last executing test programs: 2.00747679s ago: executing program 3 (id=209): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.966376374s ago: executing program 3 (id=210): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/12, 0xc, 0x0, &(0x7f0000000280)=""/237, 0xed}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095", @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0xa, 0x3, 0x3a) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x494, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x464, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x32a}}}]}]}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffffff, 0x0, 0x101, 0x8000, 0x10000, 0x0, 0x6, 0x7, 0xff, 0x3, 0x3, 0x9, 0x204, 0x3, 0x9, 0x6, 0xe8, 0x9, 0x80, 0xffffffff, 0x8, 0x51, 0x80000001, 0xc992, 0x7, 0xe, 0x7, 0x5, 0x100, 0xd, 0x1, 0x100, 0xa9, 0x7, 0x9, 0x2, 0x1, 0x1d, 0xff, 0x2, 0x9, 0x0, 0x7, 0x5, 0x7fffffff, 0xffffffff, 0x1, 0x9, 0x522edf2b, 0x0, 0x4, 0x6f4b, 0x5, 0x22c767a3, 0x801e, 0x5, 0xffffff30, 0x2, 0x3f0, 0x5, 0x8, 0x2, 0x9, 0x0, 0x101, 0x100, 0x8, 0x6, 0x10, 0x9, 0x5, 0x7, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x4, 0x2, 0x4, 0x400, 0x76c2, 0x0, 0x4, 0x5f, 0x401, 0x8, 0xfff, 0x8b1f, 0x1ff, 0x5, 0x10001, 0x7fffffff, 0x91, 0x7, 0x1, 0x2, 0x0, 0x5, 0x400, 0x3, 0x0, 0x1, 0x7, 0x3010, 0x3, 0x2, 0x318a8646, 0x9, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9, 0x6a9e, 0xffffffff, 0x4, 0x3a, 0x7, 0xaa1, 0x3, 0x3, 0x4, 0x631, 0x4, 0xfffffff9, 0x9, 0x1, 0xa5, 0x9, 0x0, 0xd, 0xfffffffa, 0x0, 0x9, 0xf32, 0x6a, 0x7, 0x4, 0x4, 0x0, 0xff, 0xfffffff8, 0x6, 0x1000, 0x8, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x78, 0x87, 0xa25, 0x3, 0x789, 0x3, 0x4a, 0x3, 0x0, 0x7, 0x7, 0x8001, 0xffff, 0x16, 0x5, 0x80, 0xf, 0x7, 0xfffffffb, 0xe8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x7ff, 0x7, 0x7, 0x8, 0x0, 0x401, 0x7fffffff, 0xb, 0xd, 0x9, 0x200, 0x2, 0x822, 0x10000, 0x1, 0x9, 0x5ca, 0x4, 0x0, 0x100, 0x3, 0x1, 0x16, 0x249, 0x4, 0x1000, 0x5, 0x7, 0xc3, 0x80000001, 0xae9, 0x1f34, 0x9, 0x400, 0x9, 0x80000001, 0x80000006, 0x1, 0x9, 0x8, 0xfff, 0x5, 0x2489440, 0x5c, 0xfe, 0xc, 0xfffffffa, 0x2, 0xfffffff8, 0x7, 0x6, 0x79a, 0x0, 0x401, 0x2, 0x5, 0xf52, 0x9, 0xfffffffe, 0x7, 0x5, 0x687, 0x1, 0x1, 0x2, 0xb, 0xfffffffc, 0x8, 0x4, 0x4, 0x1, 0x1, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8f, 0x4, 0xe16, 0x6, 0xcc9, {0x7, 0x1, 0x3, 0x4, 0x5, 0xfffffffd}, {0x7f, 0x2, 0x25, 0x1, 0x2}, 0x7f0, 0x8, 0x3}}]}]}}]}, 0x494}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.818671756s ago: executing program 1 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000018c0)) 1.778519249s ago: executing program 1 (id=218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) 1.689833247s ago: executing program 1 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010011000000060003400000000014000180080001007f00000108000200000000000c001980080001000d000000d7c4a70270bedaa912a4b36043f12264b3757eb00dff413766d2dd42707d1e82d8f565fab51121d638b3c7d9442c6115c40e57b3dd12b7d61f88ae1e63e0278269526d00aa0b"], 0x54}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000007c0)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@noinit_itable}, {@mb_optimize_scan}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x0, 0x5d8, &(0x7f0000000c00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100008000000000050000009500000800000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/66, 0x42}], 0x1}, 0x100) socket$igmp(0x2, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=r3, @ANYBLOB="004330486def3c3e000000727370616edc001c00028005001600000000000600100000000000060022000000000000000000000002fb82cc5b9c"], 0x4c}}, 0x0) 1.293798101s ago: executing program 1 (id=227): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee01, 0x0, r1) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x70}}, 0x44) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000300)='./file0\x00') 1.167160852s ago: executing program 0 (id=231): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1.150501663s ago: executing program 1 (id=233): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = inotify_init() readv(r3, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) 1.143772024s ago: executing program 0 (id=234): statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@data_err_ignore}, {@sysvgroups}, {@bsdgroups}, {@grpjquota}, {@norecovery}, {@errors_remount}, {@i_version}], [{@fowner_lt={'fowner<', r0}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xffffffee, 0x7fff, 0x200, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x20000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r6 = dup(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007b4"], 0x28}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000003607f38bea8444", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES8=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) mount_setattr(r1, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={0x70, 0x0, 0x160000, {r8}}, 0x20) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000204c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01020000000000000000020202000900010073797a3000000000140002"], 0x40}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000000000a800000", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYRESHEX=r11], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.079806949s ago: executing program 3 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000018c0)) 1.06490142s ago: executing program 3 (id=236): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001e200", @ANYBLOB="0000000000000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x4e00, 0x2, 0x0, 0xbe01, 0x0, "ec28a1ba80a20507"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x80000000}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r5, r5, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES8=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 1.047281212s ago: executing program 0 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010011000000060003400000000014000180080001007f00000108000200000000000c001980080001000d000000d7c4a70270bedaa912a4b36043f12264b3757eb00dff413766d2dd42707d1e82d8f565fab51121d638b3c7d9442c6115c40e57b3dd12b7d61f88ae1e63e0278269526d00aa0b"], 0x54}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000007c0)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@noinit_itable}, {@mb_optimize_scan}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x0, 0x5d8, &(0x7f0000000c00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100008000000000050000009500000800000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/66, 0x42}], 0x1}, 0x100) socket$igmp(0x2, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=r3, @ANYBLOB="004330486def3c3e000000727370616edc001c00028005001600000000000600100000000000060022000000000000000000000002fb82cc5b9c"], 0x4c}}, 0x0) 890.987825ms ago: executing program 0 (id=242): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) 735.089708ms ago: executing program 0 (id=243): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee01, 0x0, r1) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x70}}, 0x44) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000300)='./file0\x00') 626.535237ms ago: executing program 0 (id=245): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/12, 0xc, 0x0, &(0x7f0000000280)=""/237, 0xed}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095", @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0xa, 0x3, 0x3a) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x494, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x464, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x32a}}}]}]}, @TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffffff, 0x0, 0x101, 0x8000, 0x10000, 0x0, 0x6, 0x7, 0xff, 0x3, 0x3, 0x9, 0x204, 0x3, 0x9, 0x6, 0xe8, 0x9, 0x80, 0xffffffff, 0x8, 0x51, 0x80000001, 0xc992, 0x7, 0xe, 0x7, 0x5, 0x100, 0xd, 0x1, 0x100, 0xa9, 0x7, 0x9, 0x2, 0x1, 0x1d, 0xff, 0x2, 0x9, 0x0, 0x7, 0x5, 0x7fffffff, 0xffffffff, 0x1, 0x9, 0x522edf2b, 0x0, 0x4, 0x6f4b, 0x5, 0x22c767a3, 0x801e, 0x5, 0xffffff30, 0x2, 0x3f0, 0x5, 0x8, 0x2, 0x9, 0x0, 0x101, 0x100, 0x8, 0x6, 0x10, 0x9, 0x5, 0x7, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x4, 0x2, 0x4, 0x400, 0x76c2, 0x0, 0x4, 0x5f, 0x401, 0x8, 0xfff, 0x8b1f, 0x1ff, 0x5, 0x10001, 0x7fffffff, 0x91, 0x7, 0x1, 0x2, 0x0, 0x5, 0x400, 0x3, 0x0, 0x1, 0x7, 0x3010, 0x3, 0x2, 0x318a8646, 0x9, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9, 0x6a9e, 0xffffffff, 0x4, 0x3a, 0x7, 0xaa1, 0x3, 0x3, 0x4, 0x631, 0x4, 0xfffffff9, 0x9, 0x1, 0xa5, 0x9, 0x0, 0xd, 0xfffffffa, 0x0, 0x9, 0xf32, 0x6a, 0x7, 0x4, 0x4, 0x0, 0xff, 0xfffffff8, 0x6, 0x1000, 0x8, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x78, 0x87, 0xa25, 0x3, 0x789, 0x3, 0x4a, 0x3, 0x0, 0x7, 0x7, 0x8001, 0xffff, 0x16, 0x5, 0x80, 0xf, 0x7, 0xfffffffb, 0xe8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x7ff, 0x7, 0x7, 0x8, 0x0, 0x401, 0x7fffffff, 0xb, 0xd, 0x9, 0x200, 0x2, 0x822, 0x10000, 0x1, 0x9, 0x5ca, 0x4, 0x0, 0x100, 0x3, 0x1, 0x16, 0x249, 0x4, 0x1000, 0x5, 0x7, 0xc3, 0x80000001, 0xae9, 0x1f34, 0x9, 0x400, 0x9, 0x80000001, 0x80000006, 0x1, 0x9, 0x8, 0xfff, 0x5, 0x2489440, 0x5c, 0xfe, 0xc, 0xfffffffa, 0x2, 0xfffffff8, 0x7, 0x6, 0x79a, 0x0, 0x401, 0x2, 0x5, 0xf52, 0x9, 0xfffffffe, 0x7, 0x5, 0x687, 0x1, 0x1, 0x2, 0xb, 0xfffffffc, 0x8, 0x4, 0x4, 0x1, 0x1, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8f, 0x4, 0xe16, 0x6, 0xcc9, {0x7, 0x1, 0x3, 0x4, 0x5, 0xfffffffd}, {0x7f, 0x2, 0x25, 0x1, 0x2}, 0x7f0, 0x8, 0x3}}]}]}}]}, 0x494}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 605.511129ms ago: executing program 4 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000018c0)) 584.464071ms ago: executing program 4 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 565.276832ms ago: executing program 4 (id=248): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 499.931688ms ago: executing program 2 (id=249): statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@data_err_ignore}, {@sysvgroups}, {@bsdgroups}, {@grpjquota}, {@norecovery}, {@errors_remount}, {@i_version}], [{@fowner_lt={'fowner<', r0}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xffffffee, 0x7fff, 0x200, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x20000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r6 = dup(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007b4"], 0x28}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000003607f38bea8444", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES8=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) mount_setattr(r1, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={0x70, 0x0, 0x160000, {r8}}, 0x20) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000204c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01020000000000000000020202000900010073797a3000000000140002"], 0x40}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000000000a800000", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYRESHEX=r11], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 419.052725ms ago: executing program 4 (id=250): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 116.865271ms ago: executing program 2 (id=251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) 116.583501ms ago: executing program 1 (id=252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010011000000060003400000000014000180080001007f00000108000200000000000c001980080001000d000000d7c4a70270bedaa912a4b36043f12264b3757eb00dff413766d2dd42707d1e82d8f565fab51121d638b3c7d9442c6115c40e57b3dd12b7d61f88ae1e63e0278269526d00aa0b"], 0x54}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000007c0)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@noinit_itable}, {@mb_optimize_scan}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x0, 0x5d8, &(0x7f0000000c00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100008000000000050000009500000800000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/66, 0x42}], 0x1}, 0x100) socket$igmp(0x2, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=r3, @ANYBLOB="004330486def3c3e000000727370616edc001c00028005001600000000000600100000000000060022000000000000000000000002fb82cc5b9c"], 0x4c}}, 0x0) 102.709492ms ago: executing program 3 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000018c0)) 76.528784ms ago: executing program 2 (id=254): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r2, &(0x7f00000031c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) 75.518794ms ago: executing program 4 (id=255): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee01, 0x0, r1) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x70}}, 0x44) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000300)='./file0\x00') 59.984855ms ago: executing program 3 (id=256): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x12) socket$inet6(0xa, 0x6, 0xffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1_to_bridge\x00', 0x4}, 0x18) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 52.711196ms ago: executing program 2 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000018c0)) 30.389988ms ago: executing program 2 (id=258): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 12.173249ms ago: executing program 4 (id=259): bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 2 (id=260): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000fc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000380)='./file0\x00', 0x0, r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.464242][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 15.464255][ T29] audit: type=1400 audit(1725034741.324:76): avc: denied { transition } for pid=3139 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.468642][ T29] audit: type=1400 audit(1725034741.324:77): avc: denied { noatsecure } for pid=3139 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.471424][ T29] audit: type=1400 audit(1725034741.324:78): avc: denied { write } for pid=3139 comm="sh" path="pipe:[1612]" dev="pipefs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.474599][ T29] audit: type=1400 audit(1725034741.324:79): avc: denied { rlimitinh } for pid=3139 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.477082][ T29] audit: type=1400 audit(1725034741.324:80): avc: denied { siginh } for pid=3139 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.894034][ T3142] sftp-server (3142) used greatest stack depth: 11368 bytes left [ 19.194969][ T29] audit: type=1400 audit(1725034745.054:81): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 22.566518][ T29] audit: type=1400 audit(1725034748.424:82): avc: denied { mounton } for pid=3248 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.567524][ T3248] cgroup: Unknown subsys name 'net' [ 22.589224][ T29] audit: type=1400 audit(1725034748.424:83): avc: denied { mount } for pid=3248 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.616735][ T29] audit: type=1400 audit(1725034748.454:84): avc: denied { unmount } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.785450][ T3248] cgroup: Unknown subsys name 'rlimit' [ 22.907325][ T29] audit: type=1400 audit(1725034748.764:85): avc: denied { setattr } for pid=3248 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.930682][ T29] audit: type=1400 audit(1725034748.764:86): avc: denied { create } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.938807][ T3251] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.951087][ T29] audit: type=1400 audit(1725034748.764:87): avc: denied { write } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.980022][ T29] audit: type=1400 audit(1725034748.764:88): avc: denied { read } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.983369][ T3248] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.000396][ T29] audit: type=1400 audit(1725034748.764:89): avc: denied { mounton } for pid=3248 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.033757][ T29] audit: type=1400 audit(1725034748.764:90): avc: denied { mount } for pid=3248 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.056973][ T29] audit: type=1400 audit(1725034748.824:91): avc: denied { relabelto } for pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.043630][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 24.118139][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 24.144779][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 24.154798][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.161850][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.169179][ T3258] bridge_slave_0: entered allmulticast mode [ 24.175581][ T3258] bridge_slave_0: entered promiscuous mode [ 24.182221][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.189302][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.196558][ T3258] bridge_slave_1: entered allmulticast mode [ 24.203080][ T3258] bridge_slave_1: entered promiscuous mode [ 24.244513][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.259089][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.298062][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.305187][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.312348][ T3259] bridge_slave_0: entered allmulticast mode [ 24.318685][ T3259] bridge_slave_0: entered promiscuous mode [ 24.326843][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.333956][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.341083][ T3259] bridge_slave_1: entered allmulticast mode [ 24.347456][ T3259] bridge_slave_1: entered promiscuous mode [ 24.358438][ T3258] team0: Port device team_slave_0 added [ 24.364139][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.371277][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.378480][ T3264] bridge_slave_0: entered allmulticast mode [ 24.384780][ T3264] bridge_slave_0: entered promiscuous mode [ 24.393144][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.400236][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.407473][ T3264] bridge_slave_1: entered allmulticast mode [ 24.413667][ T3264] bridge_slave_1: entered promiscuous mode [ 24.420066][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 24.437944][ T3258] team0: Port device team_slave_1 added [ 24.462734][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.479782][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.498199][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.505254][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.531138][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.542554][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.559891][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.575127][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.582064][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.608028][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.630012][ T3259] team0: Port device team_slave_0 added [ 24.635751][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 24.654021][ T3264] team0: Port device team_slave_0 added [ 24.660310][ T3264] team0: Port device team_slave_1 added [ 24.668683][ T3259] team0: Port device team_slave_1 added [ 24.685685][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.692634][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.718732][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.747437][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.754570][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.782181][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.812873][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.819882][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.846183][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.857013][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.864161][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.871330][ T3260] bridge_slave_0: entered allmulticast mode [ 24.877689][ T3260] bridge_slave_0: entered promiscuous mode [ 24.887487][ T3258] hsr_slave_0: entered promiscuous mode [ 24.893619][ T3258] hsr_slave_1: entered promiscuous mode [ 24.909147][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.916210][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.942300][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.953289][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.960414][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.967831][ T3260] bridge_slave_1: entered allmulticast mode [ 24.974547][ T3260] bridge_slave_1: entered promiscuous mode [ 25.015360][ T3259] hsr_slave_0: entered promiscuous mode [ 25.022072][ T3259] hsr_slave_1: entered promiscuous mode [ 25.028534][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.036685][ T3259] Cannot create hsr debugfs directory [ 25.055525][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.066507][ T3264] hsr_slave_0: entered promiscuous mode [ 25.072799][ T3264] hsr_slave_1: entered promiscuous mode [ 25.078904][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.086916][ T3264] Cannot create hsr debugfs directory [ 25.099303][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.106423][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.113694][ T3262] bridge_slave_0: entered allmulticast mode [ 25.120127][ T3262] bridge_slave_0: entered promiscuous mode [ 25.129006][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.136115][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.143254][ T3262] bridge_slave_1: entered allmulticast mode [ 25.149688][ T3262] bridge_slave_1: entered promiscuous mode [ 25.156522][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.203477][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.221559][ T3260] team0: Port device team_slave_0 added [ 25.232958][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.247132][ T3260] team0: Port device team_slave_1 added [ 25.281701][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.288808][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.314719][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.326383][ T3262] team0: Port device team_slave_0 added [ 25.344912][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.351905][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.377917][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.389379][ T3262] team0: Port device team_slave_1 added [ 25.437059][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.444043][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.470260][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.481669][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.488650][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.514527][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.525173][ T3258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.548848][ T3260] hsr_slave_0: entered promiscuous mode [ 25.554867][ T3260] hsr_slave_1: entered promiscuous mode [ 25.560659][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.568358][ T3260] Cannot create hsr debugfs directory [ 25.573898][ T3258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.582529][ T3258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.593207][ T3258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.635008][ T3262] hsr_slave_0: entered promiscuous mode [ 25.640937][ T3262] hsr_slave_1: entered promiscuous mode [ 25.646747][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.654488][ T3262] Cannot create hsr debugfs directory [ 25.681550][ T3259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.690098][ T3259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.702013][ T3259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.726787][ T3259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.764314][ T3264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.775013][ T3264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.784143][ T3264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.802957][ T3264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.827760][ T3260] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.838448][ T3260] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.851915][ T3260] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.861008][ T3260] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.895729][ T3262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.926822][ T3262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.936563][ T3262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.945560][ T3262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.973221][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.986027][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.993096][ T3262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.010336][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.019177][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.027735][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.040235][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.047356][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.077848][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.084946][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.116119][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.128063][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.142960][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.175561][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.183643][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.190756][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.203103][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.221156][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.228265][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.236997][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.244206][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.252691][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.259773][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.268394][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.275455][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.304478][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.311534][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.329114][ T3258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.339534][ T3258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.358857][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.380905][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.449702][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.475572][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.494867][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.501981][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.521696][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.528803][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.552385][ T3262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.562922][ T3262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.578380][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.591926][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.690089][ T3259] veth0_vlan: entered promiscuous mode [ 26.707920][ T3259] veth1_vlan: entered promiscuous mode [ 26.714770][ T3258] veth0_vlan: entered promiscuous mode [ 26.722682][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.737438][ T3258] veth1_vlan: entered promiscuous mode [ 26.774819][ T3259] veth0_macvtap: entered promiscuous mode [ 26.794900][ T3264] veth0_vlan: entered promiscuous mode [ 26.802756][ T3258] veth0_macvtap: entered promiscuous mode [ 26.810590][ T3260] veth0_vlan: entered promiscuous mode [ 26.818182][ T3264] veth1_vlan: entered promiscuous mode [ 26.825599][ T3259] veth1_macvtap: entered promiscuous mode [ 26.832150][ T3258] veth1_macvtap: entered promiscuous mode [ 26.841557][ T3260] veth1_vlan: entered promiscuous mode [ 26.873272][ T3260] veth0_macvtap: entered promiscuous mode [ 26.887552][ T3260] veth1_macvtap: entered promiscuous mode [ 26.897237][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.917919][ T3262] veth0_vlan: entered promiscuous mode [ 26.925091][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.935822][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.946481][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.955744][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.963319][ T3264] veth0_macvtap: entered promiscuous mode [ 26.970839][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.981441][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.991476][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.001957][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.012793][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.027507][ T3259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.036362][ T3259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.045101][ T3259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.053880][ T3259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.064738][ T3264] veth1_macvtap: entered promiscuous mode [ 27.074999][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.085499][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.096469][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.107605][ T3262] veth1_vlan: entered promiscuous mode [ 27.114371][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.124918][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.134811][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.145491][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.156167][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.170124][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.180640][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.190530][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.201023][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.210866][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.221364][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.232101][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.240671][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.251251][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.261084][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.271565][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.281379][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.291867][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.302782][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.311121][ T3258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.319860][ T3258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.328612][ T3258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.337316][ T3258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.356547][ T3260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.365424][ T3260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.374189][ T3260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.382971][ T3260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.394765][ T3264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.403618][ T3264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.412358][ T3264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.421155][ T3264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.460999][ T3262] veth0_macvtap: entered promiscuous mode [ 27.468602][ T3262] veth1_macvtap: entered promiscuous mode [ 27.501291][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.511946][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.521854][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.532443][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.542311][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.552807][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.562633][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.573071][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.587773][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.595965][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.606423][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.616295][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.620886][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 27.620899][ T29] audit: type=1326 audit(1725034753.474:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 27.626819][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.626829][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.626842][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.626855][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.648746][ T3406] loop0: detected capacity change from 0 to 512 [ 27.656425][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.657578][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.668584][ T29] audit: type=1326 audit(1725034753.504:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 27.743705][ T29] audit: type=1326 audit(1725034753.504:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 27.749434][ T3262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.766799][ T29] audit: type=1400 audit(1725034753.504:127): avc: denied { map_create } for pid=3405 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.775467][ T3262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.775497][ T3262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.775523][ T3262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.806206][ T3406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.811772][ T29] audit: type=1400 audit(1725034753.504:128): avc: denied { map_read map_write } for pid=3405 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.822816][ T3406] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.832895][ T29] audit: type=1326 audit(1725034753.504:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 27.858670][ T3406] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.6: lblock 23 mapped to illegal pblock 18 (length 1) [ 27.862619][ T29] audit: type=1326 audit(1725034753.504:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 27.888618][ T3406] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.6: lblock 23 mapped to illegal pblock 18 (length 1) [ 27.899714][ T29] audit: type=1326 audit(1725034753.504:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e690c9f33 code=0x7ffc0000 [ 27.959708][ T29] audit: type=1326 audit(1725034753.504:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e690c89df code=0x7ffc0000 [ 27.964610][ T3406] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.6: lblock 23 mapped to illegal pblock 18 (length 1) [ 27.982604][ T29] audit: type=1326 audit(1725034753.504:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3405 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2e690c9f87 code=0x7ffc0000 [ 28.039013][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.106435][ T3415] loop1: detected capacity change from 0 to 256 [ 28.146060][ T3415] ======================================================= [ 28.146060][ T3415] WARNING: The mand mount option has been deprecated and [ 28.146060][ T3415] and is ignored by this kernel. Remove the mand [ 28.146060][ T3415] option from the mount to silence this warning. [ 28.146060][ T3415] ======================================================= [ 28.176844][ T3421] loop0: detected capacity change from 0 to 512 [ 28.183034][ T3415] bpf: Bad value for 'uid' [ 28.201876][ T3415] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.212375][ T3415] FAT-fs (loop1): Filesystem has been set read-only [ 28.225013][ T3422] Zero length message leads to an empty skb [ 28.235028][ T3415] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 28.286831][ T3264] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 28.326772][ C1] hrtimer: interrupt took 28520 ns [ 28.348582][ T3421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.362291][ T3264] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 28.430462][ T3421] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.510772][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.519727][ T3432] loop2: detected capacity change from 0 to 512 [ 28.531091][ T3433] loop3: detected capacity change from 0 to 1024 [ 28.544112][ T3433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.553277][ T3432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.569256][ T3433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.571631][ T3432] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.587928][ T3433] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.3.11: corrupted in-inode xattr: bad e_name length [ 28.606534][ T3433] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 28.625959][ T3432] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.12: Directory hole found for htree leaf block 0 [ 28.632483][ T3433] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.660891][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.685138][ T3442] loop2: detected capacity change from 0 to 512 [ 28.698020][ T3442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.704586][ T3445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11'. [ 28.710970][ T3442] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.729881][ T3445] erspan0: entered promiscuous mode [ 28.735186][ T3445] erspan0: entered allmulticast mode [ 28.736302][ T3442] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.14: lblock 23 mapped to illegal pblock 18 (length 1) [ 28.758937][ T3442] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.14: lblock 23 mapped to illegal pblock 18 (length 1) [ 28.783140][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.817415][ T3450] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 28.823569][ T3449] dummy0: entered promiscuous mode [ 28.834644][ T3449] dummy0: left promiscuous mode [ 28.912229][ T3449] syz.2.16 (3449) used greatest stack depth: 11272 bytes left [ 28.929224][ T3454] loop4: detected capacity change from 0 to 128 [ 28.943418][ T3454] syz.4.19: attempt to access beyond end of device [ 28.943418][ T3454] loop4: rw=0, sector=121, nr_sectors = 112 limit=128 [ 28.974853][ T3461] loop4: detected capacity change from 0 to 256 [ 28.983656][ T3461] bpf: Bad value for 'uid' [ 28.990507][ T3461] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 29.000686][ T3461] FAT-fs (loop4): Filesystem has been set read-only [ 29.007624][ T3461] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 29.024804][ T3259] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 29.032813][ T3259] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 29.408768][ T3463] loop0: detected capacity change from 0 to 512 [ 29.435244][ T3463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.448226][ T3463] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.460913][ T3463] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 29.475722][ T3463] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 29.489053][ T3463] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.489053][ T3463] [ 29.498848][ T3463] EXT4-fs (loop0): Total free blocks count 0 [ 29.504850][ T3463] EXT4-fs (loop0): Free/Dirty block details [ 29.510791][ T3463] EXT4-fs (loop0): free_blocks=65280 [ 29.516253][ T3463] EXT4-fs (loop0): dirty_blocks=23 [ 29.521368][ T3463] EXT4-fs (loop0): Block reservation details [ 29.527440][ T3463] EXT4-fs (loop0): i_reserved_data_blocks=23 [ 29.536289][ T3463] syz.0.22 (3463) used greatest stack depth: 9768 bytes left [ 29.548009][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.577502][ T3468] loop0: detected capacity change from 0 to 512 [ 29.595667][ T3468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.608359][ T3468] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.629929][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.662282][ T3474] loop0: detected capacity change from 0 to 512 [ 29.676751][ T3474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.689383][ T3474] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.702879][ T3474] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.25: Directory hole found for htree leaf block 0 [ 29.722356][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.744323][ T3478] loop0: detected capacity change from 0 to 512 [ 29.755687][ T3478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.768433][ T3478] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.783122][ T3478] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.26: lblock 23 mapped to illegal pblock 18 (length 1) [ 29.799612][ T3478] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.26: lblock 23 mapped to illegal pblock 18 (length 1) [ 29.806815][ T3482] dummy0: entered promiscuous mode [ 29.820853][ T3482] dummy0: left promiscuous mode [ 29.834314][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.977509][ T3493] loop2: detected capacity change from 0 to 512 [ 30.046688][ T3493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.060216][ T3493] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.082824][ T3493] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.32: Directory hole found for htree leaf block 0 [ 30.117427][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.723511][ T3501] loop0: detected capacity change from 0 to 512 [ 30.737057][ T3501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.749657][ T3501] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.769522][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.793983][ T3505] loop0: detected capacity change from 0 to 512 [ 30.805699][ T3505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.818475][ T3505] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.840770][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.125490][ T3513] loop2: detected capacity change from 0 to 512 [ 31.136593][ T3513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.149322][ T3513] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.162955][ T3513] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.38: lblock 23 mapped to illegal pblock 18 (length 1) [ 31.180249][ T3513] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.38: lblock 23 mapped to illegal pblock 18 (length 1) [ 31.200737][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.254995][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 31.263764][ T3518] netlink: 'syz.2.39': attribute type 9 has an invalid length. [ 31.278744][ T3518] loop2: detected capacity change from 0 to 1024 [ 31.285872][ T3518] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 31.296782][ T3518] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 31.306384][ T3518] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 31.316491][ T3518] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 31.325188][ T3518] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 31.370290][ T3528] dummy0: entered promiscuous mode [ 31.377411][ T3528] dummy0: left promiscuous mode [ 31.472114][ T3534] loop2: detected capacity change from 0 to 512 [ 31.478828][ T3534] EXT4-fs: Ignoring removed i_version option [ 31.484982][ T3534] ext4: Unknown parameter 'fowner<00000000000000000000' [ 31.503480][ T3534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 31.583118][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.624143][ T3539] loop3: detected capacity change from 0 to 512 [ 31.636017][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.648600][ T3539] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.735187][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.759242][ T1655] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.984280][ T3553] loop3: detected capacity change from 0 to 512 [ 32.015325][ T3553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.029040][ T3553] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.044680][ T3553] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 18: comm syz.3.50: lblock 23 mapped to illegal pblock 18 (length 1) [ 32.061529][ T3553] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 18: comm syz.3.50: lblock 23 mapped to illegal pblock 18 (length 1) [ 32.083353][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.085712][ T3546] chnl_net:caif_netlink_parms(): no params data found [ 32.166381][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.174124][ T3546] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.181491][ T3546] bridge_slave_0: entered allmulticast mode [ 32.188043][ T3546] bridge_slave_0: entered promiscuous mode [ 32.195801][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.203173][ T3546] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.210814][ T3546] bridge_slave_1: entered allmulticast mode [ 32.217844][ T3546] bridge_slave_1: entered promiscuous mode [ 32.239263][ T3546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.249910][ T3546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.268782][ T3546] team0: Port device team_slave_0 added [ 32.275320][ T3546] team0: Port device team_slave_1 added [ 32.289794][ T3546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.297024][ T3546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.323236][ T3546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.325294][ T3546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.341925][ T3546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.367903][ T3546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.399965][ T3546] hsr_slave_0: entered promiscuous mode [ 32.406799][ T3546] hsr_slave_1: entered promiscuous mode [ 32.412850][ T3546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.421319][ T3546] Cannot create hsr debugfs directory [ 32.451203][ T3575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 32.487346][ T3578] loop2: detected capacity change from 0 to 512 [ 32.515651][ T3578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.528293][ T3578] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.542648][ T3578] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 32.557201][ T3578] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 32.569617][ T3578] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.569617][ T3578] [ 32.579307][ T3578] EXT4-fs (loop2): Total free blocks count 0 [ 32.585302][ T3578] EXT4-fs (loop2): Free/Dirty block details [ 32.591214][ T3578] EXT4-fs (loop2): free_blocks=65280 [ 32.596582][ T3578] EXT4-fs (loop2): dirty_blocks=23 [ 32.601689][ T3578] EXT4-fs (loop2): Block reservation details [ 32.607701][ T3578] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 32.623767][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.641850][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 32.641905][ T29] audit: type=1400 audit(1725034758.494:762): avc: denied { mounton } for pid=3582 comm="syz.2.56" path="/proc/55/task" dev="proc" ino=4126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 32.670454][ T29] audit: type=1400 audit(1725034758.494:763): avc: denied { mount } for pid=3582 comm="syz.2.56" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.734244][ T3589] loop2: detected capacity change from 0 to 512 [ 32.745703][ T3589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.758209][ T3589] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.771881][ T3589] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 32.786782][ T3589] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 32.799412][ T3589] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.799412][ T3589] [ 32.809387][ T3589] EXT4-fs (loop2): Total free blocks count 0 [ 32.815452][ T3589] EXT4-fs (loop2): Free/Dirty block details [ 32.821523][ T3589] EXT4-fs (loop2): free_blocks=65280 [ 32.826858][ T3589] EXT4-fs (loop2): dirty_blocks=23 [ 32.827298][ T29] audit: type=1400 audit(1725034758.674:764): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.832067][ T3589] EXT4-fs (loop2): Block reservation details [ 32.832080][ T3589] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 32.884647][ T3597] loop0: detected capacity change from 0 to 512 [ 32.908807][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.910329][ T3597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.931094][ T3597] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.959219][ T29] audit: type=1400 audit(1725034758.814:765): avc: denied { create } for pid=3595 comm="syz.0.62" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.980212][ T3597] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.62: Directory hole found for htree leaf block 0 [ 33.012478][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.061058][ T29] audit: type=1326 audit(1725034758.914:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.67" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e690c9ef9 code=0x0 [ 33.089862][ T3600] chnl_net:caif_netlink_parms(): no params data found [ 33.122647][ T3620] loop3: detected capacity change from 0 to 512 [ 33.129368][ T3620] EXT4-fs: Ignoring removed i_version option [ 33.135504][ T3620] ext4: Unknown parameter 'fowner<00000000000000000000' [ 33.152967][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.160363][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.167877][ T3600] bridge_slave_0: entered allmulticast mode [ 33.174688][ T3600] bridge_slave_0: entered promiscuous mode [ 33.179487][ T3620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 33.181435][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.196400][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.203653][ T3600] bridge_slave_1: entered allmulticast mode [ 33.211365][ T3600] bridge_slave_1: entered promiscuous mode [ 33.228878][ T3600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.240111][ T3600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.260024][ T3600] team0: Port device team_slave_0 added [ 33.266636][ T3600] team0: Port device team_slave_1 added [ 33.281221][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.288259][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.314406][ T3600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.326377][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.333334][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.359358][ T3600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.385563][ T3600] hsr_slave_0: entered promiscuous mode [ 33.391558][ T3600] hsr_slave_1: entered promiscuous mode [ 33.397522][ T3600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.405096][ T3600] Cannot create hsr debugfs directory [ 33.498184][ T1655] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.547264][ T1655] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.587068][ T1655] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.640425][ T29] audit: type=1400 audit(1725034759.494:767): avc: denied { read } for pid=2999 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.665294][ T1655] bridge_slave_1: left allmulticast mode [ 33.670476][ T29] audit: type=1400 audit(1725034759.524:768): avc: denied { search } for pid=2999 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.670942][ T1655] bridge_slave_1: left promiscuous mode [ 33.692152][ T29] audit: type=1400 audit(1725034759.524:769): avc: denied { read } for pid=2999 comm="dhcpcd" name="n25" dev="tmpfs" ino=889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.697735][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.719277][ T29] audit: type=1400 audit(1725034759.524:770): avc: denied { open } for pid=2999 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.749316][ T29] audit: type=1400 audit(1725034759.524:771): avc: denied { getattr } for pid=2999 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.773214][ T1655] bridge_slave_0: left allmulticast mode [ 33.779028][ T1655] bridge_slave_0: left promiscuous mode [ 33.784771][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.856953][ T1655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.867987][ T1655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.880431][ T1655] bond0 (unregistering): Released all slaves [ 33.893196][ T3630] loop2: detected capacity change from 0 to 1024 [ 33.902539][ T3630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.924391][ T3630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.948333][ T3630] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.2.70: corrupted in-inode xattr: bad e_name length [ 34.036154][ T3651] netlink: 44 bytes leftover after parsing attributes in process `syz.2.70'. [ 34.048799][ T3651] erspan0: entered promiscuous mode [ 34.054122][ T3651] erspan0: entered allmulticast mode [ 34.068788][ T1655] hsr_slave_0: left promiscuous mode [ 34.076132][ T1655] hsr_slave_1: left promiscuous mode [ 34.081988][ T1655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.089553][ T1655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.098223][ T1655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.105829][ T1655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.115585][ T3657] loop3: detected capacity change from 0 to 512 [ 34.148069][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.162219][ T1655] veth1_macvtap: left promiscuous mode [ 34.167789][ T1655] veth0_macvtap: left promiscuous mode [ 34.173339][ T1655] veth1_vlan: left promiscuous mode [ 34.178611][ T1655] veth0_vlan: left promiscuous mode [ 34.189322][ T3657] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.316810][ T1655] team0 (unregistering): Port device team_slave_1 removed [ 34.330958][ T1655] team0 (unregistering): Port device team_slave_0 removed [ 34.400073][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.421067][ T3662] loop3: detected capacity change from 0 to 512 [ 34.435174][ T3662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.452469][ T3662] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.467457][ T3662] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 18: comm syz.3.75: lblock 23 mapped to illegal pblock 18 (length 1) [ 34.483523][ T3662] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 18: comm syz.3.75: lblock 23 mapped to illegal pblock 18 (length 1) [ 34.520423][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.532458][ T3600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.551052][ T3546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.563522][ T3681] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 34.565324][ T3546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.581071][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.594607][ T3680] dummy0: entered promiscuous mode [ 34.601727][ T3680] dummy0: left promiscuous mode [ 34.615539][ T3683] loop2: detected capacity change from 0 to 512 [ 34.622073][ T3683] EXT4-fs: Ignoring removed i_version option [ 34.628174][ T3683] ext4: Unknown parameter 'fowner<00000000000000000000' [ 34.635331][ T3546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.644194][ T3546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.655259][ T3600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.668548][ T3683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 34.700989][ T3600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.719886][ T3546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.731991][ T3546] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.742031][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.747289][ T3687] loop2: detected capacity change from 0 to 512 [ 34.749155][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.766808][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.773919][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.792899][ T3546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.803323][ T3546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.838757][ T3600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.857902][ T3687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.876076][ T3687] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.934694][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.951156][ T3546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.963161][ T3705] loop3: detected capacity change from 0 to 512 [ 34.990729][ T3600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.007694][ T3600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.014774][ T3708] loop2: detected capacity change from 0 to 1024 [ 35.025601][ T3705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.038437][ T3705] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.049759][ T3708] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.054265][ T3705] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 18: comm syz.3.86: lblock 23 mapped to illegal pblock 18 (length 1) [ 35.075389][ T3708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.078255][ T3705] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 18: comm syz.3.86: lblock 23 mapped to illegal pblock 18 (length 1) [ 35.094405][ T3708] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.2.85: corrupted in-inode xattr: bad e_name length [ 35.116464][ T3600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.127294][ T1655] bridge_slave_1: left allmulticast mode [ 35.132966][ T1655] bridge_slave_1: left promiscuous mode [ 35.134272][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.138592][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.156070][ T1655] bridge_slave_0: left allmulticast mode [ 35.161722][ T1655] bridge_slave_0: left promiscuous mode [ 35.167411][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.204350][ T3724] loop3: detected capacity change from 0 to 512 [ 35.213232][ T3724] EXT4-fs: Ignoring removed i_version option [ 35.219320][ T3724] ext4: Unknown parameter 'fowner<00000000000000000000' [ 35.283672][ T3725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 35.305991][ T1655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.316391][ T1655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.326365][ T1655] bond0 (unregistering): Released all slaves [ 35.335382][ T3600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.348502][ T3720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.85'. [ 35.365632][ T3546] veth0_vlan: entered promiscuous mode [ 35.372437][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.375761][ T3546] veth1_vlan: entered promiscuous mode [ 35.415557][ T3546] veth0_macvtap: entered promiscuous mode [ 35.434823][ T3546] veth1_macvtap: entered promiscuous mode [ 35.446245][ T1655] hsr_slave_0: left promiscuous mode [ 35.452017][ T1655] hsr_slave_1: left promiscuous mode [ 35.457965][ T1655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.465458][ T1655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.474434][ T1655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.481841][ T1655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.492305][ T1655] veth1_macvtap: left promiscuous mode [ 35.497944][ T1655] veth0_macvtap: left promiscuous mode [ 35.503648][ T1655] veth1_vlan: left promiscuous mode [ 35.508903][ T1655] veth0_vlan: left promiscuous mode [ 35.595376][ T1655] team0 (unregistering): Port device team_slave_1 removed [ 35.606895][ T1655] team0 (unregistering): Port device team_slave_0 removed [ 35.677137][ T3600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.691202][ T3600] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.727542][ T3600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.738072][ T3600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.777303][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.787965][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.797865][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.808335][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.818267][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.828720][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.858973][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.871831][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.882677][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.892729][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.903972][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.913762][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.924296][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.937399][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.947338][ T3733] dummy0: entered promiscuous mode [ 35.954243][ T3733] dummy0: left promiscuous mode [ 35.969511][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.976615][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.985472][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.992551][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.012968][ T3546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.021910][ T3546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.030705][ T3546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.039530][ T3546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.074655][ T3600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.118498][ T3750] loop0: detected capacity change from 0 to 512 [ 36.142971][ T3750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.164964][ T3750] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.195044][ T3750] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.95: lblock 23 mapped to illegal pblock 18 (length 1) [ 36.220113][ T3750] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.95: lblock 23 mapped to illegal pblock 18 (length 1) [ 36.232591][ T3762] loop2: detected capacity change from 0 to 512 [ 36.244287][ T3762] EXT4-fs: Ignoring removed i_version option [ 36.250370][ T3762] ext4: Unknown parameter 'fowner<00000000000000000000' [ 36.280786][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.320380][ T3767] loop0: detected capacity change from 0 to 1024 [ 36.324721][ T3763] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57'. [ 36.336519][ T3762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 36.345660][ T3767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.354751][ T3763] erspan0: entered promiscuous mode [ 36.360016][ T3763] erspan0: entered allmulticast mode [ 36.369540][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.445153][ T3776] netlink: 44 bytes leftover after parsing attributes in process `syz.0.98'. [ 36.458612][ T3776] erspan0: entered promiscuous mode [ 36.463936][ T3776] erspan0: entered allmulticast mode [ 36.479418][ T3778] dummy0: entered promiscuous mode [ 36.486749][ T3778] dummy0: left promiscuous mode [ 36.641852][ T3786] loop2: detected capacity change from 0 to 512 [ 36.648480][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.670552][ T3786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.683304][ T3786] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.699137][ T3786] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.107: lblock 23 mapped to illegal pblock 18 (length 1) [ 36.716749][ T3786] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.107: lblock 23 mapped to illegal pblock 18 (length 1) [ 36.740727][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.778495][ T3793] loop2: detected capacity change from 0 to 512 [ 36.785178][ T3793] EXT4-fs: Ignoring removed i_version option [ 36.791202][ T3793] ext4: Unknown parameter 'fowner<00000000000000000000' [ 36.809673][ T3793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 37.255273][ T3808] dummy0: entered promiscuous mode [ 37.262398][ T3808] dummy0: left promiscuous mode [ 37.264709][ T3810] loop2: detected capacity change from 0 to 1024 [ 37.276247][ T3810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.286585][ T3810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.331437][ T3810] netlink: 44 bytes leftover after parsing attributes in process `syz.2.117'. [ 37.348441][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.370543][ T3817] loop2: detected capacity change from 0 to 512 [ 37.387221][ T3817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.400060][ T3817] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.412774][ T3817] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.118: lblock 23 mapped to illegal pblock 18 (length 1) [ 37.446932][ T3817] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.118: lblock 23 mapped to illegal pblock 18 (length 1) [ 37.450278][ T3823] loop3: detected capacity change from 0 to 512 [ 37.468063][ T3823] EXT4-fs: Ignoring removed i_version option [ 37.474261][ T3823] ext4: Unknown parameter 'fowner<00000000000000000000' [ 37.495663][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.507739][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 37.626789][ T3840] dummy0: entered promiscuous mode [ 37.633991][ T3840] dummy0: left promiscuous mode [ 37.634573][ T3842] loop0: detected capacity change from 0 to 1024 [ 37.649678][ T3842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.660873][ T3842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.673733][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 37.679971][ T29] audit: type=1400 audit(1725034763.534:1311): avc: denied { mount } for pid=3841 comm="syz.0.128" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.702130][ T29] audit: type=1400 audit(1725034763.534:1312): avc: denied { setattr } for pid=3841 comm="syz.0.128" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.724182][ T29] audit: type=1400 audit(1725034763.534:1313): avc: denied { ioctl } for pid=3841 comm="syz.0.128" path="socket:[4705]" dev="sockfs" ino=4705 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.748895][ T29] audit: type=1400 audit(1725034763.534:1314): avc: denied { module_request } for pid=3841 comm="syz.0.128" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.770979][ T29] audit: type=1400 audit(1725034763.534:1315): avc: denied { sys_module } for pid=3841 comm="syz.0.128" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.798221][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.818166][ T29] audit: type=1326 audit(1725034763.674:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 37.841579][ T29] audit: type=1326 audit(1725034763.674:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 37.865626][ T29] audit: type=1326 audit(1725034763.674:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 37.889033][ T29] audit: type=1326 audit(1725034763.674:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 37.912856][ T29] audit: type=1326 audit(1725034763.674:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e690c9ef9 code=0x7ffc0000 [ 38.032911][ T3856] loop3: detected capacity change from 0 to 512 [ 38.039669][ T3856] EXT4-fs: Ignoring removed i_version option [ 38.045982][ T3856] ext4: Unknown parameter 'fowner<00000000000000000000' [ 38.435306][ T3859] chnl_net:caif_netlink_parms(): no params data found [ 38.506341][ T3859] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.513594][ T3859] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.521847][ T3859] bridge_slave_0: entered allmulticast mode [ 38.528406][ T3859] bridge_slave_0: entered promiscuous mode [ 38.535731][ T3859] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.542873][ T3859] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.550059][ T3859] bridge_slave_1: entered allmulticast mode [ 38.556558][ T3859] bridge_slave_1: entered promiscuous mode [ 38.576766][ T3859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.588359][ T3859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.607714][ T3859] team0: Port device team_slave_0 added [ 38.614695][ T3859] team0: Port device team_slave_1 added [ 38.630612][ T3859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.637602][ T3859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.663489][ T3859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.677361][ T3897] dummy0: entered promiscuous mode [ 38.684198][ T3897] dummy0: left promiscuous mode [ 38.697010][ T3859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.704221][ T3859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.730143][ T3859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.753827][ T3859] hsr_slave_0: entered promiscuous mode [ 38.759976][ T3859] hsr_slave_1: entered promiscuous mode [ 38.765843][ T3859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.773457][ T3859] Cannot create hsr debugfs directory [ 38.894080][ T3904] loop2: detected capacity change from 0 to 512 [ 38.900934][ T3904] EXT4-fs: Ignoring removed i_version option [ 38.906989][ T3904] ext4: Unknown parameter 'fowner<00000000000000000000' [ 39.112268][ T3929] dummy0: entered promiscuous mode [ 39.121138][ T3929] dummy0: left promiscuous mode [ 39.251256][ T3934] loop2: detected capacity change from 0 to 512 [ 39.259666][ T3934] EXT4-fs: Ignoring removed i_version option [ 39.265747][ T3934] ext4: Unknown parameter 'fowner<00000000000000000000' [ 39.339415][ T3934] __nla_validate_parse: 5 callbacks suppressed [ 39.339427][ T3934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 39.662727][ T1340] bridge_slave_1: left allmulticast mode [ 39.668454][ T1340] bridge_slave_1: left promiscuous mode [ 39.674328][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.684391][ T1340] bridge_slave_0: left allmulticast mode [ 39.690074][ T1340] bridge_slave_0: left promiscuous mode [ 39.696037][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.708003][ T3956] loop2: detected capacity change from 0 to 512 [ 39.738894][ T3956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.759496][ T3956] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.776803][ T3956] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.166: lblock 23 mapped to illegal pblock 18 (length 1) [ 39.793227][ T3956] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.166: lblock 23 mapped to illegal pblock 18 (length 1) [ 39.793481][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.811121][ T3956] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.166: lblock 23 mapped to illegal pblock 18 (length 1) [ 39.835025][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.845639][ T1340] bond0 (unregistering): Released all slaves [ 39.852547][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.869023][ T3953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.162'. [ 39.879225][ T3968] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 39.900398][ T3965] dummy0: entered promiscuous mode [ 39.930407][ T3972] loop2: detected capacity change from 0 to 512 [ 39.939716][ T3972] EXT4-fs: Ignoring removed i_version option [ 39.945810][ T3972] ext4: Unknown parameter 'fowner<00000000000000000000' [ 39.967385][ T3965] dummy0: left promiscuous mode [ 40.004506][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 40.016272][ T1340] hsr_slave_0: left promiscuous mode [ 40.028970][ T1340] hsr_slave_1: left promiscuous mode [ 40.048481][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.071134][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.143063][ T3990] loop0: detected capacity change from 0 to 1024 [ 40.164480][ T3990] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.185436][ T3990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.206200][ T3990] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.0.180: corrupted in-inode xattr: bad e_name length [ 40.233871][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 40.242648][ T3990] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #2: comm syz.0.180: corrupted in-inode xattr: bad e_name length [ 40.261441][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 40.313892][ T3990] netlink: 44 bytes leftover after parsing attributes in process `syz.0.180'. [ 40.341156][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.580802][ T3859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.623321][ T3859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.649171][ T3859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.680728][ T3859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.731210][ T3859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.743142][ T3859] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.758596][ T4026] loop0: detected capacity change from 0 to 512 [ 40.769037][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.776169][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.786199][ T4026] EXT4-fs: Ignoring removed i_version option [ 40.792222][ T4026] ext4: Unknown parameter 'fowner<00000000000000000000' [ 40.803547][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.810732][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.843589][ T4026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 40.921636][ T4045] dummy0: entered promiscuous mode [ 40.930782][ T4045] dummy0: left promiscuous mode [ 41.005062][ T3859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.079762][ T4067] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.082952][ T4057] loop3: detected capacity change from 0 to 1024 [ 41.103017][ T4072] loop2: detected capacity change from 0 to 512 [ 41.119975][ T4072] EXT4-fs: Ignoring removed i_version option [ 41.126129][ T4072] ext4: Unknown parameter 'fowner<00000000000000000000' [ 41.148147][ T4057] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.166129][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.187962][ T4072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 41.202595][ T4057] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.3.193: corrupted in-inode xattr: bad e_name length [ 41.218328][ T4057] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #2: comm syz.3.193: corrupted in-inode xattr: bad e_name length [ 41.266775][ T3859] veth0_vlan: entered promiscuous mode [ 41.281571][ T3859] veth1_vlan: entered promiscuous mode [ 41.298779][ T3859] veth0_macvtap: entered promiscuous mode [ 41.308795][ T3859] veth1_macvtap: entered promiscuous mode [ 41.320307][ T3859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.330820][ T3859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.340676][ T3859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.351406][ T3859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.361302][ T3859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.371747][ T3859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.381627][ T3859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.392108][ T3859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.403602][ T3859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.412072][ T3859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.422617][ T3859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.432520][ T3859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.442949][ T3859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.452770][ T3859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.463267][ T3859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.473151][ T3859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.483675][ T3859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.494616][ T3859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.505815][ T4057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.193'. [ 41.515437][ T4104] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 41.520916][ T4103] dummy0: entered promiscuous mode [ 41.533312][ T4103] dummy0: left promiscuous mode [ 41.541153][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.555069][ T3859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.563963][ T3859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.572679][ T3859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.581526][ T3859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.797917][ T4129] loop4: detected capacity change from 0 to 512 [ 41.809034][ T4129] EXT4-fs: Ignoring removed i_version option [ 41.815189][ T4129] ext4: Unknown parameter 'fowner<00000000000000000000' [ 41.971422][ T4131] loop1: detected capacity change from 0 to 1024 [ 42.022831][ T4129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 42.046273][ T4131] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.086636][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.107024][ T4131] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.1.219: corrupted in-inode xattr: bad e_name length [ 42.108126][ T4138] dummy0: entered promiscuous mode [ 42.133447][ T4138] dummy0: left promiscuous mode [ 42.148863][ T4131] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #2: comm syz.1.219: corrupted in-inode xattr: bad e_name length [ 42.192233][ T4142] loop4: detected capacity change from 0 to 512 [ 42.230580][ T4131] netlink: 44 bytes leftover after parsing attributes in process `syz.1.219'. [ 42.242167][ T4142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.255078][ T4142] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.256109][ T3546] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.276700][ T4142] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 42.292244][ T4142] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 42.304826][ T4142] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.304826][ T4142] [ 42.314534][ T4142] EXT4-fs (loop4): Total free blocks count 0 [ 42.320584][ T4142] EXT4-fs (loop4): Free/Dirty block details [ 42.326776][ T4142] EXT4-fs (loop4): free_blocks=65280 [ 42.332066][ T4142] EXT4-fs (loop4): dirty_blocks=23 [ 42.337285][ T4142] EXT4-fs (loop4): Block reservation details [ 42.343355][ T4142] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 42.387558][ T3859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.416526][ T4167] loop0: detected capacity change from 0 to 512 [ 42.434300][ T4167] EXT4-fs: Ignoring removed i_version option [ 42.440343][ T4167] ext4: Unknown parameter 'fowner<00000000000000000000' [ 42.456998][ T4167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 42.526130][ T4177] loop0: detected capacity change from 0 to 1024 [ 42.542605][ T4177] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.557991][ T4177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.575089][ T4177] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.0.238: corrupted in-inode xattr: bad e_name length [ 42.590570][ T4177] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #2: comm syz.0.238: corrupted in-inode xattr: bad e_name length [ 42.607857][ T4187] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 42.623835][ T4185] dummy0: entered promiscuous mode [ 42.632263][ T4185] dummy0: left promiscuous mode [ 42.656961][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.674259][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 42.674271][ T29] audit: type=1400 audit(1725034768.534:1883): avc: denied { create } for pid=4191 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.704513][ T29] audit: type=1400 audit(1725034768.534:1884): avc: denied { create } for pid=4191 comm="syz.0.242" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.725758][ T29] audit: type=1400 audit(1725034768.534:1885): avc: denied { map } for pid=4191 comm="syz.0.242" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.749857][ T29] audit: type=1400 audit(1725034768.534:1886): avc: denied { read write } for pid=4191 comm="syz.0.242" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.774458][ T29] audit: type=1404 audit(1725034768.564:1887): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 42.790108][ T29] audit: type=1404 audit(1725034768.644:1888): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 42.812731][ T29] audit: type=1400 audit(1725034768.674:1889): avc: denied { read write } for pid=3258 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.837861][ T29] audit: type=1400 audit(1725034768.674:1890): avc: denied { open } for pid=3258 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.862897][ T29] audit: type=1400 audit(1725034768.674:1891): avc: denied { ioctl } for pid=3258 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.888685][ T29] audit: type=1400 audit(1725034768.684:1892): avc: denied { map_create } for pid=4194 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.997345][ T4205] loop4: detected capacity change from 0 to 512 [ 43.027076][ T4205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.039857][ T4205] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.058200][ T4205] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.248: Directory hole found for htree leaf block 0 [ 43.060528][ T4210] loop2: detected capacity change from 0 to 512 [ 43.084298][ T4210] EXT4-fs: Ignoring removed i_version option [ 43.090412][ T4210] ext4: Unknown parameter 'fowner<00000000000000000000' [ 43.133634][ T3859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.495369][ T4217] loop1: detected capacity change from 0 to 1024 [ 43.521753][ T4217] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.551748][ T4217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.563300][ T4235] loop2: detected capacity change from 0 to 512 [ 43.570936][ T4235] ================================================================== [ 43.579027][ T4235] BUG: KCSAN: data-race in fsnotify_event_needs_parent / fsnotify_put_mark [ 43.587639][ T4235] [ 43.589954][ T4235] write to 0xffff8881001d1cf0 of 4 bytes by task 3438 on cpu 1: [ 43.597568][ T4235] fsnotify_put_mark+0x2db/0x5d0 [ 43.602500][ T4235] __se_sys_inotify_rm_watch+0x105/0x180 [ 43.608122][ T4235] __x64_sys_inotify_rm_watch+0x31/0x40 [ 43.613653][ T4235] x64_sys_call+0x1ae0/0x2d60 [ 43.618319][ T4235] do_syscall_64+0xc9/0x1c0 [ 43.622811][ T4235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.628699][ T4235] [ 43.631005][ T4235] read to 0xffff8881001d1cf0 of 4 bytes by task 4235 on cpu 0: [ 43.638536][ T4235] fsnotify_event_needs_parent+0x47/0x100 [ 43.644293][ T4235] __fsnotify_parent+0x178/0x380 [ 43.649243][ T4235] __fput+0x5ca/0x6f0 [ 43.653218][ T4235] __fput_sync+0x44/0x60 [ 43.657454][ T4235] __se_sys_close+0x101/0x1b0 [ 43.662118][ T4235] __x64_sys_close+0x1f/0x30 [ 43.666695][ T4235] x64_sys_call+0x25cb/0x2d60 [ 43.671373][ T4235] do_syscall_64+0xc9/0x1c0 [ 43.675874][ T4235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.681788][ T4235] [ 43.684097][ T4235] value changed: 0x00002008 -> 0x00000000 [ 43.689802][ T4235] [ 43.692109][ T4235] Reported by Kernel Concurrency Sanitizer on: [ 43.698265][ T4235] CPU: 0 UID: 0 PID: 4235 Comm: syz.2.260 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 43.708838][ T4235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 43.718880][ T4235] ================================================================== [ 43.737581][ T4217] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.1.252: corrupted in-inode xattr: bad e_name length [ 43.740510][ T4227] dummy0: entered promiscuous mode [ 43.753562][ T4217] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #2: comm syz.1.252: corrupted in-inode xattr: bad e_name length [ 43.771478][ T4227] dummy0: left promiscuous mode [ 43.823517][ T4235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.841286][ T4235] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.852684][ T3546] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.863244][ T4235] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.260: lblock 23 mapped to illegal pblock 18 (length 1) [ 43.943290][ T3260] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.