last executing test programs: 56.379787747s ago: executing program 4 (id=327): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xd, 0x0) 56.359333208s ago: executing program 4 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000540), &(0x7f0000000780)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 56.32642578s ago: executing program 4 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 56.278664991s ago: executing program 4 (id=335): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodioread_nolock}, {@user_xattr}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 56.156715817s ago: executing program 4 (id=338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 55.890821778s ago: executing program 4 (id=344): setfsgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00') 55.890679808s ago: executing program 32 (id=344): setfsgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00') 46.26140817s ago: executing program 1 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) 46.131562536s ago: executing program 1 (id=705): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40100, 0x100) preadv(r2, 0x0, 0x0, 0x2, 0x0) 46.072473498s ago: executing program 1 (id=708): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 46.022016541s ago: executing program 1 (id=711): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) r2 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 45.932918074s ago: executing program 1 (id=715): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 45.868816127s ago: executing program 1 (id=720): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) 30.36935608s ago: executing program 33 (id=720): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) 13.247931913s ago: executing program 2 (id=1705): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 13.214690624s ago: executing program 2 (id=1710): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd63}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x7ff}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 13.156610477s ago: executing program 2 (id=1713): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000500000000000000010000000900010073"], 0xa4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 13.060446322s ago: executing program 2 (id=1719): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$nfs4(0x0, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) 12.977148455s ago: executing program 2 (id=1721): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) io_cancel(0x0, 0x0, 0x0) 12.587088991s ago: executing program 2 (id=1736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x24}}, 0x0) 12.565035172s ago: executing program 34 (id=1736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x24}}, 0x0) 12.274247825s ago: executing program 0 (id=1749): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r1}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) 12.251979116s ago: executing program 0 (id=1750): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) 12.199635608s ago: executing program 0 (id=1751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008000850000001b000000b70000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, 0x0, 0x0, 0x5405, 0x0, 0x0) 12.14775679s ago: executing program 0 (id=1755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 12.14717227s ago: executing program 0 (id=1756): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x3, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x38de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffff0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x6, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 11.846809953s ago: executing program 0 (id=1762): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x27dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0) 11.846640623s ago: executing program 35 (id=1762): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x27dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0) 1.441128489s ago: executing program 8 (id=2078): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.208723938s ago: executing program 6 (id=2079): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff640002", 0x9, 0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @tick=0xf27, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 1.153962011s ago: executing program 3 (id=2081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000008000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x1, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)="f4000900062b2b25fe80000000000000dc8b85", 0x13}, {&(0x7f00000003c0)="60a0bde683e82c39d5cbb2b625ca1cd9e0ac9ab9e22b196120", 0x19}], 0x2}, 0x0) 1.129832861s ago: executing program 3 (id=2083): io_uring_setup(0x4cf7, &(0x7f0000000140)={0x0, 0xd41a, 0x0, 0x1, 0x1d6}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x0, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)=0x5) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/6, 0x6}], 0x1) close(0x3) 1.061814585s ago: executing program 8 (id=2086): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x4, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 953.734069ms ago: executing program 3 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 953.100439ms ago: executing program 3 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 952.853969ms ago: executing program 8 (id=2092): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 918.970001ms ago: executing program 8 (id=2094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 916.402611ms ago: executing program 3 (id=2096): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 891.306202ms ago: executing program 8 (id=2098): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 865.290863ms ago: executing program 8 (id=2101): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x3e}], 0x1, 0x2043, 0x0) 396.167833ms ago: executing program 7 (id=2116): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000300)={0x8009, 0x100000d, 0x1, 'queue0\x00', 0x16}) tkill(r0, 0x7) 299.072747ms ago: executing program 5 (id=2120): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xd92d, 0x0, 0x0) 298.844707ms ago: executing program 6 (id=2121): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x33) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) 195.513092ms ago: executing program 7 (id=2122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r2, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 178.309893ms ago: executing program 7 (id=2123): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000001c0)=0x1, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 159.210154ms ago: executing program 7 (id=2124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) 154.416584ms ago: executing program 5 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 134.990025ms ago: executing program 7 (id=2126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 134.730435ms ago: executing program 5 (id=2127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 113.595056ms ago: executing program 7 (id=2128): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 98.535587ms ago: executing program 5 (id=2129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x24004840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 93.051217ms ago: executing program 6 (id=2130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) 58.429808ms ago: executing program 5 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001b40)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf2101"], 0x14}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) 39.042989ms ago: executing program 6 (id=2132): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x7db4}, {0x4f, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x4, 0x1, 0x3, 0x6, 0x48}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@deltaction={0x14, 0x31, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@dev}, &(0x7f0000000380)=0x14) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 38.553328ms ago: executing program 6 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 29.011399ms ago: executing program 5 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.50272ms ago: executing program 6 (id=2135): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x2) 0s ago: executing program 3 (id=2136): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 000000000. [ 45.499270][ T4729] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 45.512255][ T4732] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 45.642422][ T4727] Restarting kernel threads ... [ 45.647777][ T4727] Done restarting kernel threads. [ 45.765937][ T4764] loop3: detected capacity change from 0 to 1024 [ 45.772720][ T4764] EXT4-fs: Ignoring removed bh option [ 45.778781][ T4764] EXT4-fs: inline encryption not supported [ 45.796436][ T4766] rdma_op ffff8881363ddd80 conn xmit_rdma 0000000000000000 [ 45.808035][ T4764] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.820598][ T4764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 45.829616][ T4764] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.544: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.844098][ T4764] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.544: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.861877][ T4764] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.544: Failed to acquire dquot type 0 [ 45.877071][ T4764] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 45.892158][ T44] Bluetooth: hci1: sending frame failed (-49) [ 45.900474][ T4188] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 45.906779][ T4764] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.544: mark_inode_dirty error [ 45.918283][ T4764] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 45.928700][ T4764] EXT4-fs (loop3): 1 orphan inode deleted [ 45.935109][ T4764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.949223][ T997] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.973395][ T997] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 45.987521][ T4764] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.030139][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.118247][ T4796] loop1: detected capacity change from 0 to 1024 [ 46.125905][ T4796] EXT4-fs: Ignoring removed nobh option [ 46.131682][ T4796] EXT4-fs: Ignoring removed bh option [ 46.157264][ T4796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.185468][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.240651][ T4789] Restarting kernel threads ... [ 46.245880][ T4789] Done restarting kernel threads. [ 46.275193][ T4815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4815 comm=syz.1.573 [ 46.287779][ T4815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4815 comm=syz.1.573 [ 46.346277][ T4821] loop3: detected capacity change from 0 to 512 [ 46.366707][ T4821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.379443][ T4821] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.408283][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.422000][ T4826] capability: warning: `syz.1.578' uses 32-bit capabilities (legacy support in use) [ 46.550902][ T4842] capability: warning: `syz.3.575' uses deprecated v2 capabilities in a way that may be insecure [ 46.658820][ T4854] loop0: detected capacity change from 0 to 512 [ 46.688047][ T4854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.703118][ T4854] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.722006][ T4863] loop1: detected capacity change from 0 to 1024 [ 46.747111][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.777005][ T4863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.796662][ T4868] loop0: detected capacity change from 0 to 1024 [ 46.803346][ T4868] EXT4-fs: Ignoring removed bh option [ 46.809061][ T4868] EXT4-fs: inline encryption not supported [ 46.816249][ T4868] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.827784][ T4868] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 46.837053][ T4868] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.586: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.852716][ T4868] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.586: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.873568][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.874558][ T4868] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.586: Failed to acquire dquot type 0 [ 46.899359][ T4868] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 46.909910][ T4868] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.586: mark_inode_dirty error [ 46.921685][ T4868] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 46.937524][ T4868] EXT4-fs (loop0): 1 orphan inode deleted [ 46.943765][ T4868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.956497][ T997] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.971232][ T997] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 46.983426][ T4868] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.002660][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.049513][ T4887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.595'. [ 47.058494][ T4887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.595'. [ 47.067611][ T4887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.595'. [ 47.105158][ T4895] netlink: 'syz.3.598': attribute type 4 has an invalid length. [ 47.115485][ T4895] netlink: 'syz.3.598': attribute type 4 has an invalid length. [ 47.150053][ T4901] loop5: detected capacity change from 0 to 1024 [ 47.176651][ T4901] EXT4-fs: Ignoring removed bh option [ 47.196310][ T4901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.217756][ T4905] Restarting kernel threads ... [ 47.224535][ T4905] Done restarting kernel threads. [ 47.230280][ T4901] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.602: Allocating blocks 385-513 which overlap fs metadata [ 47.254685][ T4901] EXT4-fs (loop5): pa ffff8881072e60e0: logic 16, phys. 129, len 24 [ 47.262731][ T4901] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 47.292943][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.302166][ T4909] loop3: detected capacity change from 0 to 1024 [ 47.308861][ T4909] EXT4-fs: Ignoring removed bh option [ 47.314287][ T4909] EXT4-fs: inline encryption not supported [ 47.320695][ T4909] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.346721][ T4909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 47.362040][ T4909] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.604: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.391665][ T4909] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.604: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.414135][ T4916] loop0: detected capacity change from 0 to 512 [ 47.420571][ T4909] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.604: Failed to acquire dquot type 0 [ 47.433811][ T4916] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.617: ea_inode with extended attributes [ 47.446778][ T4188] Bluetooth: hci0: command 0x1003 tx timeout [ 47.452821][ T3496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.457464][ T4909] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 47.468935][ T4909] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.604: mark_inode_dirty error [ 47.480280][ T4916] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.617: error while reading EA inode 11 err=-117 [ 47.480348][ T4909] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 47.503247][ T4909] EXT4-fs (loop3): 1 orphan inode deleted [ 47.503630][ T4916] EXT4-fs (loop0): 1 orphan inode deleted [ 47.509505][ T4909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.528457][ T123] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.530232][ T4916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.543031][ T123] __quota_error: 105 callbacks suppressed [ 47.543048][ T123] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 47.569062][ T123] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 47.622087][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.648498][ T4909] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.692144][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.703369][ T29] audit: type=1400 audit(1763840916.017:641): avc: denied { ioctl } for pid=4932 comm="syz.1.613" path="socket:[9720]" dev="sockfs" ino=9720 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.836311][ T4954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=8192 sclass=netlink_audit_socket pid=4954 comm=syz.3.623 [ 47.851291][ T4956] IPv6: Can't replace route, no match found [ 47.916328][ T29] audit: type=1326 audit(1763840916.187:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602da7f749 code=0x7ffc0000 [ 47.939742][ T29] audit: type=1326 audit(1763840916.187:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f602da7f749 code=0x7ffc0000 [ 47.963167][ T29] audit: type=1400 audit(1763840916.197:644): avc: denied { read write } for pid=4959 comm="syz.3.627" name="cgroup.subtree_control" dev="cgroup2" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.987420][ T29] audit: type=1400 audit(1763840916.197:645): avc: denied { open } for pid=4959 comm="syz.3.627" path="" dev="cgroup2" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.010300][ T29] audit: type=1400 audit(1763840916.197:646): avc: denied { ioctl } for pid=4959 comm="syz.3.627" path="" dev="cgroup2" ino=174 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.038677][ T29] audit: type=1326 audit(1763840916.337:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602da7f749 code=0x7ffc0000 [ 48.061971][ T29] audit: type=1326 audit(1763840916.337:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602da7f749 code=0x7ffc0000 [ 48.146068][ T4973] netlink: 'syz.1.631': attribute type 4 has an invalid length. [ 48.184766][ T4973] netlink: 'syz.1.631': attribute type 4 has an invalid length. [ 48.259434][ T4987] vhci_hcd: invalid port number 9 [ 48.264625][ T4987] vhci_hcd: invalid port number 9 [ 48.312372][ T29] audit: type=1326 audit(1763840916.617:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602da7f749 code=0x7ffc0000 [ 48.313749][ T4995] loop2: detected capacity change from 0 to 512 [ 48.364213][ T4995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.381577][ T4995] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.417051][ T5004] loop5: detected capacity change from 0 to 512 [ 48.434953][ T5004] EXT4-fs: Ignoring removed i_version option [ 48.441254][ T5004] EXT4-fs: Ignoring removed bh option [ 48.456589][ T5004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.469430][ T5004] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.483156][ T5004] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.497847][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.511206][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.567492][ T5026] loop3: detected capacity change from 0 to 1024 [ 48.574917][ T5026] EXT4-fs: Ignoring removed bh option [ 48.596258][ T5026] EXT4-fs: inline encryption not supported [ 48.602545][ T5026] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.613589][ T5026] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 48.628805][ T5028] loop0: detected capacity change from 0 to 1024 [ 48.655949][ T5026] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.655: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.665101][ T5028] EXT4-fs: Ignoring removed bh option [ 48.675638][ T5026] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.655: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.699028][ T5028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.711626][ T5026] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.655: Failed to acquire dquot type 0 [ 48.733611][ T5028] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.656: Allocating blocks 385-513 which overlap fs metadata [ 48.752471][ T5026] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.763366][ T5026] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.655: mark_inode_dirty error [ 48.776640][ T5026] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 48.787257][ T5028] EXT4-fs (loop0): pa ffff8881072e6070: logic 16, phys. 129, len 24 [ 48.795296][ T5028] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 48.805309][ T5026] EXT4-fs (loop3): 1 orphan inode deleted [ 48.816371][ T5026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.818296][ T5039] IPv6: Can't replace route, no match found [ 48.834977][ T3431] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.856615][ T3431] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 48.873246][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.895243][ T5026] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.916573][ T5047] vlan2: entered allmulticast mode [ 48.926097][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.160274][ T5078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.264696][ T5092] loop3: detected capacity change from 0 to 128 [ 49.356091][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'. [ 49.365101][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.690'. [ 49.379525][ T3431] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.388492][ T3431] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.397619][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'. [ 49.406460][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.690'. [ 49.416165][ T3431] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.425876][ T3431] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.568687][ T5118] syz.5.696 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.614289][ T5120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5120 comm=syz.3.697 [ 49.740503][ T5135] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 50.161765][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'. [ 50.171178][ T5199] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.190654][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'. [ 50.204505][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'. [ 50.213825][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'. [ 50.323774][ T5213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.737'. [ 50.446851][ T5227] loop3: detected capacity change from 0 to 1024 [ 50.463845][ T5227] EXT4-fs: Ignoring removed orlov option [ 50.487668][ T5227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.537011][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.574870][ T5239] netlink: 'syz.2.749': attribute type 21 has an invalid length. [ 50.594660][ T5239] netlink: 'syz.2.749': attribute type 1 has an invalid length. [ 50.602350][ T5239] netlink: 144 bytes leftover after parsing attributes in process `syz.2.749'. [ 50.781312][ T5260] netlink: 'syz.3.758': attribute type 4 has an invalid length. [ 50.854539][ T1051] IPVS: starting estimator thread 0... [ 50.944468][ T5266] IPVS: using max 2016 ests per chain, 100800 per kthread [ 51.033495][ T5285] can0: slcan on ptm0. [ 51.104534][ T5285] can0 (unregistered): slcan off ptm0. [ 51.117114][ T5291] vlan2: entered allmulticast mode [ 51.155160][ T5295] loop2: detected capacity change from 0 to 1024 [ 51.176196][ T5295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.192562][ T5295] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.2.774: path /124/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 51.229540][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.306525][ T5305] loop5: detected capacity change from 0 to 1024 [ 51.326596][ T5305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.362825][ T5305] EXT4-fs error (device loop5): ext4_xattr_set_entry:1665: inode #15: comm syz.5.778: corrupted xattr entries [ 51.415184][ T5313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.440543][ T5305] EXT4-fs error (device loop5): ext4_xattr_block_set:2215: inode #15: comm syz.5.778: bad block 113 [ 51.507151][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.657904][ T5332] loop3: detected capacity change from 0 to 512 [ 51.701984][ T5332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.747206][ T5332] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.801767][ T3313] EXT4-fs error (device loop3): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 51.812688][ T3313] EXT4-fs (loop3): Remounting filesystem read-only [ 51.820149][ T3313] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 51.845687][ T3313] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 51.858055][ T3313] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 51.888164][ T5349] sg_write: data in/out 49276/12 bytes for SCSI command 0x6-- guessing data in; [ 51.888164][ T5349] program syz.0.796 not setting count and/or reply_len properly [ 51.912912][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.922371][ T123] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.951460][ T123] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.017732][ T5359] ip6t_srh: unknown srh match flags 4000 [ 52.052854][ T5364] loop0: detected capacity change from 0 to 164 [ 52.069427][ T5364] syz.0.802: attempt to access beyond end of device [ 52.069427][ T5364] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 52.098824][ T5364] syz.0.802: attempt to access beyond end of device [ 52.098824][ T5364] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 52.262773][ T5384] vhci_hcd: invalid port number 96 [ 52.267994][ T5384] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 52.504487][ T5410] loop2: detected capacity change from 0 to 512 [ 52.539976][ T5410] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.574735][ T5410] EXT4-fs (loop2): mount failed [ 52.597786][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 52.597803][ T29] audit: type=1400 audit(1763841432.906:920): avc: denied { write } for pid=5409 comm="syz.2.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.664307][ T29] audit: type=1400 audit(1763841432.966:921): avc: denied { execute } for pid=5405 comm="syz.3.820" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 52.720816][ T29] audit: type=1400 audit(1763841433.006:922): avc: denied { create } for pid=5414 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.740652][ T29] audit: type=1400 audit(1763841433.006:923): avc: denied { ioctl } for pid=5414 comm="syz.2.823" path="socket:[11155]" dev="sockfs" ino=11155 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.765684][ T29] audit: type=1400 audit(1763841433.006:924): avc: denied { bind } for pid=5414 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.785341][ T29] audit: type=1400 audit(1763841433.016:925): avc: denied { nlmsg_read } for pid=5416 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 52.853082][ T29] audit: type=1400 audit(1763841433.156:926): avc: denied { create } for pid=5420 comm="syz.5.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.872744][ T29] audit: type=1400 audit(1763841433.156:927): avc: denied { write } for pid=5420 comm="syz.5.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.955825][ T29] audit: type=1400 audit(1763841433.266:928): avc: denied { create } for pid=5428 comm="syz.5.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.994411][ T29] audit: type=1400 audit(1763841433.266:929): avc: denied { connect } for pid=5428 comm="syz.5.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.378965][ T5461] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 53.891912][ T5478] loop3: detected capacity change from 0 to 164 [ 53.911558][ T5478] syz.3.851: attempt to access beyond end of device [ 53.911558][ T5478] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 53.925808][ T5478] syz.3.851: attempt to access beyond end of device [ 53.925808][ T5478] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 54.049015][ T5480] loop3: detected capacity change from 0 to 512 [ 54.077362][ T5480] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.690504][ T5515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5515 comm=syz.5.866 [ 54.703051][ T5515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5515 comm=syz.5.866 [ 55.007111][ T5524] vhci_hcd: invalid port number 96 [ 55.012337][ T5524] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 55.447941][ T5568] loop0: detected capacity change from 0 to 512 [ 55.506115][ T5568] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.701302][ T5579] __nla_validate_parse: 2 callbacks suppressed [ 55.701315][ T5579] netlink: 19 bytes leftover after parsing attributes in process `syz.0.891'. [ 56.561852][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 56.587372][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 56.609229][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 56.628238][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 56.852746][ T5640] xt_hashlimit: max too large, truncated to 1048576 [ 56.867597][ T5638] loop2: detected capacity change from 0 to 1024 [ 56.875234][ T5638] EXT4-fs: Ignoring removed orlov option [ 56.888230][ T5640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.928'. [ 57.077978][ T5665] loop5: detected capacity change from 0 to 512 [ 57.104456][ T5665] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.121190][ T5672] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.188388][ T5672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.203652][ T5676] loop5: detected capacity change from 0 to 1024 [ 57.211846][ T5676] EXT4-fs: Ignoring removed orlov option [ 57.235832][ T5672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.270432][ T5680] xt_hashlimit: max too large, truncated to 1048576 [ 57.288310][ T5680] netlink: 16 bytes leftover after parsing attributes in process `syz.5.935'. [ 57.310505][ T5682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.936'. [ 57.319443][ T5682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.936'. [ 57.338408][ T5672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.351886][ T5682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.936'. [ 57.396928][ T3480] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.412773][ T5690] loop5: detected capacity change from 0 to 1024 [ 57.414794][ T3480] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.428399][ T5690] EXT4-fs: Ignoring removed oldalloc option [ 57.434652][ T5690] EXT4-fs: Ignoring removed bh option [ 57.444698][ T3480] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.466948][ T3480] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.481174][ T5690] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 57.755236][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 57.755324][ T29] audit: type=1400 audit(1763841438.066:1106): avc: denied { bind } for pid=5719 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.780875][ T29] audit: type=1400 audit(1763841438.066:1107): avc: denied { name_bind } for pid=5719 comm="syz.5.952" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 57.801723][ T29] audit: type=1400 audit(1763841438.066:1108): avc: denied { node_bind } for pid=5719 comm="syz.5.952" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.824562][ T29] audit: type=1400 audit(1763841438.116:1109): avc: denied { read } for pid=5719 comm="syz.5.952" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.857353][ T29] audit: type=1400 audit(1763841438.166:1110): avc: denied { setopt } for pid=5723 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.926028][ T29] audit: type=1400 audit(1763841438.166:1111): avc: denied { write } for pid=5723 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.946189][ T29] audit: type=1400 audit(1763841438.166:1112): avc: denied { nlmsg_read } for pid=5723 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.199772][ T29] audit: type=1326 audit(1763841438.506:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 58.255409][ T29] audit: type=1326 audit(1763841438.506:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 58.278928][ T29] audit: type=1326 audit(1763841438.536:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 58.303496][ T5738] netem: incorrect gi model size [ 58.308586][ T5738] netem: change failed [ 59.185696][ T4188] Bluetooth: hci0: command 0x1003 tx timeout [ 59.185698][ T3496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.687245][ T5784] loop2: detected capacity change from 0 to 128 [ 59.747666][ T5788] vlan2: entered allmulticast mode [ 60.268885][ T5820] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 60.810075][ T5850] SELinux: security_context_str_to_sid (4¡?JÌn't5iú¦C. løOØ"ºïà]UGrZé>«¢Ôön=²ðͳ„V}Þ‹2eQƒ±XÆõJ‰ÊDwcf‘Õgo1{j©UxŒWKç&‡R’„åöþ;úH-¢==¥:»@CâQùqæ [ 60.810075][ T5850] ›ô ”˜–PO‹ÃÝtlF1vü"Ú¤e΃§<ŸQ´3n„g ^pkW5-ò°…ÎŽ±¹ßöZHØ‚¸pºãîK¶KFj#M~YžI_½6%>þ®Â%^kûXE\„¸«4îÓƒI²‘ØÜÚº Qšþ·Aysµvô} œÝ§ÜÁ¡) failed with errno=-22 [ 60.949712][ T5855] __nla_validate_parse: 3 callbacks suppressed [ 60.949732][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 61.180745][ T5866] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 61.421638][ T5874] loop3: detected capacity change from 0 to 256 [ 61.772963][ T5901] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1034'. [ 61.934192][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 61.935772][ T5924] loop5: detected capacity change from 0 to 2048 [ 61.941650][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 61.955369][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 61.962791][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 61.970241][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 61.977705][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 61.985147][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 61.992746][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 62.000208][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 62.007619][ T3392] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 62.018069][ T3392] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 62.147567][ T5924] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.274191][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.989055][ T5962] random: crng reseeded on system resumption [ 63.300143][ T5976] loop2: detected capacity change from 0 to 2048 [ 63.325784][ T5976] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.364179][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 63.364196][ T29] audit: type=1400 audit(1763841699.339:1172): avc: denied { map } for pid=5974 comm="syz.2.1063" path="/219/file0/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.756954][ T29] audit: type=1326 audit(1763841699.713:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.797488][ T29] audit: type=1326 audit(1763841699.741:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.821055][ T29] audit: type=1326 audit(1763841699.741:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.844641][ T29] audit: type=1326 audit(1763841699.741:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.868132][ T29] audit: type=1326 audit(1763841699.741:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.891542][ T29] audit: type=1326 audit(1763841699.741:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.915071][ T29] audit: type=1326 audit(1763841699.741:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.938649][ T29] audit: type=1326 audit(1763841699.741:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.962071][ T29] audit: type=1326 audit(1763841699.741:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 63.992355][ T5993] SELinux: failed to load policy [ 64.016996][ T5995] loop0: detected capacity change from 0 to 128 [ 64.023975][ T5995] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.036164][ T5995] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.060829][ T3431] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.098195][ T5999] loop0: detected capacity change from 0 to 128 [ 64.126613][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'. [ 64.143572][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'. [ 64.195751][ T6005] loop0: detected capacity change from 0 to 512 [ 64.210655][ T6005] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.217300][ T6005] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1076: bad orphan inode 13 [ 64.227622][ T6005] ext4_test_bit(bit=12, block=18) = 1 [ 64.233042][ T6005] is_bad_inode(inode)=0 [ 64.237197][ T6005] NEXT_ORPHAN(inode)=2130706432 [ 64.242046][ T6005] max_ino=32 [ 64.245280][ T6005] i_nlink=1 [ 64.280977][ T3480] Bluetooth: hci1: Frame reassembly failed (-84) [ 64.294427][ T11] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 64.393949][ T6013] SELinux: security_context_str_to_sid («åQü\õ+B.0hçCÐë“Ès+åŽ GqÕo϶ó‡Ë06±:ᔤ· ˜òã·Ù´ß,HÁÇ6aë¿|à¬NW›ÙÿˆZÇ:-°LEæJ©Ì­.grÙŒÿ³™÷aíU„Ñ®Þa“»†®Š‚óÃ47²Úgþpî®#'•ìæÜòÙ>â3›*3½Ô„ãáèÈg¸¨‡è°bÕ©©Þw·StË;„£¥§´¥^ÇlWF—ª˜Nœ³ÙxgÂÖ,ÄㆄI‚?ŠÍ+{^÷bÌ1‰ÞéÊŒò1ÜM%ÿþ} þ©#t¯'úJ) failed with errno=-22 [ 64.488694][ T3496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.489981][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 64.819816][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 65.713082][ T123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.821223][ T123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.840741][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 65.883536][ T6077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.895631][ T123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.970360][ T6085] SELinux: security_context_str_to_sid (í>K| *e›ùQ@&»èÆ©0QÓŽ ué‚Ys•ÀòÖ>ÄR™yíJÆø¼d뱃£ [ 65.970360][ T6085] WŸþæ·?ka^fÿ, ŠŠùx·­Í[ÿOPÓ¶‡í¥I¯) failed with errno=-22 [ 65.970465][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.995484][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.014295][ T6053] bridge_slave_0: entered allmulticast mode [ 66.021331][ T6053] bridge_slave_0: entered promiscuous mode [ 66.031640][ T123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.051355][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.058477][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.074692][ T6053] bridge_slave_1: entered allmulticast mode [ 66.082596][ T6053] bridge_slave_1: entered promiscuous mode [ 66.114380][ T6090] loop0: detected capacity change from 0 to 512 [ 66.123780][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.150353][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.167598][ T6090] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.179207][ T123] bridge_slave_1: left allmulticast mode [ 66.184889][ T123] bridge_slave_1: left promiscuous mode [ 66.190677][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.206697][ T123] bridge_slave_0: left allmulticast mode [ 66.212426][ T123] bridge_slave_0: left promiscuous mode [ 66.218156][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.342256][ T6103] hub 9-0:1.0: USB hub found [ 66.347293][ T6103] hub 9-0:1.0: 8 ports detected [ 66.373876][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.389214][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.402957][ T123] bond0 (unregistering): Released all slaves [ 66.417410][ T6053] team0: Port device team_slave_0 added [ 66.426708][ T6053] team0: Port device team_slave_1 added [ 66.444313][ T123] hsr_slave_0: left promiscuous mode [ 66.452994][ T123] hsr_slave_1: left promiscuous mode [ 66.455353][ T4188] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 66.462596][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.464511][ T3496] Bluetooth: hci1: command 0x1003 tx timeout [ 66.471875][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.533928][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.541480][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.584858][ T123] veth1_macvtap: left promiscuous mode [ 66.601740][ T123] veth0_macvtap: left promiscuous mode [ 66.610551][ T123] veth1_vlan: left promiscuous mode [ 66.619246][ T6119] loop3: detected capacity change from 0 to 1024 [ 66.626053][ T6119] EXT4-fs: Ignoring removed oldalloc option [ 66.632094][ T6119] EXT4-fs: Ignoring removed bh option [ 66.641658][ T123] veth0_vlan: left promiscuous mode [ 66.760235][ T6119] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 66.790066][ T123] team0 (unregistering): Port device team_slave_1 removed [ 66.809294][ T123] team0 (unregistering): Port device team_slave_0 removed [ 66.889888][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.896915][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.922875][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.943938][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.950948][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.976934][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.018096][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 67.027154][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 67.042728][ T6053] hsr_slave_0: entered promiscuous mode [ 67.065833][ T6053] hsr_slave_1: entered promiscuous mode [ 67.075709][ T6053] debugfs: 'hsr0' already exists in 'hsr' [ 67.081458][ T6053] Cannot create hsr debugfs directory [ 67.096594][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 67.105606][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 67.237667][ T6156] loop2: detected capacity change from 0 to 1024 [ 67.251623][ T6156] EXT4-fs: Ignoring removed oldalloc option [ 67.253788][ T6053] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.257656][ T6156] EXT4-fs: Ignoring removed bh option [ 67.315789][ T6053] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.335436][ T6053] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.352610][ T6156] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 67.435032][ T6053] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.538924][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.553356][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.562968][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.570552][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.622044][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.629650][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.667568][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 67.676670][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 67.717451][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 67.726500][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 67.743201][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.863330][ T6202] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 67.905538][ T6207] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1148'. [ 67.955457][ T6053] veth0_vlan: entered promiscuous mode [ 67.972890][ T6053] veth1_vlan: entered promiscuous mode [ 67.995720][ T6053] veth0_macvtap: entered promiscuous mode [ 68.013948][ T6053] veth1_macvtap: entered promiscuous mode [ 68.038808][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.053994][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.074579][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.083507][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.099295][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.110809][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.155064][ T6222] loop3: detected capacity change from 0 to 512 [ 68.171059][ T6222] EXT4-fs: Ignoring removed nobh option [ 68.179155][ T6222] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.257840][ T6222] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.269445][ T6222] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 68.279572][ T6222] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1161: Corrupt directory, running e2fsck is recommended [ 68.312615][ T6237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.336384][ T6222] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 68.381626][ T6237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.400682][ T6222] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1161: corrupted in-inode xattr: invalid ea_ino [ 68.433765][ T6222] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1161: couldn't read orphan inode 15 (err -117) [ 68.469858][ T6237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.482862][ T6222] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.494482][ T6222] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 68.504653][ T6222] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1161: Corrupt directory, running e2fsck is recommended [ 68.519803][ T6222] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.531526][ T6222] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 68.541854][ T6222] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1161: Corrupt directory, running e2fsck is recommended [ 68.574920][ T6222] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.586480][ T6222] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 68.596677][ T6222] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1161: Corrupt directory, running e2fsck is recommended [ 68.611357][ T6237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.613406][ T6222] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.675873][ T6276] netlink: 'syz.5.1176': attribute type 3 has an invalid length. [ 68.683694][ T6276] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1176'. [ 68.697502][ T123] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.709357][ T123] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.717943][ T123] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.729576][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.757330][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 68.757347][ T29] audit: type=1326 audit(1763841704.390:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.789295][ T29] audit: type=1326 audit(1763841704.390:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.812728][ T29] audit: type=1326 audit(1763841704.390:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.836178][ T29] audit: type=1326 audit(1763841704.390:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.859868][ T29] audit: type=1326 audit(1763841704.390:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.883136][ T29] audit: type=1326 audit(1763841704.390:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.906807][ T29] audit: type=1326 audit(1763841704.390:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.930257][ T29] audit: type=1326 audit(1763841704.390:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.953720][ T29] audit: type=1326 audit(1763841704.390:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 68.977395][ T29] audit: type=1326 audit(1763841704.390:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 69.050331][ T6290] loop6: detected capacity change from 0 to 512 [ 69.103118][ T6290] EXT4-fs mount: 26 callbacks suppressed [ 69.103131][ T6290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.128991][ T6290] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.236357][ T6053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.275248][ T6317] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.366648][ T6339] loop5: detected capacity change from 0 to 512 [ 69.388258][ T6339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.434001][ T6347] atomic_op ffff8881363de528 conn xmit_atomic 0000000000000000 [ 69.441797][ T6339] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.472256][ T6349] netlink: 'syz.0.1207': attribute type 39 has an invalid length. [ 69.530891][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.963127][ T6405] syzkaller1: entered promiscuous mode [ 69.968655][ T6405] syzkaller1: entered allmulticast mode [ 70.161145][ T1051] Process accounting resumed [ 70.341116][ T6435] loop3: detected capacity change from 0 to 764 [ 70.557894][ T6459] loop3: detected capacity change from 0 to 2048 [ 70.578677][ T6459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.607262][ T6459] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 70.607574][ T6459] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 70.634537][ T6459] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.634537][ T6459] [ 70.634556][ T6459] EXT4-fs (loop3): Total free blocks count 0 [ 70.634575][ T6459] EXT4-fs (loop3): Free/Dirty block details [ 70.634590][ T6459] EXT4-fs (loop3): free_blocks=66060288 [ 70.634642][ T6459] EXT4-fs (loop3): dirty_blocks=48 [ 70.667112][ T6459] EXT4-fs (loop3): Block reservation details [ 70.667128][ T6459] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 70.719089][ T6459] EXT4-fs (loop3): shut down requested (1) [ 70.745181][ T6480] netlink: 'syz.5.1265': attribute type 12 has an invalid length. [ 70.776291][ T6483] loop3: detected capacity change from 0 to 2048 [ 70.806992][ T6483] loop3: p1 < > p4 [ 70.811835][ T6483] loop3: p4 size 8388608 extends beyond EOD, truncated [ 71.279537][ T6317] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.036835][ T6668] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 72.091782][ T6673] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 72.443534][ T6703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6703 comm=syz.2.1336 [ 72.485896][ T6317] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.523265][ T6707] SELinux: Context @ is not valid (left unmapped). [ 72.543404][ T6317] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.591404][ T6524] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.610586][ T6524] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.631100][ T6524] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.655547][ T6524] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.765222][ T6722] IPv6: sit1: Disabled Multicast RS [ 72.771309][ T6722] sit1: entered allmulticast mode [ 72.835470][ T6732] __nla_validate_parse: 2 callbacks suppressed [ 72.835488][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1348'. [ 72.858617][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1350'. [ 72.859212][ T6732] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 72.877796][ T6728] hsr_slave_1 (unregistering): left promiscuous mode [ 73.217673][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 73.426985][ T6800] loop3: detected capacity change from 0 to 512 [ 73.435856][ T6800] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 73.448688][ T6800] EXT4-fs (loop3): 1 truncate cleaned up [ 73.454680][ T6800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.504407][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.561634][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 73.594056][ T6812] team0 (unregistering): Port device team_slave_0 removed [ 73.614175][ T6812] team0 (unregistering): Port device team_slave_1 removed [ 73.692012][ T6826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.727404][ T6824] netlink: 'syz.2.1392': attribute type 3 has an invalid length. [ 73.753058][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1395'. [ 73.795694][ T6826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.815874][ T6841] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.856742][ T6826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.922330][ T6859] pim6reg1: entered promiscuous mode [ 73.927718][ T6859] pim6reg1: entered allmulticast mode [ 73.952785][ T6826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.030527][ T6576] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.041851][ T6576] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.053511][ T6576] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.071385][ T123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.163071][ T6877] loop5: detected capacity change from 0 to 128 [ 74.170238][ T6877] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.182398][ T6877] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.208842][ T123] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.241941][ T6882] loop3: detected capacity change from 0 to 512 [ 74.250153][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 74.250175][ T29] audit: type=1400 audit(1763841709.526:1498): avc: denied { write } for pid=6885 comm="syz.5.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.251284][ T6882] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: comm syz.3.1418: inode #1792: comm syz.3.1418: iget: illegal inode # [ 74.256397][ T29] audit: type=1400 audit(1763841709.526:1499): avc: denied { read } for pid=6885 comm="syz.5.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.258815][ T6887] netlink: 4124 bytes leftover after parsing attributes in process `syz.0.1419'. [ 74.276919][ T6882] EXT4-fs (loop3): Remounting filesystem read-only [ 74.325856][ T6882] EXT4-fs (loop3): no journal found [ 74.331429][ T6882] EXT4-fs (loop3): can't get journal size [ 74.338257][ T6882] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 74.339532][ T6889] bridge0: entered promiscuous mode [ 74.348635][ T6882] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 74.353458][ T6889] macsec1: entered promiscuous mode [ 74.361582][ T6882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.367141][ T6889] bridge0: port 3(macsec1) entered blocking state [ 74.384921][ T6889] bridge0: port 3(macsec1) entered disabled state [ 74.396121][ T6889] macsec1: entered allmulticast mode [ 74.401494][ T6889] bridge0: entered allmulticast mode [ 74.420087][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.430105][ T6889] macsec1: left allmulticast mode [ 74.435251][ T6889] bridge0: left allmulticast mode [ 74.443072][ T29] audit: type=1400 audit(1763841709.713:1500): avc: denied { append } for pid=6894 comm="syz.5.1423" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 74.466712][ T6889] bridge0: left promiscuous mode [ 74.497922][ T29] audit: type=1326 audit(1763841709.760:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecad2f749 code=0x7ffc0000 [ 74.521387][ T29] audit: type=1326 audit(1763841709.760:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecad2f749 code=0x7ffc0000 [ 74.545513][ T29] audit: type=1326 audit(1763841709.760:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecad2f749 code=0x7ffc0000 [ 74.569047][ T29] audit: type=1326 audit(1763841709.760:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecad2f749 code=0x7ffc0000 [ 74.592731][ T29] audit: type=1326 audit(1763841709.760:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feecad2f749 code=0x7ffc0000 [ 74.616295][ T29] audit: type=1326 audit(1763841709.760:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecad2f749 code=0x7ffc0000 [ 74.639865][ T29] audit: type=1326 audit(1763841709.760:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecad2f749 code=0x7ffc0000 [ 75.049942][ T6951] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1449'. [ 75.085559][ T6933] futex_wake_op: syz.0.1440 tries to shift op by -1; fix this program [ 75.174230][ T3415] kernel write not supported for file bpf-prog (pid: 3415 comm: kworker/1:4) [ 75.218091][ T6963] netlink: 'syz.5.1452': attribute type 3 has an invalid length. [ 75.295113][ T6974] loop3: detected capacity change from 0 to 128 [ 75.301963][ T6974] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.314069][ T6974] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.335910][ T6576] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.904990][ T7012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1476'. [ 75.914747][ T7012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1476'. [ 75.993973][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 76.234494][ T7069] hub 9-0:1.0: USB hub found [ 76.249943][ T7069] hub 9-0:1.0: 8 ports detected [ 76.414247][ T7086] loop5: detected capacity change from 0 to 512 [ 76.447816][ T7086] EXT4-fs: Ignoring removed nobh option [ 76.464512][ T7086] EXT4-fs (loop5): orphan cleanup on readonly fs [ 76.471284][ T7086] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 76.483474][ T7086] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 76.494205][ T7086] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1510: Corrupt directory, running e2fsck is recommended [ 76.510756][ T7086] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 76.519847][ T7086] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1510: corrupted in-inode xattr: invalid ea_ino [ 76.533516][ T7086] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1510: couldn't read orphan inode 15 (err -117) [ 76.546017][ T7086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.562730][ T7086] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 76.574343][ T7086] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 76.584471][ T7086] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1510: Corrupt directory, running e2fsck is recommended [ 76.599700][ T7086] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 76.611454][ T7086] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 76.621572][ T7086] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1510: Corrupt directory, running e2fsck is recommended [ 76.646637][ T7086] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 76.658310][ T7086] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 76.668418][ T7086] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1510: Corrupt directory, running e2fsck is recommended [ 76.764972][ T7086] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 76.829819][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.856534][ T7099] loop5: detected capacity change from 0 to 512 [ 76.863896][ T7099] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.1513: inode #1792: comm syz.5.1513: iget: illegal inode # [ 76.877973][ T7099] EXT4-fs (loop5): Remounting filesystem read-only [ 76.884658][ T7099] EXT4-fs (loop5): no journal found [ 76.889948][ T7099] EXT4-fs (loop5): can't get journal size [ 76.898008][ T7099] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 76.907903][ T7099] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 76.916273][ T7099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.948324][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.086520][ T7132] hub 9-0:1.0: USB hub found [ 77.091338][ T7132] hub 9-0:1.0: 8 ports detected [ 77.268229][ T7157] hub 9-0:1.0: USB hub found [ 77.273260][ T7157] hub 9-0:1.0: 8 ports detected [ 77.583846][ T3415] kernel write not supported for file bpf-prog (pid: 3415 comm: kworker/1:4) [ 77.627581][ T123] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.764849][ T7225] loop3: detected capacity change from 0 to 512 [ 77.788770][ T7225] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.795435][ T7225] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1581: bad orphan inode 13 [ 77.805828][ T7225] ext4_test_bit(bit=12, block=18) = 1 [ 77.811320][ T7225] is_bad_inode(inode)=0 [ 77.815528][ T7225] NEXT_ORPHAN(inode)=2130706432 [ 77.820455][ T7225] max_ino=32 [ 77.823732][ T7225] i_nlink=1 [ 77.827462][ T7225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.884783][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.928683][ T7243] loop3: detected capacity change from 0 to 128 [ 77.935395][ T7243] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.947471][ T7243] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.987948][ T6576] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.043463][ T7257] netlink: 'syz.5.1585': attribute type 39 has an invalid length. [ 78.712819][ T7279] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 79.309724][ T7331] loop3: detected capacity change from 0 to 512 [ 79.325750][ T7331] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.348651][ T7331] EXT4-fs (loop3): 1 truncate cleaned up [ 79.358052][ T7331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.445943][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.759340][ T7349] __nla_validate_parse: 1 callbacks suppressed [ 79.759398][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1623'. [ 79.776048][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 79.782512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.790377][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.798241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.806257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.814073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.821904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.829718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.837547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.845359][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.853177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.861000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.868868][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.876720][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.884548][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.892362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.900216][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.908032][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.915859][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.923659][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.931506][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.939324][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.947141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.954943][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.962796][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.970608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.978434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 79.986376][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 79.994207][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.002047][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.009951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.017772][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.025603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.033409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.041236][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.049078][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.056908][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.064730][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.072548][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.080366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.088208][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.096024][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.103864][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.111714][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.119543][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.127378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.135236][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.143064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.150920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.158719][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.166578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.174399][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.182241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.190058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.197901][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.205778][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.213598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.221421][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.229269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.237104][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.244952][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.252815][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.260675][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.268544][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.276410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.284259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.292150][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.300004][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.307842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.315686][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.323556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.331401][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.339228][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.347048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.354876][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.362677][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.370516][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.378330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.386156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.393966][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.401815][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.409629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.417485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.425282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.433127][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.440949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.448763][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.456587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.464406][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.472253][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.480091][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.487939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.495858][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.503707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.511529][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.519350][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.527193][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.535033][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.542852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.550692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.559722][ T3496] Bluetooth: hci0: command 0x1003 tx timeout [ 80.566066][ T4188] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.669689][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 80.669704][ T29] audit: type=1326 audit(1763841715.531:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705f67f749 code=0x7ffc0000 [ 80.699738][ T29] audit: type=1326 audit(1763841715.531:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705f67f749 code=0x7ffc0000 [ 80.725438][ T29] audit: type=1326 audit(1763841715.531:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f705f67f749 code=0x7ffc0000 [ 80.748908][ T29] audit: type=1326 audit(1763841715.531:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705f67f749 code=0x7ffc0000 [ 80.773563][ T29] audit: type=1326 audit(1763841715.568:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705f67f749 code=0x7ffc0000 [ 80.777802][ T7368] loop3: detected capacity change from 0 to 1024 [ 80.821659][ T7368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.872244][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.895536][ T29] audit: type=1326 audit(1763841715.737:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 80.919086][ T29] audit: type=1326 audit(1763841715.737:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 80.942549][ T29] audit: type=1326 audit(1763841715.737:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 80.965963][ T29] audit: type=1326 audit(1763841715.737:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efd50ccf749 code=0x7ffc0000 [ 80.989445][ T29] audit: type=1326 audit(1763841715.737:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd50d02005 code=0x7ffc0000 [ 81.074139][ T7391] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 81.113974][ T7395] netlink: 'syz.6.1642': attribute type 39 has an invalid length. [ 81.395830][ T7410] loop6: detected capacity change from 0 to 1024 [ 81.417676][ T7410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.440149][ T7414] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.470794][ T6053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.538347][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1655'. [ 81.559466][ T7425] loop5: detected capacity change from 0 to 8192 [ 81.646341][ T7437] loop3: detected capacity change from 0 to 512 [ 81.661819][ T7437] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.686062][ T7437] EXT4-fs (loop3): 1 truncate cleaned up [ 81.694709][ T7437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.785944][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 81.828842][ T7452] hsr_slave_1 (unregistering): left promiscuous mode [ 81.869458][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.910731][ T7458] loop3: detected capacity change from 0 to 1024 [ 81.929318][ T7458] EXT4-fs: inline encryption not supported [ 81.957863][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.031419][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.066844][ T7472] random: crng reseeded on system resumption [ 82.203453][ T7493] loop3: detected capacity change from 0 to 1024 [ 82.210398][ T7493] EXT4-fs: Ignoring removed bh option [ 82.228573][ T7495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7495 comm=syz.5.1687 [ 82.229055][ T7493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.273275][ T7493] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 82.299133][ T7493] EXT4-fs (loop3): Remounting filesystem read-only [ 82.308075][ T7493] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 82.352564][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.363562][ T7501] loop5: detected capacity change from 0 to 128 [ 82.372047][ T7501] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.385273][ T7501] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.419587][ T4264] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.652961][ T7543] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1708'. [ 82.662778][ T7543] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1708'. [ 82.727712][ T7546] loop5: detected capacity change from 0 to 2048 [ 82.734761][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 82.753771][ T7546] EXT4-fs: Ignoring removed bh option [ 82.778084][ T7546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.808555][ T7546] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.823969][ T7546] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 82.836429][ T7546] EXT4-fs (loop5): This should not happen!! Data will be lost [ 82.836429][ T7546] [ 82.846263][ T7546] EXT4-fs (loop5): Total free blocks count 0 [ 82.852452][ T7546] EXT4-fs (loop5): Free/Dirty block details [ 82.858545][ T7546] EXT4-fs (loop5): free_blocks=2415919104 [ 82.864497][ T7546] EXT4-fs (loop5): dirty_blocks=48 [ 82.866976][ T7567] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.869907][ T7546] EXT4-fs (loop5): Block reservation details [ 82.882118][ T7567] EXT4-fs (loop5): This should not happen!! Data will be lost [ 82.882118][ T7567] [ 82.915115][ T7569] loop6: detected capacity change from 0 to 512 [ 82.978682][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 83.038211][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1724'. [ 83.099596][ T7589] loop6: detected capacity change from 0 to 512 [ 83.124095][ T7589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.153402][ T7589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.166202][ T7589] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.215095][ T6053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.243468][ T123] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.314615][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1740'. [ 83.323713][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1740'. [ 83.347487][ T123] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.423029][ T123] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.489310][ T123] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.620958][ T7611] chnl_net:caif_netlink_parms(): no params data found [ 83.691189][ T123] bridge_slave_1: left allmulticast mode [ 83.696962][ T123] bridge_slave_1: left promiscuous mode [ 83.702754][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.729679][ T123] bridge_slave_0: left promiscuous mode [ 83.735522][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.877907][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.882193][ T7658] loop6: detected capacity change from 0 to 512 [ 83.903707][ T7658] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.914292][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.916030][ T7658] EXT4-fs (loop6): 1 truncate cleaned up [ 83.929158][ T7658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.929852][ T123] bond0 (unregistering): Released all slaves [ 83.995339][ T6053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.013598][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.020876][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.039270][ T7611] bridge_slave_0: entered allmulticast mode [ 84.049610][ T7611] bridge_slave_0: entered promiscuous mode [ 84.058136][ T123] hsr_slave_0: left promiscuous mode [ 84.067542][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.075198][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.083298][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.090807][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.102322][ T123] veth1_macvtap: left promiscuous mode [ 84.107905][ T123] veth0_macvtap: left promiscuous mode [ 84.113886][ T123] veth1_vlan: left promiscuous mode [ 84.119339][ T123] veth0_vlan: left promiscuous mode [ 84.189909][ T7677] loop3: detected capacity change from 0 to 512 [ 84.196462][ T123] team0 (unregistering): Port device team_slave_1 removed [ 84.196633][ T7677] EXT4-fs: inline encryption not supported [ 84.209643][ T123] team0 (unregistering): Port device team_slave_0 removed [ 84.213250][ T7677] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 84.225199][ T7677] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1768: invalid indirect mapped block 2683928664 (level 1) [ 84.239956][ T7677] EXT4-fs (loop3): 1 truncate cleaned up [ 84.248470][ T7677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.261809][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.269001][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.287634][ T7677] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1768: Invalid block bitmap block 3 in block_group 0 [ 84.301546][ T7611] bridge_slave_1: entered allmulticast mode [ 84.309149][ T7611] bridge_slave_1: entered promiscuous mode [ 84.315212][ T7677] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1768: Invalid block bitmap block 3 in block_group 0 [ 84.343046][ T7611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.351547][ T7677] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1768: Invalid block bitmap block 3 in block_group 0 [ 84.353575][ T7611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.392661][ T7611] team0: Port device team_slave_0 added [ 84.405341][ T7611] team0: Port device team_slave_1 added [ 84.412061][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.435211][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.442248][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.468289][ T7611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.486246][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.493340][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.501071][ T7692] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 84.519650][ T7611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.564840][ T7611] hsr_slave_0: entered promiscuous mode [ 84.572419][ T7696] loop3: detected capacity change from 0 to 2048 [ 84.576020][ T7611] hsr_slave_1: entered promiscuous mode [ 84.608290][ T7696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.625202][ T7696] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 84.641174][ T7696] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.653628][ T7696] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.653628][ T7696] [ 84.663321][ T7696] EXT4-fs (loop3): Total free blocks count 0 [ 84.669325][ T7696] EXT4-fs (loop3): Free/Dirty block details [ 84.675317][ T7696] EXT4-fs (loop3): free_blocks=2415919504 [ 84.681072][ T7696] EXT4-fs (loop3): dirty_blocks=32 [ 84.686331][ T7696] EXT4-fs (loop3): Block reservation details [ 84.692380][ T7696] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 84.767560][ T123] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.827531][ T123] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.856244][ T7664] chnl_net:caif_netlink_parms(): no params data found [ 84.897953][ T7611] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 84.907791][ T123] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.930293][ T7611] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 84.960604][ T123] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.974570][ T7611] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 84.993177][ T7611] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 85.037721][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.044992][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.063948][ T7664] bridge_slave_0: entered allmulticast mode [ 85.083210][ T7664] bridge_slave_0: entered promiscuous mode [ 85.104507][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.111773][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.130264][ T7664] bridge_slave_1: entered allmulticast mode [ 85.151549][ T7664] bridge_slave_1: entered promiscuous mode [ 85.202522][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.226320][ T7611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.265283][ T123] bridge_slave_1: left allmulticast mode [ 85.271211][ T123] bridge_slave_1: left promiscuous mode [ 85.277098][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.286053][ T123] bridge_slave_0: left allmulticast mode [ 85.291806][ T123] bridge_slave_0: left promiscuous mode [ 85.297620][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.382066][ T123] bond1 (unregistering): (slave geneve2): Releasing active interface [ 85.433787][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.444223][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.460799][ T123] bond0 (unregistering): Released all slaves [ 85.470060][ T123] bond1 (unregistering): Released all slaves [ 85.481337][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.484794][ T6577] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 85.496182][ T7611] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.546302][ T7664] team0: Port device team_slave_0 added [ 85.554198][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.561312][ T6576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.571645][ T7664] team0: Port device team_slave_1 added [ 85.579050][ T123] hsr_slave_0: left promiscuous mode [ 85.591992][ T123] hsr_slave_1: left promiscuous mode [ 85.597741][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.605190][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.625057][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.632470][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.659234][ T123] veth1_macvtap: left promiscuous mode [ 85.664801][ T123] veth0_macvtap: left promiscuous mode [ 85.676682][ T123] veth1_vlan: left promiscuous mode [ 85.690214][ T123] veth0_vlan: left promiscuous mode [ 85.889290][ T7758] loop3: detected capacity change from 0 to 512 [ 85.899623][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.906515][ T7758] ------------[ cut here ]------------ [ 85.906774][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.912286][ T7758] EA inode 11 i_nlink=2 [ 85.919695][ T7758] WARNING: CPU: 0 PID: 7758 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 85.934059][ T7758] Modules linked in: [ 85.938055][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.3.1792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.947927][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.958204][ T7758] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 85.964846][ T7758] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 a5 d6 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 85.984934][ T7758] RSP: 0018:ffffc900001f3778 EFLAGS: 00010246 [ 85.991193][ T7758] RAX: cc90980e64d0c900 RBX: ffff88810060d308 RCX: 0000000000080000 [ 85.999287][ T7758] RDX: ffffc90002694000 RSI: 0000000000018ed7 RDI: 0000000000018ed8 [ 86.007266][ T7758] RBP: 0000000000000002 R08: 0001c900001f35f7 R09: 0000000000000000 [ 86.015309][ T7758] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810060d2b8 [ 86.023351][ T7758] R13: 000000000000000b R14: ffff88810060d270 R15: 0000000000000001 [ 86.031405][ T7758] FS: 00007feec978f6c0(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 86.040399][ T7758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.047154][ T7758] CR2: 0000000034747865 CR3: 000000010361a000 CR4: 00000000003506f0 [ 86.055177][ T7758] Call Trace: [ 86.058468][ T7758] [ 86.061409][ T7758] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 86.067392][ T7758] ? errseq_check+0x2c/0x50 [ 86.071923][ T7758] ext4_xattr_delete_inode+0x6b7/0x790 [ 86.077532][ T7758] ext4_evict_inode+0xa6a/0xd90 [ 86.082519][ T7758] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.088026][ T7758] evict+0x2e3/0x550 [ 86.091930][ T7758] ? __dquot_initialize+0x146/0x7c0 [ 86.097166][ T7758] iput+0x4ed/0x650 [ 86.100997][ T7758] ext4_process_orphan+0x1a9/0x1c0 [ 86.106300][ T7758] ext4_orphan_cleanup+0x6a8/0xa00 [ 86.111504][ T7758] ext4_fill_super+0x3483/0x3810 [ 86.116469][ T7758] ? snprintf+0x86/0xb0 [ 86.120633][ T7758] ? set_blocksize+0x1a8/0x310 [ 86.125413][ T7758] ? sb_set_blocksize+0xe3/0x100 [ 86.130614][ T7758] ? setup_bdev_super+0x30e/0x370 [ 86.135671][ T7758] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.141053][ T7758] get_tree_bdev_flags+0x291/0x300 [ 86.146287][ T7758] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.151626][ T7758] get_tree_bdev+0x1f/0x30 [ 86.156150][ T7758] ext4_get_tree+0x1c/0x30 [ 86.160631][ T7758] vfs_get_tree+0x57/0x1d0 [ 86.165059][ T7758] do_new_mount+0x24d/0x660 [ 86.169630][ T7758] path_mount+0x4a5/0xb70 [ 86.174086][ T7758] ? user_path_at+0x109/0x130 [ 86.178828][ T7758] __se_sys_mount+0x28c/0x2e0 [ 86.183540][ T7758] __x64_sys_mount+0x67/0x80 [ 86.188346][ T7758] x64_sys_call+0x2b51/0x3000 [ 86.193047][ T7758] do_syscall_64+0xd2/0x200 [ 86.197593][ T7758] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.203706][ T7758] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.209481][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.215421][ T7758] RIP: 0033:0x7feecad30eea [ 86.219857][ T7758] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.239526][ T7758] RSP: 002b:00007feec978ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.247957][ T7758] RAX: ffffffffffffffda RBX: 00007feec978eef0 RCX: 00007feecad30eea [ 86.255971][ T7758] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007feec978eeb0 [ 86.264012][ T7758] RBP: 0000200000000180 R08: 00007feec978eef0 R09: 0000000000808f00 [ 86.272095][ T7758] R10: 0000000000808f00 R11: 0000000000000246 R12: 00002000000001c0 [ 86.280096][ T7758] R13: 00007feec978eeb0 R14: 0000000000000477 R15: 000000000000002c [ 86.288093][ T7758] [ 86.291154][ T7758] ---[ end trace 0000000000000000 ]--- [ 86.297362][ T7758] EXT4-fs (loop3): 1 orphan inode deleted [ 86.304443][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.311467][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.314163][ T7758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.337503][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.383853][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.390874][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.416953][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.481035][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 86.481094][ T29] audit: type=1400 audit(1763841720.966:1759): avc: denied { create } for pid=7767 comm="syz.6.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 86.509215][ T7664] hsr_slave_0: entered promiscuous mode [ 86.517327][ T7664] hsr_slave_1: entered promiscuous mode [ 86.523659][ T7664] debugfs: 'hsr0' already exists in 'hsr' [ 86.529439][ T7664] Cannot create hsr debugfs directory [ 86.535498][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.544579][ T29] audit: type=1400 audit(1763841721.012:1760): avc: denied { bind } for pid=7767 comm="syz.6.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 86.646839][ T7611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.701044][ T7664] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 86.712480][ T7664] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 86.728878][ T7664] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 86.748039][ T7664] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 86.791115][ T7793] loop6: detected capacity change from 0 to 2048 [ 86.800033][ T7796] __nla_validate_parse: 1 callbacks suppressed [ 86.800051][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 86.807973][ T7793] EXT4-fs: Ignoring removed bh option [ 86.833988][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 86.853675][ T7793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.879085][ T7811] loop5: detected capacity change from 0 to 128 [ 86.887901][ T7811] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.895182][ T7793] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.910630][ T7811] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.917209][ T7793] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 86.935945][ T7793] EXT4-fs (loop6): This should not happen!! Data will be lost [ 86.935945][ T7793] [ 86.945624][ T7793] EXT4-fs (loop6): Total free blocks count 0 [ 86.951656][ T7793] EXT4-fs (loop6): Free/Dirty block details [ 86.957574][ T7793] EXT4-fs (loop6): free_blocks=2415919104 [ 86.963372][ T7793] EXT4-fs (loop6): dirty_blocks=48 [ 86.968560][ T7793] EXT4-fs (loop6): Block reservation details [ 86.969834][ T7814] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 86.974688][ T7793] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 86.993321][ T123] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.015636][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.028133][ T7664] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.037844][ T7818] loop5: detected capacity change from 0 to 512 [ 87.050537][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.055436][ T7818] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.057640][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.078830][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.086017][ T6524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.106933][ T7818] EXT4-fs (loop5): 1 truncate cleaned up [ 87.120871][ T7818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.134897][ T7664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.179319][ T7611] veth0_vlan: entered promiscuous mode [ 87.221940][ T7611] veth1_vlan: entered promiscuous mode [ 87.232794][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.241462][ T7831] netlink: 'syz.3.1812': attribute type 27 has an invalid length. [ 87.247880][ T7611] veth0_macvtap: entered promiscuous mode [ 87.256691][ T7611] veth1_macvtap: entered promiscuous mode [ 87.268372][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.280726][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.280798][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.309395][ T7833] netlink: 'syz.6.1813': attribute type 10 has an invalid length. [ 87.319975][ T29] audit: type=1326 audit(1763841721.742:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 87.343580][ T29] audit: type=1326 audit(1763841721.742:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 87.367172][ T29] audit: type=1326 audit(1763841721.742:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 87.377647][ T7839] loop5: detected capacity change from 0 to 8192 [ 87.390759][ T29] audit: type=1326 audit(1763841721.742:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 87.398821][ T7839] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.420550][ T29] audit: type=1326 audit(1763841721.742:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 87.420589][ T29] audit: type=1326 audit(1763841721.751:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 87.431182][ T7840] netlink: 'syz.6.1813': attribute type 10 has an invalid length. [ 87.454427][ T29] audit: type=1326 audit(1763841721.751:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 87.454523][ T29] audit: type=1326 audit(1763841721.751:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 87.596386][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.603746][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.644960][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.656333][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.727382][ T7833] team0: Port device dummy0 added [ 87.749503][ T7840] team0: Port device dummy0 removed [ 87.782061][ T7840] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.802369][ T6589] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.810869][ T6589] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.836764][ T6589] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.878830][ T6589] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.935424][ T6589] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.961637][ T7865] serio: Serial port ptm0 [ 87.967019][ T6589] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.997075][ T6589] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.031588][ T6589] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.058782][ T7664] veth0_vlan: entered promiscuous mode [ 88.077714][ T7664] veth1_vlan: entered promiscuous mode [ 88.108800][ T7664] veth0_macvtap: entered promiscuous mode [ 88.140208][ T7664] veth1_macvtap: entered promiscuous mode [ 88.152574][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.181980][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.212990][ T6517] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.235659][ T6517] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.266419][ T6517] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.299574][ T6517] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.430503][ T7910] loop6: detected capacity change from 0 to 1024 [ 88.467742][ T7910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.515280][ T7921] loop8: detected capacity change from 0 to 1024 [ 88.522378][ T7921] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.533548][ T7921] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.565131][ T7921] JBD2: no valid journal superblock found [ 88.571170][ T7921] EXT4-fs (loop8): Could not load journal inode [ 88.582635][ T7921] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 88.799792][ T6053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.810481][ T7926] loop8: detected capacity change from 0 to 2048 [ 88.822123][ T7926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.849012][ T7664] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 88.864331][ T7664] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 88.888501][ T7664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.952465][ T7935] vhci_hcd: invalid port number 96 [ 88.957618][ T7935] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 88.990161][ T7937] loop6: detected capacity change from 0 to 764 [ 89.014431][ T7937] rock: directory entry would overflow storage [ 89.020707][ T7937] rock: sig=0x4f50, size=4, remaining=3 [ 89.026303][ T7937] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 89.380689][ T7999] loop6: detected capacity change from 0 to 1024 [ 89.403277][ T7999] EXT4-fs: inline encryption not supported [ 89.451893][ T7999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.482669][ T8003] loop3: detected capacity change from 0 to 8192 [ 89.559141][ T6053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.594992][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1869'. [ 89.644673][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1870'. [ 89.832904][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1879'. [ 89.854858][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1879'. [ 89.869630][ T8039] SELinux: security policydb version 17 (MLS) not backwards compatible [ 89.879358][ T8039] SELinux: failed to load policy [ 89.967338][ T8041] netlink: 'syz.5.1881': attribute type 4 has an invalid length. [ 89.975276][ T8041] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1881'. [ 90.037573][ T8047] loop5: detected capacity change from 0 to 1024 [ 90.046625][ T8047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.226303][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1889'. [ 90.248164][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1889'. [ 90.285205][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.299761][ T8063] bridge_slave_0 (unregistering): left allmulticast mode [ 90.306976][ T8063] bridge_slave_0 (unregistering): left promiscuous mode [ 90.313979][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.333504][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1892'. [ 90.442590][ T7853] Process accounting resumed [ 90.461382][ T8086] loop7: detected capacity change from 0 to 128 [ 90.474163][ T8086] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.486460][ T8086] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.552504][ T7611] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.589127][ T8091] bond1: Unable to set down delay as MII monitoring is disabled [ 90.606723][ T8091] bond1 (unregistering): Released all slaves [ 90.628651][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.736368][ T8103] loop5: detected capacity change from 0 to 1024 [ 90.750367][ T8103] EXT4-fs: inline encryption not supported [ 90.767850][ T8103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.830435][ T4264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.857733][ T8120] 9p: Unknown Cache mode or invalid value r [ 91.164994][ T7853] hid_parser_main: 40 callbacks suppressed [ 91.165016][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 91.178541][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.186169][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.193663][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.201092][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.208553][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.216427][ T8163] loop8: detected capacity change from 0 to 8192 [ 91.217729][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.230332][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.237898][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 91.245334][ T7853] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.290916][ T8177] loop5: detected capacity change from 0 to 2048 [ 91.302615][ T8179] syzkaller0: entered promiscuous mode [ 91.308147][ T8179] syzkaller0: entered allmulticast mode [ 91.314352][ T7853] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 91.326027][ T8177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.350779][ T8177] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 91.374041][ T8177] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.386424][ T8177] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.386424][ T8177] [ 91.396121][ T8177] EXT4-fs (loop5): Total free blocks count 0 [ 91.402185][ T8177] EXT4-fs (loop5): Free/Dirty block details [ 91.408288][ T8177] EXT4-fs (loop5): free_blocks=2415919504 [ 91.414072][ T8177] EXT4-fs (loop5): dirty_blocks=32 [ 91.419417][ T8177] EXT4-fs (loop5): Block reservation details [ 91.425637][ T8177] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 91.434839][ T8190] loop6: detected capacity change from 0 to 2048 [ 91.472676][ T8190] Alternate GPT is invalid, using primary GPT. [ 91.479053][ T8190] loop6: p1 p2 p3 [ 91.482812][ T8190] loop6: partition table partially beyond EOD, truncated [ 91.544508][ T8199] loop6: detected capacity change from 0 to 256 [ 91.570817][ T8199] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.710136][ T8219] netlink: 'syz.7.1956': attribute type 21 has an invalid length. [ 91.770423][ T8223] netlink: 'syz.8.1958': attribute type 13 has an invalid length. [ 91.791496][ T8223] gretap0: refused to change device tx_queue_len [ 91.798051][ T8223] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.821762][ T8227] syzkaller1: entered promiscuous mode [ 91.827311][ T8227] syzkaller1: entered allmulticast mode [ 91.870539][ T8231] loop8: detected capacity change from 0 to 1024 [ 91.886347][ T8231] EXT4-fs: Ignoring removed orlov option [ 91.901186][ T8231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.158012][ T8253] netlink: 'syz.7.1973': attribute type 29 has an invalid length. [ 92.373893][ T6570] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 92.443405][ T7664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.467900][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 92.467964][ T29] audit: type=1326 audit(1763841726.569:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f51cf749 code=0x7ffc0000 [ 92.497160][ T29] audit: type=1326 audit(1763841726.569:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f51cf749 code=0x7ffc0000 [ 92.525098][ T8266] loop7: detected capacity change from 0 to 1024 [ 92.573672][ T29] audit: type=1326 audit(1763841726.644:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f12f51cf749 code=0x7ffc0000 [ 92.574065][ T8266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.596433][ T29] audit: type=1326 audit(1763841726.644:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f51cf749 code=0x7ffc0000 [ 92.631981][ T29] audit: type=1326 audit(1763841726.644:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f51cf749 code=0x7ffc0000 [ 92.654969][ T29] audit: type=1326 audit(1763841726.644:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f12f51cf749 code=0x7ffc0000 [ 92.677923][ T29] audit: type=1326 audit(1763841726.644:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f51cf749 code=0x7ffc0000 [ 92.700991][ T29] audit: type=1326 audit(1763841726.644:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8263 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f51cf749 code=0x7ffc0000 [ 92.786258][ T29] audit: type=1400 audit(1763841726.849:1915): avc: denied { read } for pid=8276 comm="syz.8.1984" path="socket:[22829]" dev="sockfs" ino=22829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 92.884018][ T8284] __nla_validate_parse: 8 callbacks suppressed [ 92.884036][ T8284] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1984'. [ 92.949535][ T29] audit: type=1326 audit(1763841727.018:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.5.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca326f749 code=0x7ffc0000 [ 93.190815][ T8316] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 93.190815][ T8316] program syz.5.2001 not setting count and/or reply_len properly [ 93.258285][ T7611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.290793][ T8325] xt_hashlimit: max too large, truncated to 1048576 [ 93.322019][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2009'. [ 93.346866][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2009'. [ 93.366042][ T8336] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2010'. [ 93.439981][ T8353] random: crng reseeded on system resumption [ 93.504705][ T8365] loop7: detected capacity change from 0 to 1024 [ 93.511448][ T8365] EXT4-fs: inline encryption not supported [ 93.547775][ T8373] sg_write: data in/out 156/1 bytes for SCSI command 0x0-- guessing data in; [ 93.547775][ T8373] program syz.8.2027 not setting count and/or reply_len properly [ 93.620979][ T8384] ip6gre1: entered allmulticast mode [ 93.702286][ T8391] tipc: Started in network mode [ 93.707435][ T8391] tipc: Node identity ac14140f, cluster identity 4711 [ 93.714555][ T8391] tipc: New replicast peer: 255.255.255.255 [ 93.720961][ T8391] tipc: Enabled bearer , priority 10 [ 93.729271][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2034'. [ 93.738473][ T8391] tipc: Disabling bearer [ 93.791504][ T8393] Falling back ldisc for ttyS3. [ 93.835777][ T8404] vlan2: entered allmulticast mode [ 93.841589][ T8405] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 93.842125][ T8404] dummy0: entered allmulticast mode [ 93.972845][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2047'. [ 93.981963][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2047'. [ 94.226156][ T8452] loop3: detected capacity change from 0 to 1024 [ 94.241886][ T8451] loop6: detected capacity change from 0 to 164 [ 94.252220][ T8451] syz.6.2069: attempt to access beyond end of device [ 94.252220][ T8451] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 94.269033][ T8451] syz.6.2069: attempt to access beyond end of device [ 94.269033][ T8451] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 94.444211][ T8468] syzkaller0: entered promiscuous mode [ 94.449728][ T8468] syzkaller0: entered allmulticast mode [ 94.671365][ T8491] xt_hashlimit: max too large, truncated to 1048576 [ 94.789279][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2085'. [ 94.836984][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2088'. [ 94.845976][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2088'. [ 94.934238][ T8523] xt_policy: neither incoming nor outgoing policy selected [ 95.193275][ T8554] loop5: detected capacity change from 0 to 512 [ 95.215324][ T8554] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.229673][ T8554] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.244576][ T8554] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 95.257188][ T8554] EXT4-fs (loop5): This should not happen!! Data will be lost [ 95.257188][ T8554] [ 95.266903][ T8554] EXT4-fs (loop5): Total free blocks count 0 [ 95.272916][ T8554] EXT4-fs (loop5): Free/Dirty block details [ 95.278882][ T8554] EXT4-fs (loop5): free_blocks=65280 [ 95.284208][ T8554] EXT4-fs (loop5): dirty_blocks=1 [ 95.289374][ T8554] EXT4-fs (loop5): Block reservation details [ 95.295387][ T8554] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 95.364538][ T8570] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 95.766712][ T8608] loop7: detected capacity change from 0 to 1024 [ 95.776451][ T8608] EXT4-fs: Ignoring removed orlov option [ 95.869767][ T8623] ================================================================== [ 95.877894][ T8623] BUG: KCSAN: data-race in filemap_read / filemap_read [ 95.884783][ T8623] [ 95.887115][ T8623] write to 0xffff8881057b8a68 of 8 bytes by task 8608 on cpu 0: [ 95.894744][ T8623] filemap_read+0x974/0xa00 [ 95.899279][ T8623] generic_file_read_iter+0x79/0x330 [ 95.904589][ T8623] ext4_file_read_iter+0x1cc/0x290 [ 95.909749][ T8623] copy_splice_read+0x442/0x660 [ 95.914615][ T8623] splice_direct_to_actor+0x290/0x680 [ 95.919997][ T8623] do_splice_direct+0xda/0x150 [ 95.924778][ T8623] do_sendfile+0x380/0x650 [ 95.929314][ T8623] __x64_sys_sendfile64+0x105/0x150 [ 95.934534][ T8623] x64_sys_call+0x2bb4/0x3000 [ 95.939242][ T8623] do_syscall_64+0xd2/0x200 [ 95.943756][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.949658][ T8623] [ 95.951981][ T8623] read to 0xffff8881057b8a68 of 8 bytes by task 8623 on cpu 1: [ 95.959529][ T8623] filemap_read+0x6f/0xa00 [ 95.963967][ T8623] generic_file_read_iter+0x79/0x330 [ 95.969268][ T8623] ext4_file_read_iter+0x1cc/0x290 [ 95.974391][ T8623] copy_splice_read+0x442/0x660 [ 95.979278][ T8623] splice_direct_to_actor+0x290/0x680 [ 95.984662][ T8623] do_splice_direct+0xda/0x150 [ 95.989432][ T8623] do_sendfile+0x380/0x650 [ 95.993865][ T8623] __x64_sys_sendfile64+0x105/0x150 [ 95.999074][ T8623] x64_sys_call+0x2bb4/0x3000 [ 96.003796][ T8623] do_syscall_64+0xd2/0x200 [ 96.008305][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.014206][ T8623] [ 96.016538][ T8623] value changed: 0x00000000000000ed -> 0x00000000000000ee [ 96.023647][ T8623] [ 96.025971][ T8623] Reported by Kernel Concurrency Sanitizer on: [ 96.032123][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.7.2128 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.043415][ T8623] Tainted: [W]=WARN [ 96.047216][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.057362][ T8623] ==================================================================