last executing test programs: 9.219769012s ago: executing program 2 (id=2009): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) fallocate(r0, 0x1, 0x0, 0x1001f0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 9.092102602s ago: executing program 2 (id=2015): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) sendfile(r0, r1, 0x0, 0xe065) 8.919171671s ago: executing program 2 (id=2022): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x55, 0x45833af92e4b39ff, 0x0) 8.735882721s ago: executing program 2 (id=2027): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2007}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 8.578511301s ago: executing program 2 (id=2030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000004020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 8.22477488s ago: executing program 2 (id=2045): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff7b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 8.22458182s ago: executing program 32 (id=2045): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff7b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 8.003015169s ago: executing program 3 (id=2051): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 7.878735219s ago: executing program 3 (id=2056): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 7.813298569s ago: executing program 3 (id=2058): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x37c2, {}, {}, @control={0x9, 0x8, 0x8}}, {0xfe, 0x0, 0x0, 0x0, @time={0x4, 0x17d0}, {}, {}, @control}], 0x38) 7.761470269s ago: executing program 3 (id=2059): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2007}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 7.237601358s ago: executing program 3 (id=2064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 6.573225546s ago: executing program 3 (id=2073): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 6.553294486s ago: executing program 33 (id=2073): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 3.098703578s ago: executing program 6 (id=2156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) 3.071944848s ago: executing program 6 (id=2157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.016163147s ago: executing program 6 (id=2158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 2.341727306s ago: executing program 6 (id=2170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, 0x0, 0x401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 1.236459083s ago: executing program 1 (id=2211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{'ac,'}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x400, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.077112863s ago: executing program 1 (id=2213): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r3, 0x0, 0xfffffffffffffcee, 0x40c10, 0x0, 0x0) 1.012461843s ago: executing program 1 (id=2215): ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 982.154223ms ago: executing program 1 (id=2217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 930.758252ms ago: executing program 1 (id=2219): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 804.840522ms ago: executing program 4 (id=2228): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) openat$tun(0xffffffffffffff9c, 0x0, 0x2a0240, 0x0) 781.841492ms ago: executing program 4 (id=2230): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3, {0x0, 0x0, 0x4}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x3, 0x90182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cf98b00, 0x1, @perf_bp={0x0}, 0x10c288, 0x40, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}]}, 0x2c}}, 0x4800) 699.926882ms ago: executing program 0 (id=2236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x200000000200}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r1, 0x1, 0x3, 0xfffffffc, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x80) 647.098662ms ago: executing program 0 (id=2239): r0 = inotify_init() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4c) r2 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x69) close(r1) execve(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) 617.660042ms ago: executing program 0 (id=2241): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x3a0, 0x6ec}) 602.690202ms ago: executing program 0 (id=2242): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000440)={[{@barrier}, {@sb={'sb', 0x3d, 0x8}}, {@errors_continue}, {@resuid}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@acl}, {@noinit_itable}, {@i_version}, {@journal_checksum}, {@mblk_io_submit}]}, 0x0, 0x4ee, &(0x7f0000001a40)="$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") r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21081e, &(0x7f00000002c0)={[{@init_itable}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x51d, &(0x7f0000000a40)="$eJzs3cFvI1cZAPBvvOvEm02btPQACNrQFha0WifxtlHVAxQuCKFKiN4AaRsSbxTFjqPYKU2o1PTMFYlKnODIH8C5J+5cENy4lANSgQi0QeIwaMaT1JvaTbqbxFb8+0mjmTdvMt/3Ys1765e1XwBjay4i9iNiIiLejIiZ4nxSbPFad8uue3CQdCv30/SNfyZ5/YODd1ai52cyN4t7ViLih9+N+Gnyybjt3b2N5Uajvl2U5zvNrfn27t6d9ebyWn2tvlmrLS0uLbxy9+XaubX1ueZEcfTlD/+4/42fZ2lNF2d623Geuk0vH8fJXI+I719EsCG4VrRnYtiJ8EhKEfF0RDyfP/8zcS1/NQGAqyxNZyKd6S0DAFddKZ8DS0rVYi5gOkqlarU7h/dMTJUarXbn9v3WzuZqd65sNsql++uN+kIxVzgb5SQrL+bHH5drJ8p3I+KpiPjl5I28XF1pNVaH+Q8fABhjN0+M//+Z7I7/AMAVVxl2AgDApTP+A8D4Mf4DwPgx/gPA+OmO/zeGnQYAcIm8/weA8WP8B4Cx8oPXX8+29LD4/uvVt3Z3Nlpv3Vmttzfmmjsr1ZXW9lZ1rdVay7+zp3na/Rqt1tbiS7Hz9uw3t9qd+fbu3r1ma2ezcy//Xu979XJ+1f4ltAwAGOSp5z74S5KNyK/eyLfoWcuhPNTMgItWGnYCwNBcG3YCwNBY7QvG12d8j588+o8Co6rPEr0PqfT7gFCapunFpQRcsFtfMP8P46pn/t//AoYxY/4fxpf5fxhfaZqcdc3/OOuFAMBoM8cPDPj7/9PF/nfFHwd+snryivcvMisAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYbUfr/1aLtcCno1SqViOeiIjZKCf31xv1hYh4MiL+PFmezMqLQ84ZAHhcpb8nxfpft2ZenH6o6tmbx4cTEfGzX7/xq7eXO53tP0VMJP+aPDrfeb84X7v87AGA0x2N0/m+5438g4N3Vo62y8zno29HRKUb//BgIg6P41+P6/m+EuWImPp3UpS7kp65i8ex/15EfL5f+5OYzudAuiufnoyfxX7iUuOXHopfyuu6++x38blzyAXGzQdZ//Nav+evFHP5vv/zX8l7qMdX9H/ZrVYO8z7w4/hH/d+1Af3f3HHpxqfHeOkP3xt03UfvRXzxesRR7MOe/ucofjIg/otnbONfv/Ts84Pq0t9E3Ir+8XtjzXeaW/Pt3b07683ltfpafbNWW1pcWnjl7su1+XyOen7waPCPV28/GfFu37qs/VMD4ldOaf9Xz9j+3/7vzR9/ZUBdFv/rL/SLX4pnPiV+NiZ+7Yzxl6d+XxlUl8VfHdD+017/22eM/+Hf9j6xbDgAMDzt3b2N5Uajvj3kg+9MR4xAGp/x4EfFb3FU8smnA0Yon/NvYESMQBp9D751fjdM0/TdwddMDHhSfvFC99U/UZWmj5TGoB7jPGbdgFFw/NBHxH+HnQwAAAAAAAAAAAAAANDXZXw6athtBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//TdrGQA==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r1, r0, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x8) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x4, 0x0, 0xffff, 0x3, 0x1, 0x0, 0x0, 0x36e, 0x6}) 497.295551ms ago: executing program 5 (id=2243): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @empty, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r4, r1, 0x0) 476.274341ms ago: executing program 5 (id=2244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040), 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 430.810871ms ago: executing program 0 (id=2245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001640)={@in6={{0xa, 0x4e24, 0x0, @private1, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e62f6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd6740edff00"}, 0xd8) r2 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) write$UHID_INPUT(r2, &(0x7f0000000540)={0xfc, {"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", 0x1000}}, 0x63e) shutdown(r0, 0x1) 342.964231ms ago: executing program 0 (id=2246): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0xfbff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 307.953171ms ago: executing program 5 (id=2247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 181.988561ms ago: executing program 4 (id=2248): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00'], 0x20}], 0x1}, 0x0) 181.622361ms ago: executing program 4 (id=2249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r1, 0xffffffffffffffff, 0x0) 155.310691ms ago: executing program 5 (id=2250): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x5, "cb0a55b732"}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 129.558881ms ago: executing program 5 (id=2251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000640)={@val={0x0, 0x5}, @void, @eth={@broadcast, @random="1f00", @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@mpls_uc={0x8847, {[], @ipv4=@tipc={{0x5, 0x4, 0x1, 0x4, 0x3c, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x9, 0x0, 0x1, 0x36ce, 0xfff, 0x3, 0x4e21, 0x4e23, 0x3}}}}}}}}, 0x56) 128.8117ms ago: executing program 6 (id=2252): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x100000000}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x143042, 0x100) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0xaa5, "d2a65931396f42bf80da85a30fd025e3302db804bb091b8633ac33bf7dc618f9efe3cd45edc4ed4b095f67461136c5d6da1a20e5e9f5dfd50adfe555fab182347f0cd3aeaa00bca9f400b7252cf3e89ecdc50a74679916dcc54677edef8d1ac16f154d72a95f702e7638cb8fea38bdc20bc658fce34993ac06b6c7cdec93ca60df4cfdd8bc3ef81646fa9d648d11881aafb6bcd12652c7ebc97f50f7f2aea79f4d401d0462de2542c935f3ca34d77e836b1cd631f209684d92c0585aa109b288b03594c8f7e3904e18372d482db9efa0fffa69855002198ac3a477882be6c98b93c25e880be93612e45011f5c3a6af9056575a825d111545f7fc74dd7ad9927a", 0xf8, 0xd, 0x3, 0x34, 0x4, 0x8, 0x7, 0x1}}}, 0x128) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0x7e}) 117.341201ms ago: executing program 4 (id=2253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 55.19513ms ago: executing program 4 (id=2254): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) 1.20653ms ago: executing program 5 (id=2255): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000040000001801000020646c3800000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) rename(0x0, 0x0) 1.07739ms ago: executing program 1 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4aa, &(0x7f0000000100)="$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") 0s ago: executing program 6 (id=2265): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f00004cf000/0x1000)=nil, 0x1000, 0x3000009, 0x11, r0, 0x100000000) kernel console output (not intermixed with test programs): Quota mode: none. [ 72.815616][ T6138] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.969: bg 0: block 456: padding at end of block bitmap is not set [ 72.854649][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.921248][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.063868][ T6173] loop4: detected capacity change from 0 to 128 [ 73.098636][ T6173] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.136173][ T6173] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.206843][ T6189] tipc: Can't bind to reserved service type 2 [ 73.238670][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.385817][ T6198] loop4: detected capacity change from 0 to 8192 [ 73.485928][ T6214] syz.3.1003: attempt to access beyond end of device [ 73.485928][ T6214] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 73.501835][ T6212] loop1: detected capacity change from 0 to 512 [ 73.526061][ T6212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.587044][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 73.616892][ T6212] EXT4-fs (loop1): 1 truncate cleaned up [ 73.623130][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.688229][ T6206] loop2: detected capacity change from 0 to 164 [ 73.713954][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.776085][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 73.878797][ T6247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.889159][ T6247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.911253][ T6250] geneve0: entered allmulticast mode [ 73.930380][ T6247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.940783][ T6247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.000021][ T6247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.010486][ T6247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.043587][ T6269] bpf_get_probe_write_proto: 5 callbacks suppressed [ 74.043608][ T6269] syz.2.1026[6269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.050895][ T6269] syz.2.1026[6269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.051180][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 74.063347][ T6269] syz.2.1026[6269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.073627][ T6270] netlink: 'syz.4.1021': attribute type 25 has an invalid length. [ 74.104734][ T6270] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.113005][ T6270] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.121460][ T6270] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.129759][ T6270] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.144696][ T6247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.155179][ T6247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.212904][ T6247] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.221292][ T6247] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.232599][ T6247] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.241144][ T6247] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252840][ T6247] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.261100][ T6247] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.273213][ T6247] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.281550][ T6247] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.349219][ T6285] loop3: detected capacity change from 0 to 512 [ 74.358605][ T6285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.371446][ T6285] ext4 filesystem being mounted at /237/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.379207][ T6286] loop2: detected capacity change from 0 to 8192 [ 74.388638][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 74.388651][ T29] audit: type=1400 audit(1736583293.339:2580): avc: denied { setattr } for pid=6283 comm="syz.3.1032" path="/237/file2/memory.current" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.420867][ T6285] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.1032: corrupted inode contents [ 74.433152][ T6285] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #19: comm syz.3.1032: mark_inode_dirty error [ 74.445263][ T6285] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.1032: corrupted inode contents [ 74.457513][ T6285] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.1032: mark_inode_dirty error [ 74.470056][ T6285] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.1032: mark inode dirty (error -117) [ 74.483204][ T6285] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 74.510149][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.577625][ T6292] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1034'. [ 74.588364][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 74.672120][ T29] audit: type=1326 audit(1736583293.619:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 74.695645][ T29] audit: type=1326 audit(1736583293.619:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 74.719231][ T29] audit: type=1326 audit(1736583293.619:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 74.742771][ T29] audit: type=1326 audit(1736583293.619:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 74.766275][ T29] audit: type=1326 audit(1736583293.619:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 74.789752][ T29] audit: type=1326 audit(1736583293.619:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 74.813295][ T29] audit: type=1326 audit(1736583293.619:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 74.836754][ T29] audit: type=1326 audit(1736583293.619:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 74.860228][ T29] audit: type=1326 audit(1736583293.619:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 75.013819][ T6306] loop4: detected capacity change from 0 to 1024 [ 75.020779][ T6306] EXT4-fs: Ignoring removed nobh option [ 75.049959][ T6306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.067670][ T6306] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1041: bg 0: block 456: padding at end of block bitmap is not set [ 75.114681][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.311850][ T6334] loop1: detected capacity change from 0 to 512 [ 75.319374][ T6334] EXT4-fs (loop1): can't mount with commit=9, fs mounted w/o journal [ 75.348523][ T6338] syz_tun: entered allmulticast mode [ 75.354828][ T6335] syz_tun: left allmulticast mode [ 75.485637][ T6353] loop1: detected capacity change from 0 to 128 [ 75.508494][ T6353] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.521554][ T6353] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.563828][ T6353] syz.1.1061[6353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.564010][ T6353] syz.1.1061[6353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.577351][ T6353] syz.1.1061[6353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.632206][ T3538] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.703302][ T6359] loop1: detected capacity change from 0 to 256 [ 75.715836][ T6359] FAT-fs (loop1): Directory bread(block 64) failed [ 75.723629][ T6359] FAT-fs (loop1): Directory bread(block 65) failed [ 75.730233][ T6359] FAT-fs (loop1): Directory bread(block 66) failed [ 75.738044][ T6359] FAT-fs (loop1): Directory bread(block 67) failed [ 75.744703][ T6359] FAT-fs (loop1): Directory bread(block 68) failed [ 75.751397][ T6359] FAT-fs (loop1): Directory bread(block 69) failed [ 75.759152][ T6359] FAT-fs (loop1): Directory bread(block 70) failed [ 75.765738][ T6359] FAT-fs (loop1): Directory bread(block 71) failed [ 75.772344][ T6359] FAT-fs (loop1): Directory bread(block 72) failed [ 75.780089][ T6359] FAT-fs (loop1): Directory bread(block 73) failed [ 75.798250][ T6359] Process accounting resumed [ 75.803062][ T6359] syz.1.1063: attempt to access beyond end of device [ 75.803062][ T6359] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 76.408148][ T6392] loop3: detected capacity change from 0 to 8192 [ 76.425729][ T6398] syzkaller0: entered promiscuous mode [ 76.431341][ T6398] syzkaller0: entered allmulticast mode [ 76.666384][ T6430] program syz.1.1094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.709165][ T6438] syz.1.1098[6438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.709368][ T6438] syz.1.1098[6438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.721172][ T6438] syz.1.1098[6438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.952319][ T6452] capability: warning: `syz.4.1105' uses deprecated v2 capabilities in a way that may be insecure [ 77.000979][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.016733][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.133616][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1116'. [ 77.167652][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1117'. [ 77.202040][ T6484] netlink: 'syz.0.1118': attribute type 1 has an invalid length. [ 77.209863][ T6484] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1118'. [ 77.223565][ T6490] random: crng reseeded on system resumption [ 77.605778][ T6530] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1137'. [ 77.971167][ T6568] GUP no longer grows the stack in syz.0.1153 (6568): 20004000-2000a000 (20002000) [ 77.980547][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.0.1153 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 77.991320][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.001445][ T6568] Call Trace: [ 78.004820][ T6568] [ 78.007803][ T6568] dump_stack_lvl+0xf2/0x150 [ 78.012497][ T6568] dump_stack+0x15/0x1a [ 78.016695][ T6568] __get_user_pages+0x209b/0x2670 [ 78.021749][ T6568] ? expand_downwards+0x7f0/0x940 [ 78.026822][ T6568] ? __rcu_read_unlock+0x4e/0x70 [ 78.031876][ T6568] get_user_pages_remote+0x1df/0x790 [ 78.037214][ T6568] __access_remote_vm+0x15b/0x580 [ 78.042276][ T6568] access_remote_vm+0x34/0x50 [ 78.046979][ T6568] proc_pid_cmdline_read+0x3e6/0x660 [ 78.052586][ T6568] vfs_readv+0x3e2/0x660 [ 78.056856][ T6568] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 78.062797][ T6568] __x64_sys_preadv+0xf4/0x1c0 [ 78.067665][ T6568] x64_sys_call+0x2680/0x2dc0 [ 78.072382][ T6568] do_syscall_64+0xc9/0x1c0 [ 78.077023][ T6568] ? clear_bhb_loop+0x55/0xb0 [ 78.081718][ T6568] ? clear_bhb_loop+0x55/0xb0 [ 78.086420][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.092369][ T6568] RIP: 0033:0x7fab82e25d29 [ 78.096835][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.116676][ T6568] RSP: 002b:00007fab81497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 78.125178][ T6568] RAX: ffffffffffffffda RBX: 00007fab83015fa0 RCX: 00007fab82e25d29 [ 78.133165][ T6568] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 78.141178][ T6568] RBP: 00007fab82ea1b08 R08: 0000000000000000 R09: 0000000000000000 [ 78.149161][ T6568] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 78.157220][ T6568] R13: 0000000000000000 R14: 00007fab83015fa0 R15: 00007fffc84dc418 [ 78.165221][ T6568] [ 78.200994][ T6573] loop0: detected capacity change from 0 to 512 [ 78.207768][ T6573] EXT4-fs: Ignoring removed oldalloc option [ 78.218723][ T6573] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1155: Parent and EA inode have the same ino 15 [ 78.264571][ T6577] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1156'. [ 78.296797][ T6573] EXT4-fs (loop0): Remounting filesystem read-only [ 78.305571][ T6573] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 78.323167][ T6581] loop1: detected capacity change from 0 to 512 [ 78.330268][ T6581] EXT4-fs: Ignoring removed oldalloc option [ 78.333742][ T6573] EXT4-fs (loop0): 1 orphan inode deleted [ 78.343572][ T6573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.356060][ T6573] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 78.365551][ T6573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.379524][ T6581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1158: Parent and EA inode have the same ino 15 [ 78.400407][ T6581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1158: Parent and EA inode have the same ino 15 [ 78.416932][ T6581] EXT4-fs (loop1): 1 orphan inode deleted [ 78.427124][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.437825][ T6594] rdma_op ffff888116ca9580 conn xmit_rdma 0000000000000000 [ 78.448919][ T6593] loop4: detected capacity change from 0 to 764 [ 78.468309][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.478832][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.488785][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.499289][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.509319][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.519803][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.530058][ T6573] batadv_slave_1: entered promiscuous mode [ 78.550118][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.586285][ T6606] loop2: detected capacity change from 0 to 512 [ 78.621163][ T6612] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 78.628983][ T6612] __nla_validate_parse: 1 callbacks suppressed [ 78.628995][ T6612] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1173'. [ 78.652462][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.684147][ T6606] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.724856][ T6624] netlink: 'syz.3.1178': attribute type 39 has an invalid length. [ 78.815488][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.826133][ T6633] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1182'. [ 78.838798][ T6633] netlink: 'syz.0.1182': attribute type 9 has an invalid length. [ 78.846628][ T6633] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1182'. [ 78.855765][ T6633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1182'. [ 78.931449][ T6643] pim6reg1: entered promiscuous mode [ 78.936843][ T6643] pim6reg1: entered allmulticast mode [ 79.294648][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 79.472455][ T6696] Â: renamed from pim6reg1 [ 79.586203][ T6716] syz.0.1223[6716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.586263][ T6716] syz.0.1223[6716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.595548][ T6718] syz.3.1224[6718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.609258][ T6718] syz.3.1224[6718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.610629][ T6716] syz.0.1223[6716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.620991][ T6718] syz.3.1224[6718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.677081][ T6720] SELinux: policydb version 0 does not match my version range 15-33 [ 79.683305][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 79.683324][ T29] audit: type=1400 audit(1736583298.629:2828): avc: denied { load_policy } for pid=6719 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.689280][ T6720] SELinux: failed to load policy [ 79.798370][ T6732] syz.2.1232[6732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.798437][ T6732] syz.2.1232[6732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.823878][ T6734] loop3: detected capacity change from 0 to 128 [ 79.847136][ T6732] syz.2.1232[6732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.910207][ T6737] loop0: detected capacity change from 0 to 8192 [ 79.940425][ T6734] syz.3.1233: attempt to access beyond end of device [ 79.940425][ T6734] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 79.997909][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 80.023227][ T6745] loop4: detected capacity change from 0 to 512 [ 80.037277][ T6745] EXT4-fs: Ignoring removed oldalloc option [ 80.044163][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 80.056770][ T6745] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1235: Parent and EA inode have the same ino 15 [ 80.099653][ T6751] loop3: detected capacity change from 0 to 1764 [ 80.104629][ T6745] EXT4-fs (loop4): Remounting filesystem read-only [ 80.113536][ T29] audit: type=1400 audit(1736583299.059:2829): avc: denied { audit_write } for pid=6750 comm="syz.3.1238" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.132332][ T6745] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 80.144903][ T6745] EXT4-fs (loop4): 1 orphan inode deleted [ 80.151297][ T6745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.164598][ T6745] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 80.171761][ T6745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.185869][ T29] audit: type=1107 audit(1736583299.089:2830): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 80.223378][ T6745] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1235'. [ 80.232532][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.243138][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.253296][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.263859][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.274075][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.284543][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.294497][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.304952][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.316971][ T6745] batadv_slave_1: entered promiscuous mode [ 80.323377][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.566924][ T29] audit: type=1326 audit(1736583299.469:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 80.580888][ T6781] Â: renamed from pim6reg1 [ 80.590560][ T29] audit: type=1326 audit(1736583299.469:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 80.618710][ T29] audit: type=1326 audit(1736583299.489:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 80.642207][ T29] audit: type=1326 audit(1736583299.489:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 80.666247][ T29] audit: type=1326 audit(1736583299.489:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 80.690015][ T29] audit: type=1326 audit(1736583299.489:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 80.713567][ T29] audit: type=1326 audit(1736583299.489:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f4ed7cd5d29 code=0x7ffc0000 [ 80.854955][ T6798] Invalid ELF header magic: != ELF [ 80.875700][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 81.046856][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 81.055913][ T6824] netlink: 'syz.1.1266': attribute type 18 has an invalid length. [ 81.077264][ T6824] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.085538][ T6824] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.093781][ T6824] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.102055][ T6824] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.126835][ T6824] vxlan0: entered promiscuous mode [ 81.142222][ T6830] loop3: detected capacity change from 0 to 8192 [ 81.209560][ T6840] Invalid ELF header magic: != ELF [ 81.323969][ T6853] loop4: detected capacity change from 0 to 256 [ 81.384025][ T6859] syz.4.1280[6859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.863124][ T6891] loop4: detected capacity change from 0 to 1024 [ 81.881762][ T6891] EXT4-fs: Ignoring removed nobh option [ 81.890902][ T6891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.908774][ T6891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.968878][ T6891] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 82.019766][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.138001][ T6909] netlink: 'syz.1.1304': attribute type 1 has an invalid length. [ 82.148446][ T6909] vlan2: entered allmulticast mode [ 82.166995][ T6909] netlink: 'syz.1.1304': attribute type 6 has an invalid length. [ 82.748042][ T6937] Set syz1 is full, maxelem 65536 reached [ 82.831229][ T6951] loop3: detected capacity change from 0 to 512 [ 82.837937][ T6951] EXT4-fs: Ignoring removed oldalloc option [ 82.849925][ T6951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1321: Parent and EA inode have the same ino 15 [ 82.879278][ T6951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1321: Parent and EA inode have the same ino 15 [ 82.909573][ T6951] EXT4-fs (loop3): 1 orphan inode deleted [ 82.924339][ T6951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.989811][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.171082][ T6976] netlink: 'syz.1.1327': attribute type 3 has an invalid length. [ 83.294801][ T6989] loop4: detected capacity change from 0 to 1024 [ 83.339428][ T6989] EXT4-fs: Ignoring removed nobh option [ 83.345036][ T6989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.426120][ T6989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.474196][ T6989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.536717][ T6989] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 83.639873][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.661424][ T7003] loop1: detected capacity change from 0 to 2048 [ 83.689974][ T7003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.776486][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.885173][ T7028] __nla_validate_parse: 10 callbacks suppressed [ 83.885250][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1349'. [ 83.903720][ T7026] loop2: detected capacity change from 0 to 2048 [ 83.987095][ T7026] loop2: p1 < > p4 [ 83.991593][ T7026] loop2: p4 size 8388608 extends beyond EOD, truncated [ 84.315313][ T7056] vxcan1: entered promiscuous mode [ 84.334849][ T7056] vlan2: entered promiscuous mode [ 84.345049][ T7058] hub 9-0:1.0: USB hub found [ 84.355843][ T7056] vxcan1: left promiscuous mode [ 84.362411][ T7058] hub 9-0:1.0: 8 ports detected [ 84.398935][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1361'. [ 84.425706][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 84.517169][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1366'. [ 84.640257][ T7079] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1369'. [ 84.678574][ T7085] loop3: detected capacity change from 0 to 512 [ 84.687029][ T7079] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1369'. [ 84.695955][ T7079] 0ªX¹¦À: renamed from caif0 [ 84.696080][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 84.711663][ T7079] 0ªX¹¦À: entered allmulticast mode [ 84.716957][ T7079] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.736924][ T7085] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1371: corrupted in-inode xattr: invalid ea_ino [ 84.760447][ T7085] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1371: couldn't read orphan inode 15 (err -117) [ 84.778529][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.928136][ T7094] loop0: detected capacity change from 0 to 1024 [ 84.963388][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.980081][ T7094] EXT4-fs: Ignoring removed nobh option [ 85.002515][ T7094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.021332][ T7094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.046798][ T7094] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 85.092817][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.198027][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 85.268370][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 85.268388][ T29] audit: type=1400 audit(1736583304.209:2988): avc: denied { create } for pid=7121 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 85.295358][ T29] audit: type=1400 audit(1736583304.219:2989): avc: denied { bind } for pid=7121 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 85.367239][ T29] audit: type=1326 audit(1736583304.249:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78b6b5d29 code=0x7ffc0000 [ 85.390753][ T29] audit: type=1326 audit(1736583304.249:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78b6b5d29 code=0x7ffc0000 [ 85.397758][ T7131] syzkaller0: entered promiscuous mode [ 85.414463][ T29] audit: type=1326 audit(1736583304.249:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78b6b5d29 code=0x7ffc0000 [ 85.419831][ T7131] syzkaller0: entered allmulticast mode [ 85.449047][ T29] audit: type=1326 audit(1736583304.249:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78b6b5d29 code=0x7ffc0000 [ 85.472806][ T29] audit: type=1326 audit(1736583304.249:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78b6b5d29 code=0x7ffc0000 [ 85.496256][ T29] audit: type=1326 audit(1736583304.249:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78b6b5d29 code=0x7ffc0000 [ 85.519689][ T29] audit: type=1326 audit(1736583304.249:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78b6b5d29 code=0x7ffc0000 [ 85.543304][ T29] audit: type=1326 audit(1736583304.249:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78b6b5d29 code=0x7ffc0000 [ 85.583359][ T7136] loop0: detected capacity change from 0 to 512 [ 85.591210][ T7134] netlink: 'syz.4.1393': attribute type 39 has an invalid length. [ 85.623402][ T7136] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.648725][ T7136] EXT4-fs (loop0): 1 truncate cleaned up [ 85.654764][ T7136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.711838][ T7145] netlink: 'syz.2.1397': attribute type 1 has an invalid length. [ 85.719640][ T7145] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1397'. [ 85.730300][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.768344][ T7149] vlan2: entered allmulticast mode [ 85.804778][ T7156] hub 9-0:1.0: USB hub found [ 85.814085][ T7156] hub 9-0:1.0: 8 ports detected [ 85.865213][ T7163] smc: net device bond0 applied user defined pnetid SYZ2 [ 85.886926][ T7163] smc: net device bond0 erased user defined pnetid SYZ2 [ 85.942692][ T7175] bpf_get_probe_write_proto: 5 callbacks suppressed [ 85.942707][ T7175] syz.3.1410[7175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.961704][ T7175] syz.3.1410[7175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.981152][ T7175] syz.3.1410[7175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.034727][ T7175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1410'. [ 86.852040][ T7230] kernel profiling enabled (shift: 17) [ 86.914638][ T7233] loop4: detected capacity change from 0 to 8192 [ 87.193406][ T7254] loop0: detected capacity change from 0 to 512 [ 87.216798][ T7254] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1443: corrupted in-inode xattr: invalid ea_ino [ 87.256880][ T7254] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1443: couldn't read orphan inode 15 (err -117) [ 87.286784][ T7254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.425971][ T7273] netlink: 'syz.2.1449': attribute type 18 has an invalid length. [ 87.454451][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.402485][ T7325] syz.2.1473[7325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.402634][ T7325] syz.2.1473[7325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.414390][ T7325] syz.2.1473[7325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.500706][ T7327] bond_slave_1: entered promiscuous mode [ 88.516000][ T7306] Set syz1 is full, maxelem 65536 reached [ 88.520039][ T7327] bond_slave_1: left promiscuous mode [ 88.583030][ T7331] loop1: detected capacity change from 0 to 128 [ 88.608678][ T7331] syz.1.1476: attempt to access beyond end of device [ 88.608678][ T7331] loop1: rw=2049, sector=209, nr_sectors = 1 limit=128 [ 88.646174][ T11] kworker/u8:0: attempt to access beyond end of device [ 88.646174][ T11] loop1: rw=1, sector=145, nr_sectors = 64 limit=128 [ 88.723129][ T7345] loop3: detected capacity change from 0 to 2048 [ 88.787551][ T7355] syzkaller0: entered allmulticast mode [ 88.796110][ T7355] syzkaller0 (unregistering): left allmulticast mode [ 88.796952][ T7345] loop3: p1 < > p2 < > p3 p4 [ 88.807683][ T7345] loop3: partition table partially beyond EOD, truncated [ 88.815029][ T7345] loop3: p1 start 2305 is beyond EOD, truncated [ 88.821356][ T7345] loop3: p2 start 4294902784 is beyond EOD, truncated [ 88.828178][ T7345] loop3: p3 start 3724543488 is beyond EOD, truncated [ 88.835037][ T7345] loop3: p4 size 8192 extends beyond EOD, truncated [ 89.008634][ T7386] loop1: detected capacity change from 0 to 512 [ 89.037851][ T7386] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1501: corrupted in-inode xattr: invalid ea_ino [ 89.061828][ T7394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7394 comm=syz.0.1500 [ 89.066734][ T7386] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1501: couldn't read orphan inode 15 (err -117) [ 89.075533][ T7394] __nla_validate_parse: 3 callbacks suppressed [ 89.075555][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 89.101455][ T7394] netlink: 'syz.0.1500': attribute type 30 has an invalid length. [ 89.109560][ T7394] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 89.111323][ T7386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.118825][ T7394] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 89.228720][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.236195][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.241913][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.243626][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.260230][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.267683][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.275167][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.282781][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.290297][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.297821][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.305218][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.312661][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.320091][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.327552][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.334955][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.342475][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.349973][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.357489][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.364894][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.372338][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.379763][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.387239][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.394659][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.402228][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.409666][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.417089][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.424530][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.431976][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.439424][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.446854][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.454296][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.461731][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.469186][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.476825][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.484505][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.491965][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.499487][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.506930][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.514446][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.521924][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.529393][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.536821][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.544229][ T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 89.552243][ T8] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 89.635983][ T7420] loop1: detected capacity change from 0 to 1024 [ 89.656152][ T7420] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.681407][ T7425] loop4: detected capacity change from 0 to 1024 [ 89.689840][ T7425] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 89.697116][ T7429] loop2: detected capacity change from 0 to 2048 [ 89.701610][ T7420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.720310][ T7425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.759033][ T7429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.778266][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.804472][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.858071][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.885102][ T7440] loop1: detected capacity change from 0 to 2048 [ 89.923819][ T7439] netlink: 'syz.0.1524': attribute type 2 has an invalid length. [ 89.931653][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1524'. [ 89.943372][ T7440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.025303][ T7442] loop2: detected capacity change from 0 to 8192 [ 90.145830][ T7457] EXT4-fs (loop1): shut down requested (0) [ 90.260533][ T7464] random: crng reseeded on system resumption [ 90.296524][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.478207][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 90.492837][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 90.538324][ T7494] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1543'. [ 90.585502][ T7500] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 90.609255][ T7505] loop2: detected capacity change from 0 to 2048 [ 90.646501][ T7505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.694155][ T7514] macvlan2: entered promiscuous mode [ 90.699519][ T7514] bridge0: entered promiscuous mode [ 90.705300][ T7514] bridge0: port 3(macvlan2) entered blocking state [ 90.712102][ T7514] bridge0: port 3(macvlan2) entered disabled state [ 90.719151][ T7514] macvlan2: entered allmulticast mode [ 90.724554][ T7514] bridge0: entered allmulticast mode [ 90.730723][ T7514] macvlan2: left allmulticast mode [ 90.735874][ T7514] bridge0: left allmulticast mode [ 90.741693][ T7514] bridge0: left promiscuous mode [ 90.750142][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.758811][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.788916][ T7518] vhci_hcd: invalid port number 157 [ 90.794175][ T7518] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 90.927302][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 90.927319][ T29] audit: type=1400 audit(1736583309.879:3129): avc: denied { write } for pid=7531 comm="syz.4.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.952992][ T29] audit: type=1400 audit(1736583309.879:3130): avc: denied { bind } for pid=7531 comm="syz.4.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.972500][ T29] audit: type=1400 audit(1736583309.879:3131): avc: denied { node_bind } for pid=7531 comm="syz.4.1560" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 91.054768][ T29] audit: type=1400 audit(1736583309.999:3132): avc: denied { read } for pid=7538 comm="syz.0.1563" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.078727][ T29] audit: type=1400 audit(1736583309.999:3133): avc: denied { open } for pid=7538 comm="syz.0.1563" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.125936][ T29] audit: type=1400 audit(1736583310.069:3134): avc: denied { ioctl } for pid=7541 comm="syz.4.1565" path="socket:[17305]" dev="sockfs" ino=17305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.182892][ T7546] loop4: detected capacity change from 0 to 2048 [ 91.206927][ T7546] loop4: p1 < > p4 [ 91.212140][ T7546] loop4: p4 size 8388608 extends beyond EOD, truncated [ 91.332074][ T29] audit: type=1400 audit(1736583310.279:3135): avc: denied { ioctl } for pid=7562 comm="syz.3.1574" path="socket:[17867]" dev="sockfs" ino=17867 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.362817][ T7565] loop4: detected capacity change from 0 to 128 [ 91.389122][ T7557] loop0: detected capacity change from 0 to 2048 [ 91.420620][ T29] audit: type=1326 audit(1736583310.369:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 91.466767][ T29] audit: type=1326 audit(1736583310.409:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 91.470297][ T7565] syz.4.1575: attempt to access beyond end of device [ 91.470297][ T7565] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 91.490157][ T29] audit: type=1326 audit(1736583310.409:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.1.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 91.540881][ T7557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.558157][ T7557] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 91.580060][ T7565] syz.4.1575: attempt to access beyond end of device [ 91.580060][ T7565] loop4: rw=524288, sector=657, nr_sectors = 256 limit=128 [ 91.595691][ T3303] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 91.596368][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.610631][ T7565] syz.4.1575: attempt to access beyond end of device [ 91.610631][ T7565] loop4: rw=0, sector=657, nr_sectors = 8 limit=128 [ 91.633229][ T7565] syz.4.1575: attempt to access beyond end of device [ 91.633229][ T7565] loop4: rw=0, sector=657, nr_sectors = 8 limit=128 [ 91.665856][ T7579] loop3: detected capacity change from 0 to 2048 [ 91.673921][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.742877][ T7579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.827632][ T7598] veth0_virt_wifi: entered promiscuous mode [ 91.835109][ T7600] EXT4-fs (loop3): shut down requested (0) [ 91.858228][ T7598] veth0_virt_wifi: left promiscuous mode [ 91.875241][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.951927][ T7608] loop1: detected capacity change from 0 to 164 [ 92.006492][ T7608] Unable to read rock-ridge attributes [ 92.031045][ T7618] loop4: detected capacity change from 0 to 2048 [ 92.042820][ T7608] Unable to read rock-ridge attributes [ 92.050027][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 92.051467][ T7608] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 92.069028][ T7618] loop4: p1 < > p4 [ 92.073618][ T7618] loop4: p4 size 8388608 extends beyond EOD, truncated [ 92.108300][ T7624] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in; [ 92.108300][ T7624] program syz.0.1601 not setting count and/or reply_len properly [ 92.214342][ T7628] syzkaller0: entered promiscuous mode [ 92.220004][ T7628] syzkaller0: entered allmulticast mode [ 92.320195][ T7655] loop1: detected capacity change from 0 to 512 [ 92.327079][ T7655] EXT4-fs: Ignoring removed oldalloc option [ 92.333871][ T7655] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.357050][ T7657] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1609'. [ 92.357490][ T7655] EXT4-fs (loop1): 1 truncate cleaned up [ 92.379603][ T7655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.444389][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.497970][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1620'. [ 92.579884][ T7678] lo: entered allmulticast mode [ 92.585545][ T7678] lo: entered promiscuous mode [ 92.590480][ T7678] lo: left allmulticast mode [ 92.668688][ T7684] ALSA: seq fatal error: cannot create timer (-19) [ 92.788981][ T7704] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1636'. [ 93.157685][ T7734] Invalid logical block size (-2147352640) [ 93.708234][ T7758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1657'. [ 93.797609][ T7764] loop4: detected capacity change from 0 to 512 [ 93.806288][ T7764] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1660: invalid indirect mapped block 256 (level 2) [ 93.820615][ T7764] EXT4-fs (loop4): 2 truncates cleaned up [ 93.826989][ T7764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.862546][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.024590][ T7776] pimreg: entered allmulticast mode [ 94.032726][ T7776] pimreg: left allmulticast mode [ 94.157395][ T7794] loop2: detected capacity change from 0 to 2048 [ 94.187559][ T7794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.380206][ T7820] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.389570][ T7820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.399166][ T7823] syz.1.1683[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.399449][ T7823] syz.1.1683[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.412688][ T7824] loop0: detected capacity change from 0 to 128 [ 94.413619][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.424908][ T7823] syz.1.1683[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.449677][ T7824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 94.469382][ T7824] System zones: 1-3, 19-19, 35-36 [ 94.475323][ T7824] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.758127][ T7853] xt_connbytes: Forcing CT accounting to be enabled [ 94.764931][ T7853] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 94.825841][ T7858] syz.3.1698[7858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.825951][ T7858] syz.3.1698[7858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.841394][ T7858] syz.3.1698[7858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.014047][ T7876] syz.0.1706[7876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.025923][ T7876] syz.0.1706[7876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.039052][ T7876] syz.0.1706[7876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.073283][ T7880] loop1: detected capacity change from 0 to 512 [ 95.107018][ T7880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.140120][ T7880] EXT4-fs (loop1): 1 truncate cleaned up [ 95.158686][ T7880] tmpfs: Unknown parameter '' [ 95.217090][ T7874] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 95.221493][ T7891] loop1: detected capacity change from 0 to 512 [ 95.223619][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 95.237737][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 95.263668][ T7893] vhci_hcd: connection closed [ 95.264812][ T7891] EXT4-fs: Ignoring removed orlov option [ 95.279247][ T11] vhci_hcd: stop threads [ 95.283534][ T11] vhci_hcd: release socket [ 95.288073][ T11] vhci_hcd: disconnect device [ 95.302619][ T7891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.318907][ T7891] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.327103][ T7891] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.334217][ T7891] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1711: bg 0: block 248: padding at end of block bitmap is not set [ 95.350850][ T7891] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1711: Failed to acquire dquot type 1 [ 95.362971][ T7891] EXT4-fs (loop1): 1 truncate cleaned up [ 95.373245][ T7900] loop4: detected capacity change from 0 to 128 [ 95.393800][ T7900] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.507684][ T7915] __nla_validate_parse: 1 callbacks suppressed [ 95.507727][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1719'. [ 95.509943][ T7909] syzkaller0: entered promiscuous mode [ 95.528398][ T7909] syzkaller0: entered allmulticast mode [ 95.602575][ T7922] loop2: detected capacity change from 0 to 128 [ 95.633530][ T7926] netlink: 'syz.0.1724': attribute type 1 has an invalid length. [ 95.668825][ T7933] syz.1.1727[7933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.675817][ T7926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.705387][ T7936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.713336][ T7936] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 95.725624][ T7936] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 95.798625][ T7946] loop3: detected capacity change from 0 to 164 [ 95.805044][ T7948] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.813979][ T7946] Unable to read rock-ridge attributes [ 95.826157][ T7946] Unable to read rock-ridge attributes [ 95.851026][ T7950] ip6gre2: entered allmulticast mode [ 95.944568][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.955269][ T7960] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 95.966260][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.980095][ T7958] loop3: detected capacity change from 0 to 4096 [ 96.075149][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 96.235257][ T7991] netlink: 133492 bytes leftover after parsing attributes in process `syz.3.1751'. [ 96.243609][ T7968] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 96.251202][ T7968] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.259007][ T7968] vhci_hcd vhci_hcd.0: Device attached [ 96.267047][ T7993] vhci_hcd: connection closed [ 96.267462][ T1824] vhci_hcd: stop threads [ 96.276454][ T1824] vhci_hcd: release socket [ 96.280921][ T1824] vhci_hcd: disconnect device [ 96.314924][ T7998] netlink: 133492 bytes leftover after parsing attributes in process `syz.3.1753'. [ 96.343881][ T8000] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 96.354183][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 96.354200][ T29] audit: type=1400 audit(1736583315.309:3228): avc: denied { relabelto } for pid=7999 comm="syz.3.1754" name="0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 96.386810][ T29] audit: type=1400 audit(1736583315.309:3229): avc: denied { associate } for pid=7999 comm="syz.3.1754" name="0" dev="devpts" ino=3 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_map_t:s0" [ 96.524408][ T29] audit: type=1400 audit(1736583315.469:3230): avc: denied { ioctl } for pid=8007 comm="syz.4.1758" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.795970][ T8058] 9pnet: p9_errstr2errno: server reported unknown error œæçæ [ 96.930883][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1768'. [ 96.948103][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1768'. [ 97.012059][ T8077] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 97.035706][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.099205][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.123154][ T8077] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 97.135920][ T8077] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 97.156027][ T8109] netlink: 'syz.3.1777': attribute type 3 has an invalid length. [ 97.283937][ T8086] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 97.290495][ T8086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.298345][ T8086] vhci_hcd vhci_hcd.0: Device attached [ 97.315662][ T8120] vhci_hcd: connection closed [ 97.315977][ T8020] vhci_hcd: stop threads [ 97.325158][ T8020] vhci_hcd: release socket [ 97.329851][ T8020] vhci_hcd: disconnect device [ 97.485484][ T8135] loop4: detected capacity change from 0 to 128 [ 97.500047][ T29] audit: type=1400 audit(1736583316.449:3231): avc: denied { remount } for pid=8134 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 97.534248][ T8137] loop1: detected capacity change from 0 to 2048 [ 97.608636][ T8145] loop4: detected capacity change from 0 to 512 [ 97.630125][ T8145] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.718999][ T8152] syzkaller1: entered promiscuous mode [ 97.724540][ T8152] syzkaller1: entered allmulticast mode [ 97.827468][ T8161] loop4: detected capacity change from 0 to 512 [ 97.834193][ T8161] EXT4-fs: inline encryption not supported [ 97.879458][ T8161] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.897109][ T8161] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1794: corrupted inode contents [ 97.902732][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1796'. [ 97.926670][ T8161] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.1794: mark_inode_dirty error [ 97.951382][ T8161] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1794: corrupted inode contents [ 97.951528][ T29] audit: type=1326 audit(1736583316.899:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab82e25d29 code=0x7ffc0000 [ 97.994569][ T8171] loop2: detected capacity change from 0 to 1024 [ 98.001916][ T29] audit: type=1326 audit(1736583316.939:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab82e25d29 code=0x7ffc0000 [ 98.025432][ T29] audit: type=1326 audit(1736583316.939:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab82e25d29 code=0x7ffc0000 [ 98.048891][ T29] audit: type=1326 audit(1736583316.939:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab82e25d29 code=0x7ffc0000 [ 98.072390][ T29] audit: type=1326 audit(1736583316.939:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab82e25d29 code=0x7ffc0000 [ 98.095897][ T29] audit: type=1326 audit(1736583316.939:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab82e25d29 code=0x7ffc0000 [ 98.298466][ T8191] loop4: detected capacity change from 0 to 512 [ 98.305533][ T8191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.369827][ T8191] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.571247][ T8207] netlink: zone id is out of range [ 98.576413][ T8207] netlink: zone id is out of range [ 98.582797][ T8207] netlink: set zone limit has 4 unknown bytes [ 98.600105][ T8209] loop1: detected capacity change from 0 to 1024 [ 98.623966][ T8209] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 98.635076][ T8209] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 98.646937][ T8209] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 98.659077][ T8209] EXT4-fs (loop1): invalid journal inode [ 98.779265][ T8216] serio: Serial port ptm0 [ 98.795824][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1817'. [ 98.841347][ T8220] serio: Serial port ptm1 [ 99.277776][ T8234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1824'. [ 99.327593][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 99.486843][ T8242] bpf_get_probe_write_proto: 4 callbacks suppressed [ 99.486860][ T8242] syz.2.1828[8242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.502056][ T8242] syz.2.1828[8242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.516598][ T8242] syz.2.1828[8242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.571223][ T8253] loop3: detected capacity change from 0 to 128 [ 99.572660][ T8251] loop0: detected capacity change from 0 to 512 [ 99.601054][ T8251] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.630698][ T8251] EXT4-fs (loop0): 1 truncate cleaned up [ 99.675091][ T8263] loop0: detected capacity change from 0 to 512 [ 99.682418][ T8263] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.694149][ T8263] EXT4-fs error (device loop0): __ext4_iget:4984: inode #15: block 1803188595: comm syz.0.1836: invalid block [ 99.707834][ T8263] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1836: couldn't read orphan inode 15 (err -117) [ 100.366952][ T8276] loop0: detected capacity change from 0 to 1024 [ 100.390206][ T8276] EXT4-fs: Ignoring removed orlov option [ 100.412234][ T8276] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 100.432558][ T8276] EXT4-fs mount: 24 callbacks suppressed [ 100.432577][ T8276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.459285][ T8289] loop3: detected capacity change from 0 to 512 [ 100.465766][ T8290] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 100.474169][ T8289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.570423][ T8289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.578048][ T8290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.589040][ T8289] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.600661][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.668148][ T8296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.675788][ T8296] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 100.711449][ T8296] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 100.724320][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 100.731862][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.739521][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.747033][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.754527][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.761953][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.769449][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.776869][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.784319][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.791796][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.799204][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.806726][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.814119][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.821580][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.829287][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.836950][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.844409][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.851993][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.859409][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.866897][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.874292][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.881724][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.889148][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.896556][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.903955][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.911383][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.918945][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.926350][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.933809][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.941319][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.948736][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.956224][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.963645][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.971144][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.978576][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.986027][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.998161][ T8307] smc: net device bond0 applied user defined pnetid SYZ0 [ 100.998569][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.018491][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz0] on syz0 [ 101.026025][ T8308] smc: net device bond0 erased user defined pnetid SYZ0 [ 101.061640][ T8313] pimreg: entered allmulticast mode [ 101.107061][ T8320] __nla_validate_parse: 2 callbacks suppressed [ 101.107078][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1856'. [ 101.138551][ T8320] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 101.150098][ T8324] ip6erspan0: entered allmulticast mode [ 101.180030][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 101.277439][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1864'. [ 101.333061][ T8341] syz.2.1865[8341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.333205][ T8341] syz.2.1865[8341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.386966][ T8341] syz.2.1865[8341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.415311][ T8349] loop0: detected capacity change from 0 to 2048 [ 101.459900][ T8349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.488397][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 101.552137][ T8363] loop3: detected capacity change from 0 to 1024 [ 101.587470][ T8363] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 101.604949][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 101.605042][ T29] audit: type=1326 audit(1736583320.549:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.647137][ T29] audit: type=1326 audit(1736583320.589:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.670497][ T29] audit: type=1326 audit(1736583320.589:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.693922][ T29] audit: type=1326 audit(1736583320.589:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.698346][ T8368] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.717833][ T29] audit: type=1326 audit(1736583320.589:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.747869][ T29] audit: type=1326 audit(1736583320.589:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.753031][ T8349] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 101.771360][ T29] audit: type=1326 audit(1736583320.589:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.771421][ T29] audit: type=1326 audit(1736583320.589:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.779639][ T8349] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.798291][ T8349] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 101.803174][ T29] audit: type=1326 audit(1736583320.589:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.826542][ T8349] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.826542][ T8349] [ 101.826564][ T8349] EXT4-fs (loop0): Total free blocks count 0 [ 101.826577][ T8349] EXT4-fs (loop0): Free/Dirty block details [ 101.826592][ T8349] EXT4-fs (loop0): free_blocks=2415919104 [ 101.835336][ T29] audit: type=1326 audit(1736583320.589:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.1.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 101.847749][ T8349] EXT4-fs (loop0): dirty_blocks=8192 [ 101.847767][ T8349] EXT4-fs (loop0): Block reservation details [ 101.847778][ T8349] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 101.874174][ T8359] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 102.118636][ T8392] serio: Serial port ptm0 [ 102.150051][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 102.161828][ T8401] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 102.195695][ T8401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.197348][ T8412] loop4: detected capacity change from 0 to 128 [ 102.213245][ T8412] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.229503][ T8412] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.230207][ T8401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.254842][ T8401] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 102.266956][ T8401] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 102.279516][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.374030][ T8431] veth0_to_team: entered promiscuous mode [ 102.380020][ T8431] veth0_to_team: entered allmulticast mode [ 102.542158][ T8442] loop0: detected capacity change from 0 to 128 [ 102.550195][ T8442] ext4: Unknown parameter 'subj_user' [ 102.571505][ T8444] loop3: detected capacity change from 0 to 512 [ 102.578465][ T8444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.591555][ T8444] EXT4-fs (loop3): 1 truncate cleaned up [ 102.597705][ T8444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.612086][ T8444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.647990][ T8448] syz.3.1905[8448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.648119][ T8448] syz.3.1905[8448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.659817][ T8448] syz.3.1905[8448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.677371][ T8448] syz.3.1905[8448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.690773][ T8448] loop3: detected capacity change from 0 to 256 [ 102.708756][ T8448] msdos: Unknown parameter '"' [ 102.954440][ T8457] loop1: detected capacity change from 0 to 1024 [ 102.971076][ T8457] EXT4-fs: Ignoring removed orlov option [ 102.990565][ T8457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.101812][ T8465] loop2: detected capacity change from 0 to 1024 [ 103.128960][ T8465] EXT4-fs: Ignoring removed i_version option [ 103.150245][ T8465] EXT4-fs: Ignoring removed bh option [ 103.198234][ T8465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.343539][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.435665][ T8485] loop4: detected capacity change from 0 to 256 [ 103.595271][ T8498] IPv4: Oversized IP packet from 127.202.26.0 [ 103.822535][ T8514] loop2: detected capacity change from 0 to 512 [ 103.829492][ T8514] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.841643][ T8514] EXT4-fs error (device loop2): __ext4_iget:4984: inode #15: block 1803188595: comm syz.2.1932: invalid block [ 103.855439][ T8514] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1932: couldn't read orphan inode 15 (err -117) [ 103.868531][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.869565][ T8514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.890937][ T8514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.945671][ T8524] loop1: detected capacity change from 0 to 2048 [ 103.972616][ T8524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.012432][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.058390][ T8537] netlink: 'syz.2.1940': attribute type 1 has an invalid length. [ 104.072234][ T8537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.085507][ T8541] loop4: detected capacity change from 0 to 1024 [ 104.092910][ T8541] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 104.108662][ T8537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.116277][ T8537] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 104.119348][ T8541] siw: device registration error -23 [ 104.129205][ T8537] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 104.147241][ T8544] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 104.160126][ T8544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.180552][ T8544] bond2: (slave gretap1): making interface the new active one [ 104.189219][ T8544] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 104.261406][ T8554] loop4: detected capacity change from 0 to 2048 [ 104.278356][ T8554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.278408][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1950'. [ 104.320793][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.419651][ T8574] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1958'. [ 104.422140][ T8571] pim6reg: entered allmulticast mode [ 104.440244][ T8571] pim6reg: left allmulticast mode [ 104.448128][ T8574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1958'. [ 104.475745][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 104.515717][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 104.539518][ T8577] ip6gretap1: entered allmulticast mode [ 104.572870][ T8581] loop2: detected capacity change from 0 to 512 [ 104.588744][ T8581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.601338][ T8581] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.638758][ T8585] loop0: detected capacity change from 0 to 2048 [ 104.660210][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.671332][ T8585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.707005][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.741565][ T8595] loop2: detected capacity change from 0 to 512 [ 104.753693][ T8598] ref_ctr_offset mismatch. inode: 0x755 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 104.761714][ T8595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.777186][ T8595] EXT4-fs (loop2): 1 truncate cleaned up [ 104.783130][ T8595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.919916][ T8612] blktrace: Concurrent blktraces are not allowed on loop9 [ 104.992395][ T8617] vlan1: entered allmulticast mode [ 105.073545][ T8621] bpf_get_probe_write_proto: 5 callbacks suppressed [ 105.073565][ T8621] syz.4.1976[8621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.099875][ T8621] syz.4.1976[8621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.128772][ T8621] syz.4.1976[8621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.406246][ T8647] loop3: detected capacity change from 0 to 2048 [ 105.471519][ T8647] loop3: p1 < > p4 [ 105.476203][ T8647] loop3: p4 size 8388608 extends beyond EOD, truncated [ 105.800036][ T8691] loop1: detected capacity change from 0 to 128 [ 105.819220][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.863508][ T8691] syz.1.2008: attempt to access beyond end of device [ 105.863508][ T8691] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 105.881573][ T8697] loop2: detected capacity change from 0 to 2048 [ 105.908158][ T8697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.944171][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.967085][ T8711] loop2: detected capacity change from 0 to 256 [ 106.029628][ T8717] hsr_slave_0: left promiscuous mode [ 106.035577][ T8717] hsr_slave_1: left promiscuous mode [ 106.176164][ T8729] __nla_validate_parse: 2 callbacks suppressed [ 106.176183][ T8729] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2023'. [ 106.320315][ T8737] loop1: detected capacity change from 0 to 2048 [ 106.324720][ T8739] loop2: detected capacity change from 0 to 512 [ 106.333437][ T8738] loop4: detected capacity change from 0 to 2048 [ 106.335151][ T8739] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 106.349077][ T8739] EXT4-fs (loop2): invalid journal inode [ 106.354859][ T8739] EXT4-fs (loop2): can't get journal size [ 106.367012][ T8738] loop4: p1 < > p4 [ 106.371326][ T8739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 106.371773][ T8738] loop4: p4 size 8388608 extends beyond EOD, truncated [ 106.380661][ T8737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.398522][ T8739] System zones: 1-12, 13-13 [ 106.406766][ T8739] EXT4-fs (loop2): 1 truncate cleaned up [ 106.419988][ T8739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.460696][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.465560][ T3302] EXT4-fs error (device loop2): __ext4_iget:4984: inode #11: block 1828716567: comm syz-executor: invalid block [ 106.482068][ T3302] EXT4-fs error (device loop2): __ext4_iget:4984: inode #11: block 1828716567: comm syz-executor: invalid block [ 106.541697][ T7912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.573742][ T8755] macvlan0: entered promiscuous mode [ 106.581989][ T8755] ipvlan0: entered promiscuous mode [ 106.590664][ T8755] ipvlan0: left promiscuous mode [ 106.596148][ T8755] macvlan0: left promiscuous mode [ 106.671990][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 106.672008][ T29] audit: type=1400 audit(1736583325.619:3463): avc: denied { name_bind 0x1000000 } for pid=8766 comm="syz.3.2040" path="socket:[21677]" dev="sockfs" ino=21677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 106.768865][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 106.801138][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2042'. [ 106.858013][ T29] audit: type=1400 audit(1736583325.809:3464): avc: denied { mounton } for pid=8782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.900935][ T29] audit: type=1400 audit(1736583325.839:3465): avc: denied { tracepoint } for pid=8784 comm="syz.1.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.926990][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 107.000119][ T8797] loop4: detected capacity change from 0 to 512 [ 107.012629][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'. [ 107.035395][ T8797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.048320][ T8797] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.068622][ T8797] Process accounting resumed [ 107.087930][ T8797] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 107.124525][ T8782] chnl_net:caif_netlink_parms(): no params data found [ 107.133244][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.143074][ T8813] vlan3: entered promiscuous mode [ 107.153974][ T8813] .: entered promiscuous mode [ 107.158843][ T8813] bond_slave_0: entered promiscuous mode [ 107.164649][ T8813] bond_slave_1: entered promiscuous mode [ 107.173456][ T8813] .: left promiscuous mode [ 107.178070][ T8813] bond_slave_0: left promiscuous mode [ 107.183522][ T8813] bond_slave_1: left promiscuous mode [ 107.215531][ T8819] loop4: detected capacity change from 0 to 128 [ 107.222401][ T8819] EXT4-fs: Ignoring removed nobh option [ 107.230485][ T8821] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 107.230485][ T8821] program syz.3.2058 not setting count and/or reply_len properly [ 107.243026][ T8819] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.271096][ T8819] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.282688][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.289860][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.300427][ T8782] bridge_slave_0: entered allmulticast mode [ 107.309022][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.318741][ T8782] bridge_slave_0: entered promiscuous mode [ 107.318782][ T8827] loop3: detected capacity change from 0 to 512 [ 107.326059][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.338204][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.345906][ T8782] bridge_slave_1: entered allmulticast mode [ 107.347307][ T29] audit: type=1326 audit(1736583326.299:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.1.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 107.375341][ T29] audit: type=1326 audit(1736583326.299:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.1.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 107.377435][ T8827] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 107.401207][ T29] audit: type=1326 audit(1736583326.299:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.1.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 107.430650][ T29] audit: type=1326 audit(1736583326.299:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.1.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 107.433695][ T8827] EXT4-fs (loop3): invalid journal inode [ 107.454071][ T29] audit: type=1326 audit(1736583326.299:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.1.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 107.459901][ T8827] EXT4-fs (loop3): can't get journal size [ 107.483153][ T29] audit: type=1326 audit(1736583326.299:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.1.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 107.512376][ T29] audit: type=1326 audit(1736583326.299:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8828 comm="syz.1.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 107.512925][ T8782] bridge_slave_1: entered promiscuous mode [ 107.542099][ T8827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 107.550192][ T8827] System zones: 1-12, 13-13 [ 107.561579][ T8827] EXT4-fs (loop3): 1 truncate cleaned up [ 107.567889][ T8827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.568837][ T8832] loop4: detected capacity change from 0 to 1024 [ 107.595579][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.616473][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.619439][ T8832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.681596][ T8782] team0: Port device team_slave_0 added [ 107.705379][ T8782] team0: Port device team_slave_1 added [ 107.728571][ T8840] loop1: detected capacity change from 0 to 2048 [ 107.729437][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 107.744526][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.751948][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.777912][ T8782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.797748][ T3308] EXT4-fs error (device loop3): __ext4_iget:4984: inode #11: block 1828716567: comm syz-executor: invalid block [ 107.822656][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.829674][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.836621][ T3308] EXT4-fs error (device loop3): __ext4_iget:4984: inode #11: block 1828716567: comm syz-executor: invalid block [ 107.855746][ T8782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.941058][ T8782] hsr_slave_0: entered promiscuous mode [ 107.961407][ T8782] hsr_slave_1: entered promiscuous mode [ 107.986426][ T8782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.004178][ T8782] Cannot create hsr debugfs directory [ 108.111403][ T8093] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.127339][ T8782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.128483][ T8093] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.146658][ T8093] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.146658][ T8093] [ 108.153032][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.156292][ T8093] EXT4-fs (loop4): Total free blocks count 0 [ 108.163725][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.169706][ T8093] EXT4-fs (loop4): Free/Dirty block details [ 108.169725][ T8093] EXT4-fs (loop4): free_blocks=68451041280 [ 108.177127][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.183049][ T8093] EXT4-fs (loop4): dirty_blocks=16384 [ 108.191023][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.196271][ T8093] EXT4-fs (loop4): Block reservation details [ 108.196288][ T8093] EXT4-fs (loop4): i_reserved_data_blocks=1024 [ 108.201729][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.219718][ T8782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.221468][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.233971][ T8093] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 108.235694][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.263588][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.271058][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.278532][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.285932][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.293377][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.300872][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.308284][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.315795][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.319916][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.323274][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.333856][ T8782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.339621][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.353934][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.361475][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.368910][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.376362][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.383836][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.391259][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.398755][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.406200][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.413656][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.421137][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.428772][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.436233][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.443665][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.451767][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 108.472750][ T8782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.498102][ T8861] syz.4.2072[8861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.498183][ T8861] syz.4.2072[8861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.528536][ T8861] syz.4.2072[8861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.555177][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.576635][ T8861] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2072'. [ 108.581732][ T8782] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.595761][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.602873][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.622636][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.629809][ T8093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.655142][ T8870] loop4: detected capacity change from 0 to 512 [ 108.675626][ T8782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.686044][ T8782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.705773][ T8870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.722941][ T8870] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.787832][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.809886][ T8864] chnl_net:caif_netlink_parms(): no params data found [ 108.829113][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.917759][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.924970][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.939211][ T8864] bridge_slave_0: entered allmulticast mode [ 108.947778][ T8864] bridge_slave_0: entered promiscuous mode [ 108.955461][ T8905] @: renamed from vlan0 (while UP) [ 108.977017][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.984208][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.991513][ T8864] bridge_slave_1: entered allmulticast mode [ 108.998035][ T8864] bridge_slave_1: entered promiscuous mode [ 109.047556][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.080682][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.169878][ T8864] team0: Port device team_slave_0 added [ 109.186033][ T8864] team0: Port device team_slave_1 added [ 109.224993][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.232178][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.258343][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.274236][ T8782] veth0_vlan: entered promiscuous mode [ 109.283890][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.290967][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.317074][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.345026][ T8782] veth1_vlan: entered promiscuous mode [ 109.362842][ T8864] hsr_slave_0: entered promiscuous mode [ 109.368985][ T8864] hsr_slave_1: entered promiscuous mode [ 109.374918][ T8864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.383047][ T8864] Cannot create hsr debugfs directory [ 109.424048][ T8937] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2093'. [ 109.434050][ T8782] veth0_macvtap: entered promiscuous mode [ 109.441585][ T8782] veth1_macvtap: entered promiscuous mode [ 109.475610][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.486216][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.496260][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.506739][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.516699][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.527167][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.531767][ T8942] syz.0.2095[8942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.537580][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.554946][ T8942] syz.0.2095[8942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.559471][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.560246][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.578338][ T8942] syz.0.2095[8942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.583995][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.609854][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.619768][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.630273][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.640125][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.650601][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.660477][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.671007][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.680872][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.691347][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.702293][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.718471][ T8782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.727602][ T8782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.736304][ T8782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.745136][ T8782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.788965][ T8945] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2096'. [ 109.798699][ T8945] netlink: 'syz.0.2096': attribute type 9 has an invalid length. [ 109.806458][ T8945] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2096'. [ 109.845264][ T8864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.856215][ T8864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.865580][ T8864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.881201][ T8864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.922062][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.935800][ T8864] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.945813][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.952952][ T8093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.969309][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.976468][ T8093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.980987][ T8952] loop5: detected capacity change from 0 to 1024 [ 110.008788][ T8952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.022369][ T8952] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.037676][ T8952] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 110.050062][ T8952] EXT4-fs (loop5): This should not happen!! Data will be lost [ 110.050062][ T8952] [ 110.059874][ T8952] EXT4-fs (loop5): Total free blocks count 0 [ 110.066092][ T8952] EXT4-fs (loop5): Free/Dirty block details [ 110.072070][ T8952] EXT4-fs (loop5): free_blocks=0 [ 110.077294][ T8952] EXT4-fs (loop5): dirty_blocks=0 [ 110.082418][ T8952] EXT4-fs (loop5): Block reservation details [ 110.088507][ T8952] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 110.111546][ T8782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.141091][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.249601][ T8984] loop4: detected capacity change from 0 to 512 [ 110.266235][ T8987] loop5: detected capacity change from 0 to 256 [ 110.279654][ T8987] FAT-fs (loop5): Directory bread(block 64) failed [ 110.286752][ T8987] FAT-fs (loop5): Directory bread(block 65) failed [ 110.293402][ T8987] FAT-fs (loop5): Directory bread(block 66) failed [ 110.300238][ T8987] FAT-fs (loop5): Directory bread(block 67) failed [ 110.306833][ T8987] FAT-fs (loop5): Directory bread(block 68) failed [ 110.308406][ T8984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.313429][ T8987] FAT-fs (loop5): Directory bread(block 69) failed [ 110.332577][ T8987] FAT-fs (loop5): Directory bread(block 70) failed [ 110.339542][ T8987] FAT-fs (loop5): Directory bread(block 71) failed [ 110.346200][ T8987] FAT-fs (loop5): Directory bread(block 72) failed [ 110.352862][ T8987] FAT-fs (loop5): Directory bread(block 73) failed [ 110.364251][ T8984] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.367621][ T8864] veth0_vlan: entered promiscuous mode [ 110.395790][ T8864] veth1_vlan: entered promiscuous mode [ 110.411353][ T8864] veth0_macvtap: entered promiscuous mode [ 110.419319][ T8864] veth1_macvtap: entered promiscuous mode [ 110.438352][ T8987] syz.5.2108: attempt to access beyond end of device [ 110.438352][ T8987] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 110.449474][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.462730][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.472616][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.472782][ T8987] syz.5.2108: attempt to access beyond end of device [ 110.472782][ T8987] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 110.483130][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.483149][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.516733][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.526582][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.537232][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.547164][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.557657][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.571784][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.591953][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.609745][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.620310][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.630179][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.640652][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.650886][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.661354][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.671265][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.681740][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.691609][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.702098][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.712030][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.722675][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.734471][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.742962][ T8864] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.751829][ T8864] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.760589][ T8864] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.769453][ T8864] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.991029][ T9035] netlink: 'syz.1.2123': attribute type 4 has an invalid length. [ 111.175562][ T9056] raw_sendmsg: syz.1.2134 forgot to set AF_INET. Fix it! [ 111.328617][ T9068] __nla_validate_parse: 4 callbacks suppressed [ 111.328635][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.343873][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.354928][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.375770][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.384873][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.394422][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.421234][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.430340][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.434034][ T9079] loop0: detected capacity change from 0 to 128 [ 111.439738][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2137'. [ 111.477265][ T9079] syz.0.2140: attempt to access beyond end of device [ 111.477265][ T9079] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 111.525534][ T9087] loop6: detected capacity change from 0 to 512 [ 111.539048][ T9087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.551937][ T9087] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.587738][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.674207][ T9098] loop6: detected capacity change from 0 to 512 [ 111.688246][ T9098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.700981][ T9098] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.713546][ T9098] __quota_error: 382 callbacks suppressed [ 111.713564][ T9098] Quota error (device loop6): do_check_range: Getting block 4128768 out of range 0-5 [ 111.741088][ T8864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.756434][ T9104] loop0: detected capacity change from 0 to 1024 [ 111.763576][ T9104] EXT4-fs: Ignoring removed orlov option [ 111.769332][ T9104] EXT4-fs: Ignoring removed orlov option [ 111.779154][ T9104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.795006][ T9104] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.0.2150: corrupted in-inode xattr: bad magic number in in-inode xattr [ 111.810899][ T9104] EXT4-fs (loop0): Remounting filesystem read-only [ 111.820637][ T9104] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 111.829622][ T9104] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 111.838598][ T9104] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 111.866058][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.938579][ T9118] $Hÿ: renamed from bond0 (while UP) [ 111.946400][ T9118] $Hÿ: entered promiscuous mode [ 111.951795][ T9118] bond_slave_0: entered promiscuous mode [ 111.957619][ T9118] bond_slave_1: entered promiscuous mode [ 111.963504][ T9118] team0: entered promiscuous mode [ 111.968780][ T9118] team_slave_0: entered promiscuous mode [ 111.974586][ T9118] team_slave_1: entered promiscuous mode [ 111.980504][ T9118] dummy0: entered promiscuous mode [ 112.151414][ T9128] loop5: detected capacity change from 0 to 512 [ 112.239201][ T9128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.280052][ T9128] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.306721][ T29] audit: type=1326 audit(1736583331.239:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 112.330294][ T29] audit: type=1326 audit(1736583331.239:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 112.353867][ T29] audit: type=1326 audit(1736583331.249:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 112.377408][ T29] audit: type=1326 audit(1736583331.249:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 112.400867][ T29] audit: type=1326 audit(1736583331.249:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 112.424405][ T29] audit: type=1326 audit(1736583331.249:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 112.448154][ T29] audit: type=1326 audit(1736583331.249:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 112.496836][ T9128] Quota error (device loop5): do_check_range: Getting block 4128768 out of range 0-5 [ 112.516566][ T29] audit: type=1326 audit(1736583331.379:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d5bd5d29 code=0x7ffc0000 [ 112.567170][ T9124] Set syz1 is full, maxelem 65536 reached [ 112.573269][ T8782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.711941][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2170'. [ 112.840130][ T9174] loop4: detected capacity change from 0 to 128 [ 112.990110][ T9191] tipc: Started in network mode [ 112.995033][ T9191] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 113.006797][ T9191] tipc: Enabled bearer , priority 10 [ 113.131988][ T9200] loop5: detected capacity change from 0 to 512 [ 113.148202][ T9200] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.164396][ T9200] EXT4-fs (loop5): mount failed [ 113.194762][ T9206] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.202951][ T9206] syzkaller0: entered promiscuous mode [ 113.208482][ T9206] syzkaller0: entered allmulticast mode [ 113.255985][ T9210] syz.4.2191[9210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.256062][ T9210] syz.4.2191[9210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.269233][ T9210] syz.4.2191[9210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.285054][ T9214] program syz.0.2193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.315424][ T9216] loop1: detected capacity change from 0 to 2048 [ 113.334851][ T9218] loop0: detected capacity change from 0 to 1024 [ 113.338135][ T9216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.357072][ T9216] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 113.373817][ T9218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.392417][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.427530][ T9227] loop1: detected capacity change from 0 to 512 [ 113.440143][ T9227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.447413][ T9230] EXT4-fs (loop0): shut down requested (0) [ 113.452986][ T9227] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.492257][ T3538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.556823][ T8093] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 113.593699][ T8093] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 113.606255][ T8093] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.606255][ T8093] [ 113.615939][ T8093] EXT4-fs (loop0): Total free blocks count 0 [ 113.622014][ T8093] EXT4-fs (loop0): Free/Dirty block details [ 113.627974][ T8093] EXT4-fs (loop0): free_blocks=68451041280 [ 113.633995][ T8093] EXT4-fs (loop0): dirty_blocks=6432 [ 113.639371][ T8093] EXT4-fs (loop0): Block reservation details [ 113.645408][ T8093] EXT4-fs (loop0): i_reserved_data_blocks=402 [ 113.763811][ T9255] loop1: detected capacity change from 0 to 512 [ 113.807194][ T9259] netlink: 'syz.1.2211': attribute type 13 has an invalid length. [ 113.828878][ T9261] loop0: detected capacity change from 0 to 128 [ 113.843167][ T9261] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.857709][ T9261] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.869093][ T9264] loop5: detected capacity change from 0 to 512 [ 113.897625][ T9259] gretap0: refused to change device tx_queue_len [ 113.905130][ T9259] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.923737][ T9264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.937061][ T9264] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.965417][ T9268] syz.1.2213[9268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.965901][ T9268] syz.1.2213[9268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.977488][ T9268] syz.1.2213[9268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.001823][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.039798][ T8782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.057273][ T9274] loop0: detected capacity change from 0 to 2048 [ 114.126751][ T3381] tipc: Node number set to 4269801488 [ 114.275710][ T9309] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 114.365076][ T9327] syz.5.2238[9327] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.365216][ T9327] syz.5.2238[9327] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.378422][ T9327] syz.5.2238[9327] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.415411][ T9331] loop5: detected capacity change from 0 to 512 [ 114.435442][ T9331] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 114.446992][ T9331] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 114.457168][ T9331] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2240: Corrupt directory, running e2fsck is recommended [ 114.471291][ T9331] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 114.479783][ T9331] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2240: corrupted in-inode xattr: invalid ea_ino [ 114.493616][ T9331] EXT4-fs (loop5): Remounting filesystem read-only [ 114.501130][ T9331] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 114.505989][ T9336] loop0: detected capacity change from 0 to 512 [ 114.514585][ T9336] EXT4-fs: Ignoring removed i_version option [ 114.520686][ T9336] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.528907][ T9336] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 114.541591][ T9336] loop0: detected capacity change from 0 to 512 [ 114.569057][ T9336] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.584411][ T9336] EXT4-fs (loop0): shut down requested (2) [ 114.735734][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.742991][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.754388][ T9349] bridge_slave_1: left allmulticast mode [ 114.760094][ T9349] bridge_slave_1: left promiscuous mode [ 114.765762][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.773743][ T9349] bridge_slave_0: left allmulticast mode [ 114.779495][ T9349] bridge_slave_0: left promiscuous mode [ 114.785151][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.920658][ T9360] loop6: detected capacity change from 0 to 128 [ 114.942267][ T9360] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.018634][ T9370] loop5: detected capacity change from 0 to 1024 [ 115.025404][ T9370] EXT4-fs: Ignoring removed orlov option [ 115.051546][ T9373] loop1: detected capacity change from 0 to 512 [ 115.064220][ T9373] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2256: invalid indirect mapped block 256 (level 2) [ 115.090580][ T9373] EXT4-fs (loop1): 2 truncates cleaned up [ 115.515098][ T9377] ================================================================== [ 115.523254][ T9377] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 115.531551][ T9377] [ 115.533899][ T9377] write to 0xffff88811664e170 of 8 bytes by task 9370 on cpu 1: [ 115.541537][ T9377] filemap_splice_read+0x6c4/0x910 [ 115.546668][ T9377] ext4_file_splice_read+0x8f/0xb0 [ 115.551808][ T9377] splice_direct_to_actor+0x269/0x670 [ 115.557204][ T9377] do_splice_direct+0xd7/0x150 [ 115.561987][ T9377] do_sendfile+0x398/0x660 [ 115.566416][ T9377] __x64_sys_sendfile64+0x110/0x150 [ 115.571622][ T9377] x64_sys_call+0xfbd/0x2dc0 [ 115.576225][ T9377] do_syscall_64+0xc9/0x1c0 [ 115.580748][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.586684][ T9377] [ 115.589010][ T9377] write to 0xffff88811664e170 of 8 bytes by task 9377 on cpu 0: [ 115.596644][ T9377] filemap_splice_read+0x6c4/0x910 [ 115.601770][ T9377] ext4_file_splice_read+0x8f/0xb0 [ 115.606899][ T9377] splice_direct_to_actor+0x269/0x670 [ 115.612286][ T9377] do_splice_direct+0xd7/0x150 [ 115.617061][ T9377] do_sendfile+0x398/0x660 [ 115.621487][ T9377] __x64_sys_sendfile64+0x110/0x150 [ 115.626694][ T9377] x64_sys_call+0xfbd/0x2dc0 [ 115.631297][ T9377] do_syscall_64+0xc9/0x1c0 [ 115.635813][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.641730][ T9377] [ 115.644051][ T9377] value changed: 0x0000000000000907 -> 0x0000000000000908 [ 115.651158][ T9377] [ 115.653484][ T9377] Reported by Kernel Concurrency Sanitizer on: [ 115.659632][ T9377] CPU: 0 UID: 0 PID: 9377 Comm: syz.5.2255 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 115.670315][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.680376][ T9377] ==================================================================