capacity change from 0 to 128 [ 88.563937][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 88.563950][ T29] audit: type=1326 audit(1734677958.333:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.629690][ T29] audit: type=1326 audit(1734677958.373:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.653947][ T29] audit: type=1326 audit(1734677958.373:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.677624][ T29] audit: type=1326 audit(1734677958.373:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.701062][ T29] audit: type=1326 audit(1734677958.373:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.724528][ T29] audit: type=1326 audit(1734677958.373:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.748143][ T29] audit: type=1326 audit(1734677958.373:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.771629][ T29] audit: type=1326 audit(1734677958.373:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.795128][ T29] audit: type=1326 audit(1734677958.373:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 88.818697][ T29] audit: type=1326 audit(1734677958.373:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.0.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c15c5d29 code=0x7ffc0000 [ 89.007761][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'. [ 89.041112][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2154'. [ 89.091255][ T8655] bond0: option ad_select: unable to set because the bond device is up [ 89.168745][ T8666] hub 9-0:1.0: USB hub found [ 89.173590][ T8666] hub 9-0:1.0: 8 ports detected [ 89.236015][ T8663] loop5: detected capacity change from 0 to 2048 [ 89.248718][ T8663] EXT4-fs (loop5): failed to initialize system zone (-117) [ 89.256278][ T8663] EXT4-fs (loop5): mount failed [ 89.376143][ T8689] syzkaller0: entered allmulticast mode [ 89.383124][ T8689] syzkaller0 (unregistering): left allmulticast mode [ 89.566107][ T8697] loop0: detected capacity change from 0 to 512 [ 89.575230][ T8697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.587161][ T8697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.601709][ T8697] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.641289][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.828051][ T8732] syz.3.2189[8732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.828109][ T8732] syz.3.2189[8732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.841049][ T8732] syz.3.2189[8732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.853969][ T8732] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 89.900324][ T8736] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.918552][ T8738] netlink: 'syz.3.2192': attribute type 3 has an invalid length. [ 89.944951][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2193'. [ 89.975354][ T8742] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 90.125946][ T8756] vhci_hcd: invalid port number 15 [ 90.131261][ T8756] vhci_hcd: invalid port number 15 [ 90.565067][ T8806] loop0: detected capacity change from 0 to 256 [ 90.641017][ T8810] loop8: detected capacity change from 0 to 2048 [ 90.667333][ T8810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.687654][ T8810] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.710340][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.741116][ T8824] netlink: 'syz.5.2232': attribute type 1 has an invalid length. [ 90.748958][ T8824] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2232'. [ 90.764363][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2230'. [ 90.827940][ T8830] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 90.851836][ T8836] loop3: detected capacity change from 0 to 128 [ 90.984348][ T8853] SELinux: security_context_str_to_sid (=) failed with errno=-22 [ 91.086335][ T8867] 9pnet: p9_errstr2errno: server reported unknown error ll [ 91.103921][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2253'. [ 91.112945][ T8869] netlink: 'syz.5.2253': attribute type 7 has an invalid length. [ 91.120836][ T8869] netlink: 'syz.5.2253': attribute type 8 has an invalid length. [ 91.128775][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2253'. [ 92.941518][ T8896] loop3: detected capacity change from 0 to 128 [ 92.986948][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2267'. [ 92.998000][ T8896] syz.3.2265: attempt to access beyond end of device [ 92.998000][ T8896] loop3: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 93.010275][ T8902] IPVS: Error joining to the multicast group [ 93.011415][ T8896] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 93.037778][ T8894] loop8: detected capacity change from 0 to 2048 [ 93.070957][ T8894] EXT4-fs (loop8): failed to initialize system zone (-117) [ 93.080951][ T8894] EXT4-fs (loop8): mount failed [ 93.213056][ T8387] kernel write not supported for file bpf-prog (pid: 8387 comm: kworker/1:12) [ 93.326490][ T8948] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.572041][ T8979] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 93.572041][ T8979] program syz.5.2304 not setting count and/or reply_len properly [ 93.705181][ T8994] netlink: 'syz.8.2312': attribute type 39 has an invalid length. [ 93.753027][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 93.753042][ T29] audit: type=1326 audit(1734677963.523:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.788669][ T29] audit: type=1326 audit(1734677963.523:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.812270][ T29] audit: type=1326 audit(1734677963.563:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.835755][ T29] audit: type=1326 audit(1734677963.563:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.859145][ T29] audit: type=1326 audit(1734677963.593:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.882537][ T29] audit: type=1326 audit(1734677963.593:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.912980][ T29] audit: type=1326 audit(1734677963.593:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.936443][ T29] audit: type=1326 audit(1734677963.593:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.960064][ T29] audit: type=1326 audit(1734677963.593:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 93.983556][ T29] audit: type=1326 audit(1734677963.593:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7de9c5d29 code=0x7ffc0000 [ 94.057587][ T9014] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.142982][ T9022] SELinux: failed to load policy [ 94.182586][ T9024] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2326'. [ 94.477500][ T9033] loop5: detected capacity change from 0 to 2048 [ 94.507770][ T9033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.533412][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.591975][ T9040] loop3: detected capacity change from 0 to 256 [ 94.906936][ T9058] loop3: detected capacity change from 0 to 1024 [ 95.144090][ T9079] xt_hashlimit: size too large, truncated to 1048576 [ 95.157843][ T9081] tmpfs: Bad value for 'mpol' [ 95.362872][ T9089] loop6: detected capacity change from 0 to 512 [ 95.404058][ T9089] EXT4-fs mount: 2 callbacks suppressed [ 95.404073][ T9089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.436515][ T9089] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.503861][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.512851][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.556613][ T5686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.577566][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.615208][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.624207][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.636042][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.672542][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.681783][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.684128][ T9104] loop0: detected capacity change from 0 to 2048 [ 95.699335][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'. [ 95.753761][ T9111] rdma_op ffff88812a93bd80 conn xmit_rdma 0000000000000000 [ 95.856034][ T9117] loop3: detected capacity change from 0 to 128 [ 95.905512][ T9117] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.924708][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 95.932475][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 95.943127][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 95.950820][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 95.958528][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 95.966181][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 95.973825][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 95.981601][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 95.989276][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 95.997022][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 96.004661][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 96.005028][ T9117] ext4 filesystem being mounted at /515/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.012336][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 96.030371][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 96.038022][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 96.045722][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 96.053475][ T3374] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 96.062487][ T3374] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 96.136745][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.183264][ T9148] loop8: detected capacity change from 0 to 512 [ 96.222393][ T9148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.260849][ T9160] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.267341][ T9148] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.269663][ T9160] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.269692][ T9160] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.297335][ T9160] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.306817][ T9160] vxlan0: entered promiscuous mode [ 96.311943][ T9160] vxlan0: entered allmulticast mode [ 96.331859][ T9160] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.340888][ T9160] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.349836][ T9160] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.358795][ T9160] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.425176][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.649741][ T9199] netlink: 'syz.5.2397': attribute type 39 has an invalid length. [ 96.652949][ T9195] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2395'. [ 96.762296][ T9211] loop3: detected capacity change from 0 to 512 [ 96.780252][ T9211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.819231][ T9211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.860784][ T9227] loop0: detected capacity change from 0 to 2048 [ 96.872254][ T9211] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.901429][ T9227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.008524][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.074208][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.274654][ T9262] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 97.283655][ T9262] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 97.388073][ T9265] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.396926][ T9265] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.405735][ T9265] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.414443][ T9265] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.417742][ T9267] loop6: detected capacity change from 0 to 1024 [ 97.428597][ T9265] vxlan0: entered promiscuous mode [ 97.434609][ T9265] vxlan0: entered allmulticast mode [ 97.455032][ T9269] loop0: detected capacity change from 0 to 4096 [ 97.461582][ T9265] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.470552][ T9265] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.475159][ T9267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.479474][ T9265] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.500843][ T9265] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.516569][ T9269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.557694][ T9267] loop6: detected capacity change from 1024 to 64 [ 97.580120][ T5686] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /296/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 97.651269][ T8773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.662204][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.672020][ T9270] kmmpd-loop6: attempt to access beyond end of device [ 97.672020][ T9270] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 97.685527][ T9270] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 97.876560][ T9303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.043284][ T9324] SELinux: policydb version 0 does not match my version range 15-33 [ 98.051571][ T9324] SELinux: failed to load policy [ 98.086349][ T9332] loop8: detected capacity change from 0 to 128 [ 98.178503][ T9332] syz.8.2452: attempt to access beyond end of device [ 98.178503][ T9332] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 98.254863][ T9317] chnl_net:caif_netlink_parms(): no params data found [ 98.287913][ T9353] netlink: 'syz.8.2461': attribute type 1 has an invalid length. [ 98.320339][ T9357] syz.0.2465[9357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.320429][ T9357] syz.0.2465[9357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.333693][ T9357] syz.0.2465[9357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.362526][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.380920][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.388525][ T9317] bridge_slave_0: entered allmulticast mode [ 98.400492][ T9365] netlink: 'syz.0.2466': attribute type 3 has an invalid length. [ 98.405778][ T9317] bridge_slave_0: entered promiscuous mode [ 98.422200][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.429601][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.437055][ T9317] bridge_slave_1: entered allmulticast mode [ 98.443479][ T9317] bridge_slave_1: entered promiscuous mode [ 98.493142][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.504591][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.543726][ T9373] serio: Serial port ptm0 [ 98.550272][ T9317] team0: Port device team_slave_0 added [ 98.560951][ T9317] team0: Port device team_slave_1 added [ 98.584021][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.591023][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.616934][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.633508][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.640528][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.666565][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.706788][ T9317] hsr_slave_0: entered promiscuous mode [ 98.719037][ T9317] hsr_slave_1: entered promiscuous mode [ 98.732958][ T9317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.745052][ T9392] loop8: detected capacity change from 0 to 128 [ 98.753004][ T9317] Cannot create hsr debugfs directory [ 98.783020][ T9395] pim6reg: entered allmulticast mode [ 98.818567][ T9390] pim6reg: left allmulticast mode [ 98.842723][ T9392] syz.8.2480: attempt to access beyond end of device [ 98.842723][ T9392] loop8: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 98.856189][ T9392] Buffer I/O error on dev loop8, logical block 129, lost async page write [ 98.895361][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 98.895373][ T29] audit: type=1400 audit(1734677968.673:3448): avc: denied { create } for pid=9407 comm="syz.0.2485" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.923920][ T29] audit: type=1400 audit(1734677968.673:3449): avc: denied { read } for pid=9407 comm="syz.0.2485" name="file0" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.934029][ T9317] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 98.946378][ T29] audit: type=1400 audit(1734677968.673:3450): avc: denied { open } for pid=9407 comm="syz.0.2485" path="/570/file0" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.978268][ T9317] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 98.984994][ T29] audit: type=1400 audit(1734677968.753:3451): avc: denied { watch watch_reads } for pid=9407 comm="syz.0.2485" path="/570/file0" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.014639][ T9317] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 99.023275][ T9317] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 99.030014][ T29] audit: type=1400 audit(1734677968.793:3452): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.052952][ T29] audit: type=1400 audit(1734677968.823:3453): avc: denied { create } for pid=9410 comm="syz.0.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.095944][ T9413] rdma_op ffff888118342580 conn xmit_rdma 0000000000000000 [ 99.101409][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.115476][ T29] audit: type=1400 audit(1734677968.883:3454): avc: denied { read } for pid=9410 comm="syz.0.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 99.142993][ T29] audit: type=1400 audit(1734677968.903:3455): avc: denied { create } for pid=9414 comm="syz.8.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.163058][ T29] audit: type=1400 audit(1734677968.913:3456): avc: denied { lock } for pid=9414 comm="syz.8.2488" path="socket:[24275]" dev="sockfs" ino=24275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.189948][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.198981][ T3393] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.206078][ T3393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.207285][ T29] audit: type=1326 audit(1734677968.973:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.8.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d26875d29 code=0x7ffc0000 [ 99.238976][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.246038][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.294381][ T9422] syz.8.2491[9422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.294640][ T9422] syz.8.2491[9422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.307740][ T9422] syz.8.2491[9422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.367328][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.425603][ T9433] loop0: detected capacity change from 0 to 512 [ 99.453942][ T9433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.474301][ T9433] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.507852][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.534631][ T9317] veth0_vlan: entered promiscuous mode [ 99.542285][ T9317] veth1_vlan: entered promiscuous mode [ 99.556569][ T9317] veth0_macvtap: entered promiscuous mode [ 99.563474][ T9317] veth1_macvtap: entered promiscuous mode [ 99.573425][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.583925][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.593773][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.604262][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.614093][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.624518][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.634344][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.644818][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.654693][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.665252][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.679766][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.691941][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.702538][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.712508][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.723057][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.732935][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.743382][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.753324][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.763828][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.773746][ T9317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.784277][ T9317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.794799][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.806317][ T9317] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.815124][ T9317] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.823936][ T9317] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.832713][ T9317] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.925165][ T9469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9469 comm=syz.3.2502 [ 100.031283][ T9472] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 100.213658][ T9498] loop3: detected capacity change from 0 to 1024 [ 100.227938][ T9498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.242779][ T9498] EXT4-fs (loop3): shut down requested (0) [ 100.257719][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.294962][ T9506] loop3: detected capacity change from 0 to 512 [ 100.317249][ T9506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.329873][ T9506] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.395524][ T9506] loop3: detected capacity change from 512 to 64 [ 100.402927][ T9506] EXT4-fs error (device loop3): ext4_write_dquot:6918: comm syz.3.2519: Failed to commit dquot type 1 [ 100.452108][ T9506] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Out of memory [ 100.489056][ T9506] EXT4-fs error (device loop3): ext4_ext_truncate:4457: inode #18: comm syz.3.2519: mark_inode_dirty error [ 100.506319][ T9506] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Out of memory [ 100.518598][ T9506] EXT4-fs error (device loop3): ext4_truncate:4240: inode #18: comm syz.3.2519: mark_inode_dirty error [ 100.544357][ T9524] loop0: detected capacity change from 0 to 512 [ 100.551670][ T9524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.574876][ T9524] EXT4-fs (loop0): 1 truncate cleaned up [ 100.600648][ T9524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.616490][ T5754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.635174][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.680622][ T9537] loop0: detected capacity change from 0 to 512 [ 100.698012][ T9537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.710810][ T9537] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.761650][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.140926][ T9582] loop8: detected capacity change from 0 to 2048 [ 101.180420][ T9557] chnl_net:caif_netlink_parms(): no params data found [ 101.226699][ T9582] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.248724][ T9602] loop0: detected capacity change from 0 to 1024 [ 101.281910][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.289157][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.290529][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.296285][ T9557] bridge_slave_0: entered allmulticast mode [ 101.311554][ T9557] bridge_slave_0: entered promiscuous mode [ 101.318350][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.325470][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.332755][ T9557] bridge_slave_1: entered allmulticast mode [ 101.339325][ T9557] bridge_slave_1: entered promiscuous mode [ 101.354834][ T9602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.372057][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.382484][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.406120][ T9557] team0: Port device team_slave_0 added [ 101.412412][ T9557] team0: Port device team_slave_1 added [ 101.429315][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.436357][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.462274][ T9557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.475325][ T9602] loop0: detected capacity change from 1024 to 64 [ 101.476026][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.488697][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.514623][ T9557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.551138][ T3300] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /589/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 101.552105][ T9557] hsr_slave_0: entered promiscuous mode [ 101.571742][ T9618] vhci_hcd: default hub control req: 8007 v0efd i0002 l0 [ 101.585058][ T9557] hsr_slave_1: entered promiscuous mode [ 101.595311][ T9557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.604291][ T9557] Cannot create hsr debugfs directory [ 101.857068][ T9647] ebtables: ebtables: counters copy to user failed while replacing table [ 101.898358][ T9557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.920927][ T9557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.933172][ T9654] __nla_validate_parse: 11 callbacks suppressed [ 101.933227][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2580'. [ 101.935627][ T9557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.965235][ T9557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.028453][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.041375][ T9557] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.061729][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.068890][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.089139][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.096210][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.106617][ T9660] loop9: detected capacity change from 0 to 128 [ 102.129586][ T9660] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.140228][ T9557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.152022][ T9557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.161392][ T9660] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.216708][ T9666] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2585'. [ 102.237868][ T9317] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.268075][ T9557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.305042][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2586'. [ 102.371954][ T9686] loop5: detected capacity change from 0 to 2048 [ 102.403062][ T9693] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 102.423820][ T9557] veth0_vlan: entered promiscuous mode [ 102.454684][ T9557] veth1_vlan: entered promiscuous mode [ 102.492547][ T9700] netlink: 'syz.8.2594': attribute type 21 has an invalid length. [ 102.500995][ T9700] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2594'. [ 102.511900][ T9557] veth0_macvtap: entered promiscuous mode [ 102.519389][ T9557] veth1_macvtap: entered promiscuous mode [ 102.544767][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.555340][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.565231][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.575687][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.585566][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.596156][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.605982][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.616428][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.626275][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.636791][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.646604][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.648161][ T9702] loop9: detected capacity change from 0 to 512 [ 102.657018][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.657797][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.685988][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.696517][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.706363][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.716883][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.726746][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.737209][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.747032][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.757449][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.767337][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.769501][ T9702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 102.777832][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.777851][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.803456][ T9702] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.810502][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.823559][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.839577][ T9557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.848352][ T9557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.857147][ T9557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.865837][ T9557] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.889313][ T9317] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.308366][ T9754] loop5: detected capacity change from 0 to 512 [ 103.328025][ T9754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.349879][ T9754] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.378163][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.390978][ T9764] serio: Serial port ptm0 [ 103.425769][ T9766] loop5: detected capacity change from 0 to 2048 [ 103.456747][ T9773] loop9: detected capacity change from 0 to 128 [ 103.464187][ T9766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.478305][ T9773] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.546101][ T9773] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.594894][ T9785] netlink: 'syz.8.2629': attribute type 4 has an invalid length. [ 103.602798][ T9785] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.2629'. [ 103.650958][ T9317] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.674569][ T9766] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.689680][ T9766] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 103.702217][ T9766] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.702217][ T9766] [ 103.711872][ T9766] EXT4-fs (loop5): Total free blocks count 0 [ 103.717863][ T9766] EXT4-fs (loop5): Free/Dirty block details [ 103.723746][ T9766] EXT4-fs (loop5): free_blocks=2415919104 [ 103.729490][ T9766] EXT4-fs (loop5): dirty_blocks=8192 [ 103.734823][ T9766] EXT4-fs (loop5): Block reservation details [ 103.740842][ T9766] EXT4-fs (loop5): i_reserved_data_blocks=512 [ 103.758098][ T9781] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 103.770918][ T9501] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 8178: padding at end of block bitmap is not set [ 103.932558][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 103.932572][ T29] audit: type=1400 audit(1734677973.703:3702): avc: denied { connect } for pid=9809 comm="syz.9.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.030097][ T29] audit: type=1326 audit(1734677973.803:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.9.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd95b5d29 code=0x7ffc0000 [ 104.062321][ T29] audit: type=1326 audit(1734677973.803:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.9.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fefd95b5d29 code=0x7ffc0000 [ 104.085829][ T29] audit: type=1326 audit(1734677973.803:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.9.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd95b5d29 code=0x7ffc0000 [ 104.109502][ T29] audit: type=1326 audit(1734677973.833:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.9.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd95b5d29 code=0x7ffc0000 [ 104.118659][ T9827] loop8: detected capacity change from 0 to 1024 [ 104.136846][ T9828] loop9: detected capacity change from 0 to 128 [ 104.168557][ T29] audit: type=1326 audit(1734677973.943:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.4.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9698285d29 code=0x7ffc0000 [ 104.192011][ T29] audit: type=1326 audit(1734677973.943:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.4.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9698285d29 code=0x7ffc0000 [ 104.229645][ T9827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.231252][ T9828] syz.9.2646: attempt to access beyond end of device [ 104.231252][ T9828] loop9: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 104.243075][ T9827] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.271218][ T29] audit: type=1326 audit(1734677973.943:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.4.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f9698285d29 code=0x7ffc0000 [ 104.294731][ T29] audit: type=1326 audit(1734677973.943:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.4.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9698285d29 code=0x7ffc0000 [ 104.302354][ T9827] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 104.318122][ T29] audit: type=1326 audit(1734677973.973:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.4.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9698285d29 code=0x7ffc0000 [ 104.325310][ T9828] syz.9.2646: attempt to access beyond end of device [ 104.325310][ T9828] loop9: rw=0, sector=97, nr_sectors = 32 limit=128 [ 104.330650][ T9827] EXT4-fs (loop8): This should not happen!! Data will be lost [ 104.330650][ T9827] [ 104.354334][ T9828] syz.9.2646: attempt to access beyond end of device [ 104.354334][ T9828] loop9: rw=0, sector=145, nr_sectors = 96 limit=128 [ 104.367114][ T9827] EXT4-fs (loop8): Total free blocks count 0 [ 104.379677][ T9836] wireguard0: entered promiscuous mode [ 104.389962][ T9827] EXT4-fs (loop8): Free/Dirty block details [ 104.396056][ T9836] wireguard0: entered allmulticast mode [ 104.413357][ T9827] EXT4-fs (loop8): free_blocks=0 [ 104.418323][ T9827] EXT4-fs (loop8): dirty_blocks=0 [ 104.423469][ T9827] EXT4-fs (loop8): Block reservation details [ 104.429477][ T9827] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 104.440341][ T3319] kworker/u8:6: attempt to access beyond end of device [ 104.440341][ T3319] loop9: rw=1, sector=241, nr_sectors = 800 limit=128 [ 104.468509][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.491135][ T9843] loop8: detected capacity change from 0 to 512 [ 104.498038][ T9843] EXT4-fs: Ignoring removed orlov option [ 104.503764][ T9843] EXT4-fs: inline encryption not supported [ 104.511746][ T9843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01d, mo2=0002] [ 104.521980][ T9843] EXT4-fs (loop8): orphan cleanup on readonly fs [ 104.535028][ T9843] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2653: bg 0: block 248: padding at end of block bitmap is not set [ 104.551529][ T9843] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.2653: Failed to acquire dquot type 1 [ 104.563769][ T9843] EXT4-fs (loop8): 1 truncate cleaned up [ 104.570090][ T9843] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.594447][ T9843] syz.8.2653 (9843) used greatest stack depth: 9384 bytes left [ 104.646802][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.787531][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2667'. [ 104.797123][ T9874] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2666'. [ 105.090582][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2682'. [ 105.264888][ T9930] loop4: detected capacity change from 0 to 1024 [ 105.279293][ T9930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.294222][ T9930] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.4.2694: corrupted in-inode xattr: bad magic number in in-inode xattr [ 105.320391][ T9557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.340243][ T9936] sd 0:0:1:0: device reset [ 105.669347][ T9963] loop8: detected capacity change from 0 to 1764 [ 105.676741][ T9963] SELinux: security_context_str_to_sid (rt) failed with errno=-22 [ 105.728099][ T9968] loop8: detected capacity change from 0 to 512 [ 105.758806][ T9968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.771709][ T9968] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.823893][ T9968] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #19: comm syz.8.2709: corrupted inode contents [ 105.837746][ T9968] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #19: comm syz.8.2709: mark_inode_dirty error [ 105.849313][ T9968] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #19: comm syz.8.2709: corrupted inode contents [ 105.867450][ T9968] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3006: inode #19: comm syz.8.2709: mark_inode_dirty error [ 105.884922][ T9968] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3009: inode #19: comm syz.8.2709: mark inode dirty (error -117) [ 105.897747][ T9968] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -117) [ 105.923062][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.165024][ T9998] syz.5.2723[9998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.165145][ T9998] syz.5.2723[9998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.176738][ T9998] syz.5.2723[9998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.340541][T10020] loop8: detected capacity change from 0 to 2048 [ 106.395446][ T9606] kmmpd-loop0: attempt to access beyond end of device [ 106.395446][ T9606] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 106.409056][ T9606] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 106.430015][T10020] loop8: p1 < > p4 [ 106.432525][T10027] loop9: detected capacity change from 0 to 2048 [ 106.440247][ T9606] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block [ 106.441173][T10020] loop8: p4 size 8388608 extends beyond EOD, truncated [ 106.483057][T10027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.505317][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2738'. [ 106.515556][T10034] IPVS: Error joining to the multicast group [ 106.558879][ T2998] loop8: p1 < > p4 [ 106.563422][ T2998] loop8: p4 size 8388608 extends beyond EOD, truncated [ 106.571552][ T9317] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.598180][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 106.614830][ T5921] udevd[5921]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 106.639442][T10046] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2743'. [ 106.642090][T10048] loop5: detected capacity change from 0 to 512 [ 106.661588][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 106.665117][ T5921] udevd[5921]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 106.681113][T10048] EXT4-fs: Ignoring removed nobh option [ 106.718537][T10048] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 106.751786][T10048] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #13: comm syz.5.2744: casefold flag without casefold feature [ 106.769491][T10048] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2744: couldn't read orphan inode 13 (err -117) [ 106.787968][T10048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.812585][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.848016][T10067] bridge1: entered promiscuous mode [ 106.853256][T10067] bridge1: entered allmulticast mode [ 106.986701][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.999670][T10078] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 107.025059][T10081] netlink: 'syz.5.2761': attribute type 1 has an invalid length. [ 107.039787][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.069839][T10084] uprobe: syz.5.2763:10084 failed to unregister, leaking uprobe [ 107.123990][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.167742][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.220474][T10100] loop5: detected capacity change from 0 to 128 [ 107.252789][T10100] syz.5.2765: attempt to access beyond end of device [ 107.252789][T10100] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 107.327419][ T11] bridge_slave_1: left allmulticast mode [ 107.333094][ T11] bridge_slave_1: left promiscuous mode [ 107.338839][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.349641][ T11] bridge_slave_0: left allmulticast mode [ 107.355559][ T11] bridge_slave_0: left promiscuous mode [ 107.360664][ C1] hrtimer: interrupt took 26883 ns [ 107.361187][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.508306][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.518672][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.531208][ T11] bond0 (unregistering): Released all slaves [ 107.581587][T10124] loop5: detected capacity change from 0 to 512 [ 107.591349][T10086] chnl_net:caif_netlink_parms(): no params data found [ 107.599118][T10124] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.616970][T10124] EXT4-fs (loop5): 1 truncate cleaned up [ 107.626013][T10124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.653353][T10086] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.660459][T10086] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.667604][T10086] bridge_slave_0: entered allmulticast mode [ 107.673657][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.676055][T10086] bridge_slave_0: entered promiscuous mode [ 107.691231][T10086] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.698294][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.705810][T10086] bridge_slave_1: entered allmulticast mode [ 107.712396][T10086] bridge_slave_1: entered promiscuous mode [ 107.722496][ T11] hsr_slave_0: left promiscuous mode [ 107.729028][ T11] hsr_slave_1: left promiscuous mode [ 107.734829][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.742345][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.751783][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.759396][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.771789][T10134] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 107.771781][ T11] veth1_macvtap: left promiscuous mode [ 107.785796][ T11] veth0_macvtap: left promiscuous mode [ 107.791299][ T11] veth1_vlan: left promiscuous mode [ 107.796563][ T11] veth0_vlan: left promiscuous mode [ 107.854649][ T11] team0 (unregistering): Port device team_slave_1 removed [ 107.864445][ T11] team0 (unregistering): Port device team_slave_0 removed [ 107.913146][T10086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.917025][T10136] loop5: detected capacity change from 0 to 128 [ 107.927150][T10086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.938409][T10138] loop4: detected capacity change from 0 to 128 [ 107.993725][T10136] syz.5.2787: attempt to access beyond end of device [ 107.993725][T10136] loop5: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 108.010226][T10086] team0: Port device team_slave_0 added [ 108.013304][T10138] syz.4.2778: attempt to access beyond end of device [ 108.013304][T10138] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 108.022736][T10086] team0: Port device team_slave_1 added [ 108.031004][T10136] syz.5.2787: attempt to access beyond end of device [ 108.031004][T10136] loop5: rw=0, sector=97, nr_sectors = 32 limit=128 [ 108.049718][T10136] syz.5.2787: attempt to access beyond end of device [ 108.049718][T10136] loop5: rw=0, sector=145, nr_sectors = 96 limit=128 [ 108.070507][T10086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.077630][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.103680][T10086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.117872][T10086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.124814][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.150797][T10086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.174882][T10143] netlink: 'syz.5.2780': attribute type 4 has an invalid length. [ 108.182765][T10143] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2780'. [ 108.209901][T10086] hsr_slave_0: entered promiscuous mode [ 108.216001][T10086] hsr_slave_1: entered promiscuous mode [ 108.221874][T10086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.236667][T10086] Cannot create hsr debugfs directory [ 108.244515][T10144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.253352][T10144] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.262102][T10144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.270990][T10144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.280321][T10144] vxlan0: entered promiscuous mode [ 108.285653][T10144] vxlan0: entered allmulticast mode [ 108.292585][T10144] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.301588][T10144] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.310479][T10144] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.319400][T10144] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.412117][T10156] loop8: detected capacity change from 0 to 2048 [ 108.421727][T10156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.484283][T10086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.517482][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.543428][T10086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.631066][T10086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.643895][T10190] batman_adv: batadv0: Adding interface: dummy0 [ 108.650243][T10190] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.675704][T10190] batman_adv: batadv0: Interface activated: dummy0 [ 108.694542][T10190] batadv0: mtu less than device minimum [ 108.700613][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.711415][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.722065][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.732739][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.743435][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.754065][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.764686][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.775342][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.785928][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 108.799864][T10191] netlink: 'syz.4.2792': attribute type 4 has an invalid length. [ 108.807693][T10191] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2792'. [ 108.830299][T10086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.863019][T10196] loop5: detected capacity change from 0 to 128 [ 108.938242][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 108.938264][ T29] audit: type=1400 audit(1734677978.713:3995): avc: denied { create } for pid=10086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.940026][T10086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.952115][ T29] audit: type=1400 audit(1734677978.713:3996): avc: denied { write } for pid=10086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.992602][ T29] audit: type=1400 audit(1734677978.713:3997): avc: denied { read } for pid=10086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.001199][T10206] loop4: detected capacity change from 0 to 512 [ 109.013503][ T29] audit: type=1400 audit(1734677978.793:3998): avc: denied { map_create } for pid=10204 comm="syz.5.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.023445][T10086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.038603][ T29] audit: type=1400 audit(1734677978.793:3999): avc: denied { map_read map_write } for pid=10204 comm="syz.5.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.069798][T10206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.077432][ T29] audit: type=1400 audit(1734677978.843:4000): avc: denied { mounton } for pid=10203 comm="syz.4.2801" path="/55/file2" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.107413][T10206] EXT4-fs (loop4): 1 truncate cleaned up [ 109.113435][T10206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.132278][T10086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.137767][ T29] audit: type=1400 audit(1734677978.913:4001): avc: denied { mount } for pid=10203 comm="syz.4.2801" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.160201][T10209] loop5: detected capacity change from 0 to 2048 [ 109.168753][T10086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.175920][ T29] audit: type=1400 audit(1734677978.943:4002): avc: denied { setattr } for pid=10203 comm="syz.4.2801" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.198401][ T29] audit: type=1400 audit(1734677978.953:4003): avc: denied { unmount } for pid=9557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.218916][ T9557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.228344][T10209] loop5: p1 < > p4 [ 109.244250][T10209] loop5: p4 size 8388608 extends beyond EOD, truncated [ 109.247282][ T29] audit: type=1400 audit(1734677979.013:4004): avc: denied { create } for pid=10210 comm="syz.4.2804" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.265333][T10086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.284611][ T2998] loop5: p1 < > p4 [ 109.292770][T10086] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.301696][ T2998] loop5: p4 size 8388608 extends beyond EOD, truncated [ 109.320816][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.327926][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.359313][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.366527][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.478484][T10086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.655451][T10086] veth0_vlan: entered promiscuous mode [ 109.664589][T10086] veth1_vlan: entered promiscuous mode [ 109.679051][T10086] veth0_macvtap: entered promiscuous mode [ 109.686434][T10086] veth1_macvtap: entered promiscuous mode [ 109.696622][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.707162][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.717005][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.727566][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.737500][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.747952][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.757892][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.768513][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.778399][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.788823][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.798652][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.809119][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.820098][T10086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.844260][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.854796][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.864655][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.875082][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.885042][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.895470][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.905336][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.915826][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.925646][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.936108][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.945911][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.956315][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.966719][T10086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.978013][T10086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.986894][T10086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.995672][T10086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.004409][T10086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.077685][T10240] loop8: detected capacity change from 0 to 512 [ 110.110581][T10240] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.113877][T10244] loop5: detected capacity change from 0 to 512 [ 110.123298][T10240] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.143159][T10244] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.164011][T10244] EXT4-fs (loop5): 1 truncate cleaned up [ 110.177354][T10244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.182163][T10252] loop4: detected capacity change from 0 to 2048 [ 110.206437][ T7083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.240031][T10252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.264578][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.431627][T10260] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.447366][T10260] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 110.459862][T10260] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.459862][T10260] [ 110.469683][T10260] EXT4-fs (loop4): Total free blocks count 0 [ 110.475777][T10260] EXT4-fs (loop4): Free/Dirty block details [ 110.481672][T10260] EXT4-fs (loop4): free_blocks=2415919104 [ 110.487422][T10260] EXT4-fs (loop4): dirty_blocks=8192 [ 110.492826][T10260] EXT4-fs (loop4): Block reservation details [ 110.498844][T10260] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 110.517611][T10252] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 110.598814][T10280] loop8: detected capacity change from 0 to 512 [ 110.619630][T10283] loop1: detected capacity change from 0 to 512 [ 110.634057][T10280] EXT4-fs error (device loop8): ext4_get_journal_inode:5809: inode #32: comm syz.8.2826: iget: special inode unallocated [ 110.656026][T10283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.671878][T10280] EXT4-fs (loop8): Remounting filesystem read-only [ 110.678454][T10280] EXT4-fs (loop8): no journal found [ 110.680061][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.683679][T10280] EXT4-fs (loop8): can't get journal size [ 110.696997][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.699166][T10283] EXT4-fs (loop1): 1 truncate cleaned up [ 110.704558][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.711273][T10283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.730151][T10280] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 110.739643][T10280] EXT4-fs (loop8): failed to initialize system zone (-117) [ 110.750234][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.757927][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.765461][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.768330][T10280] EXT4-fs (loop8): mount failed [ 110.772846][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.785114][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.792564][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.800147][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.807625][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.815009][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.822452][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.829896][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.837484][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.844876][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.852342][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.859850][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.868068][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.875507][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.883052][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.890656][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.898175][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.905565][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.912996][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.920368][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.927828][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.935216][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.942597][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.949980][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 110.958464][T10086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.959834][ T3375] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 111.445304][ T9606] bio_check_eod: 1 callbacks suppressed [ 111.445317][ T9606] kmmpd-loop0: attempt to access beyond end of device [ 111.445317][ T9606] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 111.464362][ T9606] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 111.474339][T10328] smc: net device bond0 applied user defined pnetid SYZ0 [ 111.487277][T10328] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2848'. [ 111.496774][T10328] smc: net device bond0 erased user defined pnetid SYZ0 [ 111.566704][T10332] loop4: detected capacity change from 0 to 4096 [ 111.598265][T10332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.611111][T10337] sd 0:0:1:0: device reset [ 111.786862][T10359] xt_hashlimit: max too large, truncated to 1048576 [ 111.958663][T10386] sch_tbf: peakrate 3 is lower than or equals to rate 6 ! [ 112.057401][T10398] blktrace: Concurrent blktraces are not allowed on sg0 [ 112.203751][T10408] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.212066][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'. [ 112.221698][T10407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2883'. [ 112.256941][T10410] loop1: detected capacity change from 0 to 4096 [ 112.388000][T10414] loop1: detected capacity change from 0 to 2048 [ 112.488714][T10424] loop4: detected capacity change from 0 to 512 [ 112.503204][T10424] ================================================================== [ 112.511282][T10424] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 112.520116][T10424] [ 112.522419][T10424] read-write to 0xffff8881004c0bb0 of 8 bytes by task 3281 on cpu 1: [ 112.530459][T10424] __filemap_add_folio+0x430/0x6f0 [ 112.535557][T10424] filemap_add_folio+0x9c/0x1b0 [ 112.540408][T10424] page_cache_ra_unbounded+0x177/0x310 [ 112.545857][T10424] page_cache_sync_ra+0x252/0x670 [ 112.550881][T10424] filemap_get_pages+0x2c1/0x10e0 [ 112.555891][T10424] filemap_read+0x221/0x6a0 [ 112.560400][T10424] blkdev_read_iter+0x20e/0x2c0 [ 112.565238][T10424] vfs_read+0x5dc/0x700 [ 112.569391][T10424] ksys_read+0xe8/0x1b0 [ 112.573528][T10424] __x64_sys_read+0x42/0x50 [ 112.578019][T10424] x64_sys_call+0x2874/0x2dc0 [ 112.582675][T10424] do_syscall_64+0xc9/0x1c0 [ 112.587159][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.593038][T10424] [ 112.595342][T10424] read to 0xffff8881004c0bb0 of 8 bytes by task 10424 on cpu 0: [ 112.602949][T10424] filemap_write_and_wait_range+0x59/0x360 [ 112.608747][T10424] set_blocksize+0x1d0/0x270 [ 112.613329][T10424] sb_min_blocksize+0x63/0xe0 [ 112.617993][T10424] ext4_fill_super+0x38b/0x3a10 [ 112.622843][T10424] get_tree_bdev_flags+0x29f/0x310 [ 112.627937][T10424] get_tree_bdev+0x1f/0x30 [ 112.632349][T10424] ext4_get_tree+0x1c/0x30 [ 112.636766][T10424] vfs_get_tree+0x56/0x1e0 [ 112.641168][T10424] do_new_mount+0x227/0x690 [ 112.645652][T10424] path_mount+0x49b/0xb30 [ 112.649981][T10424] __se_sys_mount+0x27c/0x2d0 [ 112.654653][T10424] __x64_sys_mount+0x67/0x80 [ 112.659230][T10424] x64_sys_call+0x2c84/0x2dc0 [ 112.663886][T10424] do_syscall_64+0xc9/0x1c0 [ 112.668374][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.674265][T10424] [ 112.676584][T10424] value changed: 0x0000000000000007 -> 0x0000000000000008 [ 112.683675][T10424] [ 112.685988][T10424] Reported by Kernel Concurrency Sanitizer on: [ 112.692122][T10424] CPU: 0 UID: 0 PID: 10424 Comm: syz.4.2891 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 112.702862][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 112.712895][T10424] ================================================================== [ 112.721647][T10424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.732641][T10424] EXT4-fs (loop4): 1 truncate cleaned up [ 116.485290][ T9606] kmmpd-loop0: attempt to access beyond end of device [ 116.485290][ T9606] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 116.498798][ T9606] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 121.515334][ T9606] kmmpd-loop0: attempt to access beyond end of device [ 121.515334][ T9606] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 121.528920][ T9606] Buffer I/O error on dev loop0, logical block 64, lost sync page write