last executing test programs: 1m33.657358228s ago: executing program 32 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") 1m32.200842715s ago: executing program 33 (id=199): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) 1m23.463152263s ago: executing program 3 (id=394): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) 1m23.407346563s ago: executing program 3 (id=398): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x46200, 0x108) 1m23.326053103s ago: executing program 3 (id=402): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200040, &(0x7f0000000200)={[{@noblock_validity}, {@discard}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@norecovery}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x57c, &(0x7f0000000bc0)="$eJzs3U1rHGUcAPD/bDZ916ZQinqQQA9WajdN4ksFofUoWizovS7JNpRsuiW7KU0stD3YixcpgogF8QN491j8An6KghaKlKAHL5HZzLabl83rYLbO7wfTPs/MJM88+8z/2f/s7GYDKKzh9J9SxKsR8U0ScbRrWzmyjcPL+y0+vTWRLkksLX32ZxJJtq6zf5L9fzirvBIRv34Vcbq0tt3m/MJ0tV6vzWb1kdbM9ZHm/MKZqzPVqdpU7drY+Pi5d8bH3n/v3YgYyKWvb176+/tPH3507uuTi9/9/PjY/SQuxJFsW3c/duFOd2U4hrPHZDAurNpxNIfG+kmy1wfAjgxkcT4Y6RxwNAayqAf+/25HxBJQUIn4h4Lq5AGda/ucroNfGE8+XL4AWtv/8vJrI3GgfW10aDFZcWWUXu8O5dB+2sYvfzy4ny6xyesQt3NoD6Djzt2IOFsur53/kmz+27mz7RePN7a6jaI9/8BeepjmP2+tl/+UnuU/sU7+c3id2N2JzeO/9DiHZnpK878P1s1/n01dQwNZ7aV2zjeYXLlar52NiJcj4lQM7k/rG93PObf4aKnXtu78L13S9ju5YHYcj8v7V/7MZLVV3U2fuz25G/Ha8/w3iTXz/4F2rrt6/NPH49IW2zhRe/B6r22b979b/hnw0k8Rb6w7/s/vaCUb358caZ8PI52zYq2/7p34rVf72+t/t3zuiabjf2jj/g8l3fdrm9tv48cD/9R6bdvp+b8v+bxd3petu1lttWZHI/Yln6xdP/b8Zzv1zv5p/0+d3Hj+W+/8PxgRX2yx//eO3+u5687HPx9p/ye3Nf7bLzz6+MsferW/tfF/u106la3Zyvy31QPczWMHAAAAAAAA/aYUEUciKVWelUulSmX5/R3H41Cp3mi2Tl9pzF2bjPZnZYdisNS503206/0Qo9n7YTv1sVX18Yg4FhHfDhxs1ysTjfrkXnceAAAAAAAAAAAAAAAAAAAA+sThHp//T/2ez5+YB/qZr/yG4to0/vP4piegL3n+h+IS/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8AAAAAAAAAAAAAAAAAAAAAAAAAAADk6tLFi+mytPj01kRan7wxPzfduHFmstacrszMTVQmGrPXK1ONxlS9VplozGz2++qNxvXRsZi7OdKqNVsjzfmFyzONuWuty1dnqlO1y7XB/6RXAAAAAAAAAAAAAAAAAAAA8GJpzi9MV+v12qxCz8L52PrO5Yjoh2PuLiSbjfL57GTYURPlve+gwspCEhG7/j17PDEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJd/AwAA//8sgDBd") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) 1m22.846932662s ago: executing program 3 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1m22.21074576s ago: executing program 3 (id=434): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="be2205f95cd0", 'veth1_to_batadv\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 1m22.20653076s ago: executing program 34 (id=434): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="be2205f95cd0", 'veth1_to_batadv\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 1m14.338520131s ago: executing program 5 (id=728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1m14.280106691s ago: executing program 5 (id=730): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) set_tid_address(0x0) r0 = gettid() tkill(r0, 0x14) 1m14.229330631s ago: executing program 5 (id=738): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 1m14.185397531s ago: executing program 5 (id=741): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1m13.94484292s ago: executing program 5 (id=752): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) 1m13.509995519s ago: executing program 5 (id=767): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="270e000000000000000004"], 0x88}, 0x1, 0x40030000000000}, 0x0) 1m13.488683639s ago: executing program 35 (id=767): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="270e000000000000000004"], 0x88}, 0x1, 0x40030000000000}, 0x0) 50.582865343s ago: executing program 6 (id=1573): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0x7068, 0x400}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) 50.533778673s ago: executing program 6 (id=1578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000700850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x60f7, &(0x7f0000000280)={0x0, 0x0, 0x480, 0x7, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) 50.456686853s ago: executing program 6 (id=1580): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x7e05, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000500)=0x0, &(0x7f0000000040)=0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4010}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 50.436282223s ago: executing program 6 (id=1582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200040, &(0x7f0000000200)={[{@noblock_validity}, {@discard}, {@sysvgroups}, {@norecovery}, {@errors_continue}, {@norecovery}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x57c, &(0x7f0000000bc0)="$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") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000ac0)=""/90, 0x5a) 50.248017683s ago: executing program 6 (id=1585): r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @private}, @address_reply}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 49.789191661s ago: executing program 6 (id=1599): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8000, @local, 0x8}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="8800000010003904fefffffffeffffff00000000", @ANYRES32=r3, @ANYBLOB="000000009011"], 0x88}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x0, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 49.788746361s ago: executing program 36 (id=1599): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8000, @local, 0x8}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="8800000010003904fefffffffeffffff00000000", @ANYRES32=r3, @ANYBLOB="000000009011"], 0x88}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x0, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 43.974073447s ago: executing program 0 (id=1815): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'xfrm0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth1_to_bridge\x00'}}, 0x1e) close(r2) 43.943863597s ago: executing program 0 (id=1817): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$eJzs3dFLU28cx/GPzp+bE91+EEFB9VA3dTN0/QE1QiEaFOakugiOeVZjp03OGcYicjfRbX9EV1J33QXVZTfeRDfddydB0I0X0Yl2Nt102nQ6l75fIOe7830+nEc9yneC28qtFw/zWS+RtUrqjxj1SxWtSvE/VU1f7dhfrQfVqKILwz++nLp5+861VDo9MWXMZGr6YtIYM3rm3aMnr85+KA3PvBl9G9Zy/O7K9+TX5ePLJ1Z+TT/IeSbnmUKxZCwzWyyWrFnHNnM5L58w5oZjW55tcgXPdpv6Wac4P182VmFuJDrv2p5nrELZ5O2yKRVNyS0b676VK5hYImFGojraBtpYk1mamrJSW7b9UKuzLU+iJwy1Oum6qUrrZmapC3sCAAA9Zvv5P5j1t57/0zPBcdv5P1Sb/1+/lNqb/6XO5v9E0/zf19UvaI+rND36y/yPQ8F1U1a09vPbjPkfAAAAAAAAAAAAAAAAAAAAAIB/warvx3zfj9WP9Y+wpIik+uOD3if2xy6//5cOaLvYYw3/uBeRnOcLmYVMcAz6qaxycmRrTDH9rN4PNUE9eTU9MWaq4nrvLNbyiwuZkML1fF28Vf70/+NB3jTn/1O08fpJxXSs9fWTLfODOn+uIZ9QTJ/uqShHc9X7ej3/dNyYK9fTG/JD1XUAAAAAABwGCbNm0/P3ar+6IKLN/SC/g78PbHh+PaCT7bxEJQAAAAAA6JhXfpy3HMd2d1GEJXUQ30Hh9+37JfauCKkntrGhuCypB7bRrSIiKThjdhP/thZvK+W3sWZAUqefV6SLt9ZB/2YCAAAAsNfWh/4dhD4/28cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9LT7emD19Zta9cY28YbLhfRx7e0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPndwAAAP//6bYmHA==") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[]) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 43.266112955s ago: executing program 0 (id=1830): listen(0xffffffffffffffff, 0x45) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0}}], 0x1, 0x8000) sendto$inet(r0, &(0x7f0000000c40)="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", 0x508, 0x0, 0x0, 0x0) 43.181677845s ago: executing program 0 (id=1835): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 42.763733924s ago: executing program 0 (id=1852): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000200)={[{@errors_remount}, {@abort}, {@quota}, {@nolazytime}, {@nojournal_checksum}, {@acl}]}, 0x5, 0x446, &(0x7f0000000d80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x251, &(0x7f0000000080)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x4000}]) 42.510334853s ago: executing program 0 (id=1858): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x40000000002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) 42.510186304s ago: executing program 37 (id=1858): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x40000000002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) 41.533485561s ago: executing program 7 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f00000006c0)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@usrquota}, {@dioread_nolock}, {@nobh}, {@nomblk_io_submit}, {@grpjquota}, {@grpid}]}, 0x1, 0x5eb, &(0x7f0000001740)="$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") r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f0000001ec0)=ANY=[@ANYRES16=r7, @ANYRES64=r6, @ANYRESHEX, @ANYRES16=r2, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, &(0x7f0000000000)) 41.297988221s ago: executing program 7 (id=1887): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000eee000/0x2000)=nil, 0x2000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 41.10604592s ago: executing program 7 (id=1892): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)={0x1c, r3, 0x1}, 0x1c}}, 0x400c880) 40.250427657s ago: executing program 7 (id=1905): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 39.944983367s ago: executing program 7 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800020001000000080001000100000034000480050003000000000005000300000000000500030000000000050003000000000005000300000000000500030000000000500108"], 0x1a8}}, 0x0) 39.666542726s ago: executing program 7 (id=1921): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0x40, 0x4, 0x6, 0x8}}}}}, 0x0) 39.642467936s ago: executing program 38 (id=1921): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0x40, 0x4, 0x6, 0x8}}}}}, 0x0) 22.776517685s ago: executing program 9 (id=2376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) 22.669401785s ago: executing program 9 (id=2390): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 22.499983524s ago: executing program 9 (id=2386): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22.310818094s ago: executing program 9 (id=2389): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 22.176585424s ago: executing program 9 (id=2391): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21.981936613s ago: executing program 9 (id=2404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x5}, @sack_perm, @window={0x3, 0xd45c, 0x1}, @window={0x3, 0x6, 0x4}, @timestamp, @window={0x3, 0xfffe, 0xfffc}, @mss={0x2, 0x1}, @mss={0x2, 0x5}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 21.981828364s ago: executing program 39 (id=2404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x5}, @sack_perm, @window={0x3, 0xd45c, 0x1}, @window={0x3, 0x6, 0x4}, @timestamp, @window={0x3, 0xfffe, 0xfffc}, @mss={0x2, 0x1}, @mss={0x2, 0x5}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 20.67764292s ago: executing program 3 (id=2413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 9.071484072s ago: executing program 4 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000018010000202064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a000001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 9.070649512s ago: executing program 1 (id=2481): socket(0x1e, 0x4, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000006", @ANYBLOB], 0x24}}, 0x0) 9.070359452s ago: executing program 2 (id=2482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r3, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 9.069965722s ago: executing program 8 (id=2483): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3303e648b92827}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000500)="d5", 0x1}], 0x1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 7.461369358s ago: executing program 4 (id=2484): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x804, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7.461004018s ago: executing program 1 (id=2485): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2ab}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfff}, r2, 0x4000000}}, 0x48) r3 = dup2(r1, r1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0) 7.460713148s ago: executing program 2 (id=2486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x800) 7.460345328s ago: executing program 8 (id=2487): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x10220, 0x0, 0x5, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1ffff}, 0x0, 0x0, r3, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) 5.741486773s ago: executing program 4 (id=2488): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2442, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 5.741189654s ago: executing program 1 (id=2489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 5.740794804s ago: executing program 2 (id=2490): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x406, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x302543f, 0x0, 0x1, 0x0, &(0x7f0000001a40)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0x2, &(0x7f0000001fc0)={0xe2a, 0xfffffffffffffffd}, 0x0) brk(0x20ffc004) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 5.740495804s ago: executing program 8 (id=2491): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) chmod(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) futimesat(r2, 0x0, 0x0) 3.921800869s ago: executing program 4 (id=2492): pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000000400)={0xa, 0x2, 0x9, @loopback, 0x1}, 0x1c) shutdown(r2, 0x1) splice(r2, 0x0, r0, 0x0, 0x406f413, 0x0) 3.921235829s ago: executing program 1 (id=2493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 3.920714589s ago: executing program 2 (id=2494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 3.920412599s ago: executing program 8 (id=2495): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r3 = syz_open_pts(r2, 0x0) dup3(r2, r3, 0x0) 2.011647885s ago: executing program 4 (id=2496): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) write(r1, &(0x7f0000000300)="574a02", 0x3) recvmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) 2.006337074s ago: executing program 1 (id=2497): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x880, 0x0) mmap(&(0x7f0000428000/0x1000)=nil, 0x1000, 0x300000a, 0x12, r0, 0xf712f000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2.004184494s ago: executing program 2 (id=2498): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000003c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000300), 0x19ffe) 2.003558284s ago: executing program 8 (id=2499): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod(0x0, 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x3d5653a0b35cd406}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x6, 0x8, 0x1, 0xc}, {0xd, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x80000000, 0x20003, 0x99}}]}}]}, 0x6c}}, 0x0) 1.45259ms ago: executing program 4 (id=2500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {0x8000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {0x10000000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8804) 799.33µs ago: executing program 1 (id=2501): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0xd949, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 464.34µs ago: executing program 2 (id=2502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) syz_io_uring_setup(0x370d, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 0s ago: executing program 8 (id=2503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f0000000240)=""/240) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.982886][ T5654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.983118][ T7829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.007459][ T7829] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.037522][ T7837] 9pnet_fd: Insufficient options for proto=fd [ 81.090429][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.102525][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.112605][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.122476][ T11] bond0 (unregistering): Released all slaves [ 81.137969][ T7841] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 81.155398][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.162656][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.172504][ T7788] bridge_slave_0: entered allmulticast mode [ 81.181934][ T7788] bridge_slave_0: entered promiscuous mode [ 81.191378][ T11] hsr_slave_0: left promiscuous mode [ 81.198089][ T11] hsr_slave_1: left promiscuous mode [ 81.205303][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.212981][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.223533][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.231091][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.252748][ T11] veth1_macvtap: left promiscuous mode [ 81.258365][ T11] veth0_macvtap: left promiscuous mode [ 81.263987][ T11] veth1_vlan: left promiscuous mode [ 81.265096][ T7855] loop1: detected capacity change from 0 to 1024 [ 81.269241][ T11] veth0_vlan: left promiscuous mode [ 81.326560][ T7862] bpf_get_probe_write_proto: 2 callbacks suppressed [ 81.326580][ T7862] syz.8.1629[7862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.333441][ T7862] syz.8.1629[7862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.345722][ T7862] syz.8.1629[7862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.367593][ T7855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.422858][ T11] team0 (unregistering): Port device team_slave_1 removed [ 81.435060][ T11] team0 (unregistering): Port device team_slave_0 removed [ 81.468826][ T7855] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 81.468928][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.490860][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.500434][ T7788] bridge_slave_1: entered allmulticast mode [ 81.510682][ T7788] bridge_slave_1: entered promiscuous mode [ 81.517514][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.534692][ T7866] pim6reg1: entered promiscuous mode [ 81.540132][ T7866] pim6reg1: entered allmulticast mode [ 81.554996][ T7788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.586070][ T7884] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 81.594828][ T7788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.617430][ T7888] loop7: detected capacity change from 0 to 512 [ 81.630978][ T7788] team0: Port device team_slave_0 added [ 81.637554][ T7788] team0: Port device team_slave_1 added [ 81.648274][ T7888] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #3: comm syz.7.1639: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 81.668076][ T7888] EXT4-fs error (device loop7): ext4_quota_enable:7115: comm syz.7.1639: Bad quota inode: 3, type: 0 [ 81.687676][ T7788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.694640][ T7788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.695700][ T7888] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 81.720651][ T7788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.735443][ T7888] EXT4-fs (loop7): mount failed [ 81.763327][ T7788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.770475][ T7788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.796580][ T7788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.860256][ T7788] hsr_slave_0: entered promiscuous mode [ 81.866759][ T7788] hsr_slave_1: entered promiscuous mode [ 81.872808][ T7788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.880670][ T7788] Cannot create hsr debugfs directory [ 82.004989][ T7788] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 82.015335][ T7788] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 82.019876][ T7922] loop1: detected capacity change from 0 to 512 [ 82.030204][ T7922] EXT4-fs: Ignoring removed bh option [ 82.032330][ T7788] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 82.040134][ T7922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.053103][ T7788] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 82.057146][ T7924] loop0: detected capacity change from 0 to 128 [ 82.067022][ T7924] EXT4-fs: Ignoring removed nobh option [ 82.084062][ T7922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.085934][ T7924] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.102162][ T7922] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.130131][ T7929] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.146971][ T7788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.150789][ T7924] ext4 filesystem being mounted at /388/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.167515][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.181585][ T7788] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.202515][ T7933] syz.1.1657[7933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.202626][ T7933] syz.1.1657[7933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.215471][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.220499][ T7933] syz.1.1657[7933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.226905][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.257387][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.266985][ T7788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.277441][ T7788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.298068][ T4072] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.305184][ T4072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.348857][ T7941] pim6reg1: entered promiscuous mode [ 82.354402][ T7941] pim6reg1: entered allmulticast mode [ 82.362804][ T7943] syz.0.1661[7943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.362874][ T7943] syz.0.1661[7943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.376991][ T7943] syz.0.1661[7943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.392729][ T7943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7943 comm=syz.0.1661 [ 82.450971][ T7788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.459173][ T7950] loop0: detected capacity change from 0 to 1024 [ 82.505861][ T7950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.520654][ T29] kauditd_printk_skb: 875 callbacks suppressed [ 82.520671][ T29] audit: type=1326 audit(1734728526.250:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.521205][ T7950] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.539999][ T29] audit: type=1326 audit(1734728526.260:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.598486][ T29] audit: type=1326 audit(1734728526.330:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.621980][ T29] audit: type=1326 audit(1734728526.330:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.645757][ T29] audit: type=1326 audit(1734728526.330:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.721505][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.735301][ T7967] loop8: detected capacity change from 0 to 8192 [ 82.735674][ T29] audit: type=1326 audit(1734728526.440:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.765152][ T29] audit: type=1326 audit(1734728526.440:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.788698][ T29] audit: type=1326 audit(1734728526.440:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.812296][ T29] audit: type=1326 audit(1734728526.440:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 82.841649][ T7788] veth0_vlan: entered promiscuous mode [ 82.854534][ T7788] veth1_vlan: entered promiscuous mode [ 82.873021][ T7788] veth0_macvtap: entered promiscuous mode [ 82.889755][ T7788] veth1_macvtap: entered promiscuous mode [ 82.900005][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.910601][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.920543][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.931092][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.940999][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.951467][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.962035][ T29] audit: type=1400 audit(1734728526.680:6563): avc: denied { shutdown } for pid=7980 comm="syz.1.1672" laddr=ff01::1 lport=50841 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.017382][ T7788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.030947][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.041460][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.051316][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.061782][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.071632][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.082119][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.109935][ T7788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.118607][ T7788] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.127442][ T7788] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.136337][ T7788] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.145134][ T7788] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.160016][ T7989] __nla_validate_parse: 6 callbacks suppressed [ 83.160033][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1674'. [ 83.229955][ T7988] loop0: detected capacity change from 0 to 8192 [ 83.262292][ T7994] syz.9.1600[7994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.287245][ T7988] loop0: p2 p3 p4 [ 83.314565][ T7988] loop0: p2 size 130943 extends beyond EOD, truncated [ 83.332548][ T7988] loop0: p3 size 16776960 extends beyond EOD, truncated [ 83.343204][ T7988] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 83.355032][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 83.364124][ T8000] netlink: 'syz.1.1678': attribute type 18 has an invalid length. [ 83.385711][ T8000] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.394633][ T8000] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.403424][ T8000] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.412175][ T8000] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.431490][ T8000] vxlan0: entered promiscuous mode [ 83.455948][ T8003] loop9: detected capacity change from 0 to 512 [ 83.485344][ T8003] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.604662][ T8017] loop7: detected capacity change from 0 to 2048 [ 83.684815][ T8029] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 83.693077][ T8029] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 83.723760][ T8035] rose0: refused to change device tx_queue_len [ 83.839051][ T8049] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 83.912754][ T8058] loop8: detected capacity change from 0 to 2048 [ 83.933378][ T8062] ref_ctr_offset mismatch. inode: 0x3a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 83.946455][ T8058] loop8: p1 < > p4 [ 83.950947][ T8058] loop8: p4 size 8388608 extends beyond EOD, truncated [ 84.004078][ T8069] netlink: 133492 bytes leftover after parsing attributes in process `+}[@'. [ 84.077699][ T8077] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 84.152625][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1708'. [ 84.162535][ T8094] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 84.180701][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1711'. [ 84.201224][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1712'. [ 84.213841][ T8100] netlink: 'syz.8.1713': attribute type 1 has an invalid length. [ 84.238856][ T8100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.259466][ T8100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.266627][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 84.276240][ T8100] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 84.293740][ T8100] bond1: (slave vcan1): Error -95 calling set_mac_address [ 84.327325][ T8113] loop0: detected capacity change from 0 to 512 [ 84.334929][ T8113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.359673][ T8113] EXT4-fs (loop0): 1 truncate cleaned up [ 84.389154][ T8118] loop8: detected capacity change from 0 to 512 [ 84.406800][ T8113] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.1719: inode #1073372648: comm syz.0.1719: iget: illegal inode # [ 84.419867][ T8118] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1722: Failed to acquire dquot type 1 [ 84.421278][ T8113] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.1719: error while reading EA inode 1073372648 err=-117 [ 84.443368][ T8118] EXT4-fs (loop8): 1 truncate cleaned up [ 84.448318][ T8113] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.1719: corrupted xattr block 33: invalid header [ 84.453038][ T8118] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.466820][ T8113] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 84.526081][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1725'. [ 84.605259][ T8142] loop0: detected capacity change from 0 to 1024 [ 84.612059][ T8142] EXT4-fs: dax option not supported [ 84.612889][ T8141] pim6reg1: entered promiscuous mode [ 84.622690][ T8141] pim6reg1: entered allmulticast mode [ 84.648561][ T8144] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1733'. [ 84.664093][ T8147] loop8: detected capacity change from 0 to 512 [ 84.677722][ T8147] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.723552][ T8153] loop9: detected capacity change from 0 to 512 [ 84.748124][ T8153] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.1736: Failed to acquire dquot type 1 [ 84.768485][ T8153] EXT4-fs (loop9): 1 truncate cleaned up [ 84.774659][ T8153] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.867646][ T8176] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1746'. [ 84.899458][ T8179] pim6reg1: entered promiscuous mode [ 84.904857][ T8179] pim6reg1: entered allmulticast mode [ 84.995806][ T8189] pim6reg1: entered promiscuous mode [ 85.001198][ T8189] pim6reg1: entered allmulticast mode [ 85.119413][ T8210] loop8: detected capacity change from 0 to 512 [ 85.140368][ T8210] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 85.171385][ T8210] EXT4-fs (loop8): 1 truncate cleaned up [ 85.217815][ T8210] EXT4-fs error (device loop8): ext4_xattr_inode_iget:440: comm syz.8.1761: inode #1073372648: comm syz.8.1761: iget: illegal inode # [ 85.236440][ T8210] EXT4-fs error (device loop8): ext4_xattr_inode_iget:445: comm syz.8.1761: error while reading EA inode 1073372648 err=-117 [ 85.271854][ T8210] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2977: inode #15: comm syz.8.1761: corrupted xattr block 33: invalid header [ 85.287013][ T8210] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -117) [ 85.446583][ T8263] loop1: detected capacity change from 0 to 2048 [ 85.473821][ T8271] loop7: detected capacity change from 0 to 128 [ 85.484070][ T8271] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.486998][ T8263] loop1: p1 < > p4 [ 85.499841][ T8263] loop1: p4 size 8388608 extends beyond EOD, truncated [ 85.595342][ T8280] loop7: detected capacity change from 0 to 2048 [ 85.608788][ T8288] loop9: detected capacity change from 0 to 1764 [ 85.617837][ T8288] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 85.628659][ T8290] loop1: detected capacity change from 0 to 512 [ 85.638848][ T8290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.685657][ T8290] EXT4-fs (loop1): 1 truncate cleaned up [ 85.889378][ T8321] loop7: detected capacity change from 0 to 512 [ 85.917971][ T8321] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.944874][ T8335] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 85.958980][ T8334] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 85.999657][ T8341] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.002206][ T8334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.015608][ T8341] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 86.035826][ T8334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.044532][ T8334] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 86.064884][ T8334] bond1: (slave vcan1): Error -95 calling set_mac_address [ 86.078612][ T8348] loop7: detected capacity change from 0 to 512 [ 86.104973][ T8354] loop1: detected capacity change from 0 to 256 [ 86.112206][ T8348] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #3: comm syz.7.1808: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 86.117842][ T8346] syzkaller0: entered promiscuous mode [ 86.131679][ T8348] EXT4-fs error (device loop7): ext4_quota_enable:7115: comm syz.7.1808: Bad quota inode: 3, type: 0 [ 86.135751][ T8346] syzkaller0: entered allmulticast mode [ 86.158125][ T8354] FAT-fs (loop1): Directory bread(block 64) failed [ 86.162907][ T8348] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 86.164677][ T8354] FAT-fs (loop1): Directory bread(block 65) failed [ 86.186290][ T8354] FAT-fs (loop1): Directory bread(block 66) failed [ 86.194321][ T8348] EXT4-fs (loop7): mount failed [ 86.194793][ T8354] FAT-fs (loop1): Directory bread(block 67) failed [ 86.205862][ T8354] FAT-fs (loop1): Directory bread(block 68) failed [ 86.212380][ T8354] FAT-fs (loop1): Directory bread(block 69) failed [ 86.219387][ T8354] FAT-fs (loop1): Directory bread(block 70) failed [ 86.228134][ T8354] FAT-fs (loop1): Directory bread(block 71) failed [ 86.238587][ T8354] FAT-fs (loop1): Directory bread(block 72) failed [ 86.247913][ T8354] FAT-fs (loop1): Directory bread(block 73) failed [ 86.263916][ T8359] loop0: detected capacity change from 0 to 164 [ 86.287338][ T8354] syz.1.1812: attempt to access beyond end of device [ 86.287338][ T8354] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 86.334043][ T8365] loop0: detected capacity change from 0 to 128 [ 86.341140][ T8365] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.363037][ T8365] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.378210][ T8365] xt_hashlimit: size too large, truncated to 1048576 [ 86.521009][ T8376] loop9: detected capacity change from 0 to 128 [ 86.683022][ T8376] syz.9.1821: attempt to access beyond end of device [ 86.683022][ T8376] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 86.718744][ T8376] syz.9.1821: attempt to access beyond end of device [ 86.718744][ T8376] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 86.735054][ T8376] syz.9.1821: attempt to access beyond end of device [ 86.735054][ T8376] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 86.748767][ T8376] syz.9.1821: attempt to access beyond end of device [ 86.748767][ T8376] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 86.762477][ T8376] syz.9.1821: attempt to access beyond end of device [ 86.762477][ T8376] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 86.778177][ T8376] syz.9.1821: attempt to access beyond end of device [ 86.778177][ T8376] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 86.792961][ T8380] loop1: detected capacity change from 0 to 128 [ 86.880269][ T8386] netlink: '+}[@': attribute type 4 has an invalid length. [ 86.891874][ T8388] loop9: detected capacity change from 0 to 128 [ 86.906153][ T8388] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 86.919713][ T8388] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 86.927616][ T8388] FAT-fs (loop9): Filesystem has been set read-only [ 86.931958][ T8392] loop7: detected capacity change from 0 to 256 [ 86.936346][ T8388] syz.9.1827: attempt to access beyond end of device [ 86.936346][ T8388] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 86.958595][ T8388] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 86.966518][ T8388] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 86.976004][ T8392] FAT-fs (loop7): Directory bread(block 64) failed [ 86.982565][ T8392] FAT-fs (loop7): Directory bread(block 65) failed [ 86.982941][ T8388] syz.9.1827: attempt to access beyond end of device [ 86.982941][ T8388] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.993607][ T8392] FAT-fs (loop7): Directory bread(block 66) failed [ 87.014050][ T8392] FAT-fs (loop7): Directory bread(block 67) failed [ 87.019960][ T8388] syz.9.1827: attempt to access beyond end of device [ 87.019960][ T8388] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.023048][ T8392] FAT-fs (loop7): Directory bread(block 68) failed [ 87.041515][ T8392] FAT-fs (loop7): Directory bread(block 69) failed [ 87.052288][ T8392] FAT-fs (loop7): Directory bread(block 70) failed [ 87.072280][ T8392] FAT-fs (loop7): Directory bread(block 71) failed [ 87.080732][ T8392] FAT-fs (loop7): Directory bread(block 72) failed [ 87.090396][ T8392] FAT-fs (loop7): Directory bread(block 73) failed [ 87.096867][ T8402] loop0: detected capacity change from 0 to 512 [ 87.153477][ T8402] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1835: casefold flag without casefold feature [ 87.168149][ T8402] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1835: couldn't read orphan inode 15 (err -117) [ 87.189900][ T8410] loop8: detected capacity change from 0 to 2048 [ 87.201404][ T8410] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.213346][ T8415] loop7: detected capacity change from 0 to 512 [ 87.222683][ T8410] Process accounting resumed [ 87.228474][ T8410] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1837: bg 0: block 234: padding at end of block bitmap is not set [ 87.235650][ T8402] loop0: detected capacity change from 512 to 64 [ 87.250121][ T8415] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.259353][ T8410] EXT4-fs (loop8): Remounting filesystem read-only [ 87.267293][ T8421] loop9: detected capacity change from 0 to 128 [ 87.273619][ T8415] EXT4-fs (loop7): shut down requested (0) [ 87.274470][ T8402] EXT4-fs (loop0): discard request in group:0 block:254 count:1 failed with -5 [ 87.288673][ T8402] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: IO failure [ 87.290604][ T8421] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.301642][ T8402] EXT4-fs (loop0): discard request in group:0 block:252 count:1 failed with -5 [ 87.337004][ T8421] EXT4-fs (loop9): shut down requested (2) [ 87.339346][ T8402] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: IO failure [ 87.385062][ T8428] loop8: detected capacity change from 0 to 256 [ 87.393173][ T8428] msdos: Unknown parameter 'umask' [ 87.402627][ T8428] loop8: detected capacity change from 0 to 128 [ 87.423122][ T8428] msdos: Unknown parameter '01777777777777777777777Oþø¥þ›ŸG5”û©s+01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 87.423122][ T8428] n'º|$@OOݱµ’-®+·el' [ 87.490043][ T3309] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 87.498778][ T8444] bpf_get_probe_write_proto: 8 callbacks suppressed [ 87.498799][ T8444] syz.1.1851[8444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.516679][ T8444] syz.1.1851[8444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.523052][ T8446] syz.8.1850[8446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.528153][ T8444] syz.1.1851[8444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.539942][ T8446] syz.8.1850[8446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.568916][ T8446] syz.8.1850[8446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.623798][ T8456] netlink: 'syz.8.1855': attribute type 10 has an invalid length. [ 87.695090][ T8466] loop8: detected capacity change from 0 to 2048 [ 87.718017][ T4072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.730745][ T8466] EXT4-fs error (device loop8): ext4_ext_precache:631: inode #2: comm syz.8.1857: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 87.778154][ T4072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.796698][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 87.796713][ T29] audit: type=1400 audit(1734728531.530:6901): avc: denied { read } for pid=8476 comm="syz.8.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.834070][ T4072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.880399][ T4072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.948014][ T8499] syzkaller1: entered promiscuous mode [ 87.953598][ T8499] syzkaller1: entered allmulticast mode [ 88.023398][ T29] audit: type=1326 audit(1734728531.750:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 88.048384][ T29] audit: type=1326 audit(1734728531.750:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 88.072007][ T29] audit: type=1326 audit(1734728531.750:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 88.095390][ T29] audit: type=1326 audit(1734728531.760:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4ad6f485e5 code=0x7ffc0000 [ 88.118855][ T29] audit: type=1326 audit(1734728531.760:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 88.142308][ T29] audit: type=1326 audit(1734728531.760:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 88.165823][ T29] audit: type=1326 audit(1734728531.760:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 88.189455][ T29] audit: type=1326 audit(1734728531.760:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 88.212828][ T29] audit: type=1326 audit(1734728531.760:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.1.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 88.297787][ T4072] bond0 (unregistering): Released all slaves [ 88.306264][ T4072] bond1 (unregistering): Released all slaves [ 88.342955][ T8517] loop7: detected capacity change from 0 to 256 [ 88.362031][ T4072] hsr_slave_0: left promiscuous mode [ 88.365931][ T8517] FAT-fs (loop7): Directory bread(block 64) failed [ 88.374006][ T8517] FAT-fs (loop7): Directory bread(block 65) failed [ 88.385628][ T8515] Falling back ldisc for ttyS3. [ 88.390826][ T8517] FAT-fs (loop7): Directory bread(block 66) failed [ 88.390837][ T4072] hsr_slave_1: left promiscuous mode [ 88.402778][ T8517] FAT-fs (loop7): Directory bread(block 67) failed [ 88.412406][ T4072] veth1_macvtap: left promiscuous mode [ 88.417973][ T4072] veth0_macvtap: left promiscuous mode [ 88.423519][ T4072] veth1_vlan: left promiscuous mode [ 88.424409][ T8517] FAT-fs (loop7): Directory bread(block 68) failed [ 88.428810][ T4072] veth0_vlan: left promiscuous mode [ 88.435353][ T8517] FAT-fs (loop7): Directory bread(block 69) failed [ 88.454321][ T8517] FAT-fs (loop7): Directory bread(block 70) failed [ 88.462635][ T8517] FAT-fs (loop7): Directory bread(block 71) failed [ 88.473727][ T8517] FAT-fs (loop7): Directory bread(block 72) failed [ 88.480443][ T8517] FAT-fs (loop7): Directory bread(block 73) failed [ 88.548952][ T8532] loop7: detected capacity change from 0 to 128 [ 88.643098][ T8540] loop7: detected capacity change from 0 to 128 [ 88.649901][ T8540] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 88.653924][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 88.671116][ T8540] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 88.679067][ T8540] FAT-fs (loop7): Filesystem has been set read-only [ 88.686290][ T8540] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 88.694211][ T8540] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 88.705254][ T8543] netem: change failed [ 88.743906][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.751035][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.758471][ T8481] bridge_slave_0: entered allmulticast mode [ 88.765071][ T8481] bridge_slave_0: entered promiscuous mode [ 88.771680][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.778850][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.786031][ T8481] bridge_slave_1: entered allmulticast mode [ 88.792431][ T8481] bridge_slave_1: entered promiscuous mode [ 88.832062][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.856151][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.879835][ T8552] loop7: detected capacity change from 0 to 1024 [ 88.886732][ T8552] EXT4-fs: Ignoring removed nobh option [ 88.892389][ T8552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.902319][ T8552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.925106][ T8481] team0: Port device team_slave_0 added [ 88.932392][ T8481] team0: Port device team_slave_1 added [ 88.946360][ T8552] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 88.991470][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.998469][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.002911][ T8574] loop8: detected capacity change from 0 to 128 [ 89.024393][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.026079][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.034254][ T8574] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.041258][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.041291][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.131115][ T8481] hsr_slave_0: entered promiscuous mode [ 89.138387][ T8481] hsr_slave_1: entered promiscuous mode [ 89.144491][ T8481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.153327][ T8481] Cannot create hsr debugfs directory [ 89.260588][ T8598] loop8: detected capacity change from 0 to 512 [ 89.278677][ T8598] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.298937][ T8598] EXT4-fs (loop8): shut down requested (0) [ 89.489232][ T8481] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.500639][ T8481] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.512951][ T8481] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.521155][ T8638] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 89.521155][ T8638] program syz.1.1899 not setting count and/or reply_len properly [ 89.540543][ T8481] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.593763][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.613311][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.625235][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.632412][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.655788][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.662910][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.784566][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.960149][ T8481] veth0_vlan: entered promiscuous mode [ 89.969852][ T8481] veth1_vlan: entered promiscuous mode [ 89.989370][ T8481] veth0_macvtap: entered promiscuous mode [ 89.996944][ T8481] veth1_macvtap: entered promiscuous mode [ 90.009249][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.019834][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.029803][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.034059][ T8716] loop7: detected capacity change from 0 to 512 [ 90.040338][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.050923][ T8716] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.1905: casefold flag without casefold feature [ 90.056568][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.079754][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.089705][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.100218][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.112591][ T8716] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1905: couldn't read orphan inode 15 (err -117) [ 90.113409][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.140649][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.151232][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.161208][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.171712][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.181610][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.192120][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.202018][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.212575][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.224939][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.233513][ T8481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.242330][ T8481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.251122][ T8481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.259970][ T8481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.285653][ T8716] loop7: detected capacity change from 512 to 64 [ 90.297372][ T8733] pim6reg1: entered promiscuous mode [ 90.302748][ T8733] pim6reg1: entered allmulticast mode [ 90.325019][ T4790] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 90.489461][ T8759] __nla_validate_parse: 3 callbacks suppressed [ 90.489478][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1915'. [ 90.595695][ T8773] loop8: detected capacity change from 0 to 1024 [ 90.770499][ T8794] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.791619][ T8773] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 90.855213][ T8755] Set syz1 is full, maxelem 65536 reached [ 91.096683][ T8782] chnl_net:caif_netlink_parms(): no params data found [ 91.196648][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.203733][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.225224][ T8782] bridge_slave_0: entered allmulticast mode [ 91.252664][ T8782] bridge_slave_0: entered promiscuous mode [ 91.273985][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.281176][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.283261][ T8854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8854 comm=syz.4.1934 [ 91.303259][ T8857] netlink: 688 bytes leftover after parsing attributes in process `syz.8.1937'. [ 91.304194][ T8782] bridge_slave_1: entered allmulticast mode [ 91.319400][ T8782] bridge_slave_1: entered promiscuous mode [ 91.373711][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.390858][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.395856][ T8862] netlink: 332 bytes leftover after parsing attributes in process `syz.9.1938'. [ 91.471832][ T8782] team0: Port device team_slave_0 added [ 91.485152][ T8782] team0: Port device team_slave_1 added [ 91.514797][ T8874] pim6reg1: entered promiscuous mode [ 91.520173][ T8874] pim6reg1: entered allmulticast mode [ 91.530591][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.537724][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.563688][ T8782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.583653][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.590678][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.616666][ T8782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.652957][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1944'. [ 91.719472][ T8907] netlink: 'syz.8.1945': attribute type 10 has an invalid length. [ 91.793301][ T8907] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.809752][ T8907] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.838318][ T8782] hsr_slave_0: entered promiscuous mode [ 91.857518][ T8782] hsr_slave_1: entered promiscuous mode [ 91.860784][ T8918] loop4: detected capacity change from 0 to 512 [ 91.874134][ T8782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.882102][ T8782] Cannot create hsr debugfs directory [ 91.929844][ T8918] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.1950: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 91.954500][ T8918] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.1950: Bad quota inode: 3, type: 0 [ 91.966955][ T8918] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 91.992556][ T8918] EXT4-fs (loop4): mount failed [ 92.048652][ T8934] loop8: detected capacity change from 0 to 1024 [ 92.228379][ T8961] loop9: detected capacity change from 0 to 512 [ 92.238413][ T8961] EXT4-fs: inline encryption not supported [ 92.274601][ T8782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.282655][ T8961] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.301742][ T8782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.328971][ T8782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.352475][ T8782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.436678][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.460884][ T8782] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.483545][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.490708][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.509032][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.516170][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.604765][ T9011] loop9: detected capacity change from 0 to 512 [ 92.611534][ T9011] EXT4-fs: Ignoring removed oldalloc option [ 92.617617][ T9011] EXT4-fs: Ignoring removed i_version option [ 92.623886][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.632924][ T9011] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 92.654798][ T9011] EXT4-fs (loop9): 1 truncate cleaned up [ 92.717782][ T9029] syz.9.1964[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.717879][ T9029] syz.9.1964[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.748617][ T9029] syz.9.1964[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.783237][ T8782] veth0_vlan: entered promiscuous mode [ 92.816201][ T8782] veth1_vlan: entered promiscuous mode [ 92.843528][ T8782] veth0_macvtap: entered promiscuous mode [ 92.861240][ T8782] veth1_macvtap: entered promiscuous mode [ 92.875294][ T9049] smc: net device bond0 applied user defined pnetid SYZ0 [ 92.889373][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.899978][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.903439][ T9041] loop4: detected capacity change from 0 to 8192 [ 92.909799][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.909819][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.909835][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.917341][ T9049] smc: net device bond0 erased user defined pnetid SYZ0 [ 92.926630][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.963739][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.974191][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.984035][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.994491][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.005116][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.015114][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.025728][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.035623][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.046112][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.055939][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.066400][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.076293][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.086817][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.096955][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.107712][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.118208][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.127618][ T9058] loop9: detected capacity change from 0 to 1024 [ 93.131738][ T8782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.142840][ T8782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.151655][ T8782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.160427][ T8782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.176021][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 93.176093][ T29] audit: type=1400 audit(1734728536.910:7219): avc: denied { setattr } for pid=9057 comm="syz.9.1970" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 93.215541][ T9058] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.9.1970: corrupted in-inode xattr: bad magic number in in-inode xattr [ 93.234499][ T9058] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #14: comm syz.9.1970: attempt to clear invalid blocks 1886221359 len 1 [ 93.345708][ T9083] loop2: detected capacity change from 0 to 2048 [ 93.572278][ T29] audit: type=1400 audit(1734728537.300:7220): avc: denied { accept } for pid=9120 comm="syz.9.1987" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 93.963492][ T29] audit: type=1400 audit(1734728537.690:7221): avc: denied { name_bind } for pid=9175 comm="syz.8.2001" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 94.006907][ T29] audit: type=1400 audit(1734728537.720:7222): avc: denied { name_connect } for pid=9175 comm="syz.8.2001" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 94.236007][ T9208] hsr_slave_0: left promiscuous mode [ 94.244558][ T9212] loop4: detected capacity change from 0 to 512 [ 94.260435][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.265038][ T9208] hsr_slave_1: left promiscuous mode [ 94.268031][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.281297][ T3374] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.307464][ T9212] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.2009: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 94.325888][ T9212] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.2009: Bad quota inode: 3, type: 0 [ 94.345509][ T9212] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 94.362275][ T9212] EXT4-fs (loop4): mount failed [ 94.370932][ T29] audit: type=1326 audit(1734728538.100:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606a105d29 code=0x7ffc0000 [ 94.401688][ T29] audit: type=1326 audit(1734728538.120:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f606a105d29 code=0x7ffc0000 [ 94.425308][ T29] audit: type=1326 audit(1734728538.120:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606a105d29 code=0x7ffc0000 [ 94.448864][ T29] audit: type=1326 audit(1734728538.120:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606a105d29 code=0x7ffc0000 [ 94.472389][ T29] audit: type=1326 audit(1734728538.120:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f606a105d29 code=0x7ffc0000 [ 94.495893][ T29] audit: type=1326 audit(1734728538.120:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606a105d29 code=0x7ffc0000 [ 94.815976][ T9287] pim6reg1: entered promiscuous mode [ 94.821358][ T9287] pim6reg1: entered allmulticast mode [ 94.858050][ T9295] syz.1.2023[9295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.858122][ T9295] syz.1.2023[9295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.879860][ T9295] syz.1.2023[9295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.024532][ T9323] dvmrp0: left allmulticast mode [ 95.061704][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 95.062491][ T9306] loop9: detected capacity change from 0 to 8192 [ 95.192195][ T9345] loop1: detected capacity change from 0 to 1024 [ 95.199388][ T9344] loop4: detected capacity change from 0 to 512 [ 95.230788][ T9344] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.298269][ T9345] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.1.2034: corrupted in-inode xattr: bad magic number in in-inode xattr [ 95.334511][ T9333] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2031: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 95.396398][ T9379] pim6reg1: entered promiscuous mode [ 95.401784][ T9379] pim6reg1: entered allmulticast mode [ 95.411519][ T9333] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 95.452479][ T9333] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2031: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 95.480466][ T9333] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 95.528328][ T9333] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2031: bg 0: block 18: invalid block bitmap [ 95.561328][ T9396] loop9: detected capacity change from 0 to 512 [ 95.568834][ T9333] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2031: Failed to acquire dquot type 1 [ 95.614692][ T9396] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #3: comm syz.9.2042: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 95.643038][ T9408] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2044'. [ 95.656456][ T9396] EXT4-fs error (device loop9): ext4_quota_enable:7115: comm syz.9.2042: Bad quota inode: 3, type: 0 [ 95.677617][ T9396] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 95.682569][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.694052][ T9396] EXT4-fs (loop9): mount failed [ 95.699687][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.711999][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.719418][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.726883][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.734325][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.741839][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.749393][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.756883][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.764327][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.771747][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.779195][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.786725][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.794171][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.801597][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.809072][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.816527][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.824192][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.831763][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.839253][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.846744][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.854137][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.861653][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.869120][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.876667][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.884073][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.891500][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.899293][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.906705][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.914107][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.921552][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.929126][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.936545][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.943946][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.951377][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.958852][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.966334][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.973831][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.981350][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.988803][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.996249][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 96.003679][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 96.011183][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 96.021931][ T3376] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 96.021986][ T9398] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2044'. [ 96.085153][ T9445] loop2: detected capacity change from 0 to 512 [ 96.118458][ T9445] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.280730][ T9476] pim6reg1: entered promiscuous mode [ 96.286281][ T9476] pim6reg1: entered allmulticast mode [ 96.434750][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2060'. [ 96.443860][ T9499] tipc: Started in network mode [ 96.448760][ T9499] tipc: Node identity @, cluster identity 4711 [ 96.485117][ T9502] loop4: detected capacity change from 0 to 1024 [ 96.749653][ T9546] loop9: detected capacity change from 0 to 2048 [ 96.777198][ T9546] EXT4-fs mount: 59 callbacks suppressed [ 96.777213][ T9546] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.802270][ T9546] EXT4-fs (loop9): shut down requested (0) [ 96.840081][ T7788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.907686][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2072'. [ 97.095707][ T9586] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2075'. [ 97.114412][ T9586] batadv1: entered promiscuous mode [ 97.119729][ T9586] batadv1: entered allmulticast mode [ 97.141951][ T9602] loop1: detected capacity change from 0 to 1024 [ 97.151741][ T9604] loop8: detected capacity change from 0 to 128 [ 97.168311][ T9602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.503037][ T9602] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 97.559469][ T9602] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 97.571916][ T9602] EXT4-fs (loop1): This should not happen!! Data will be lost [ 97.571916][ T9602] [ 97.581788][ T9602] EXT4-fs (loop1): Total free blocks count 0 [ 97.589355][ T9602] EXT4-fs (loop1): Free/Dirty block details [ 97.595427][ T9602] EXT4-fs (loop1): free_blocks=68451041280 [ 97.601325][ T9602] EXT4-fs (loop1): dirty_blocks=16 [ 97.606695][ T9602] EXT4-fs (loop1): Block reservation details [ 97.612729][ T9602] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 97.677575][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.698216][ T9669] loop9: detected capacity change from 0 to 164 [ 97.712377][ T9667] loop8: detected capacity change from 0 to 256 [ 97.743082][ T9676] loop1: detected capacity change from 0 to 512 [ 97.792965][ T9676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.837812][ T9676] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.903397][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.953906][ T9669] bio_check_eod: 19 callbacks suppressed [ 97.953930][ T9669] syz.9.2095: attempt to access beyond end of device [ 97.953930][ T9669] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.973576][ T9669] syz.9.2095: attempt to access beyond end of device [ 97.973576][ T9669] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 98.119966][ T9714] netlink: 372 bytes leftover after parsing attributes in process `syz.1.2100'. [ 98.192640][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 98.192660][ T29] audit: type=1400 audit(1734728541.920:7855): avc: denied { read } for pid=9703 comm="syz.9.2103" path="socket:[24599]" dev="sockfs" ino=24599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.227411][ T9736] loop8: detected capacity change from 0 to 128 [ 98.264374][ T9736] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 98.290168][ T9743] pim6reg1: entered promiscuous mode [ 98.295621][ T9743] pim6reg1: entered allmulticast mode [ 98.317408][ T29] audit: type=1400 audit(1734728542.050:7856): avc: denied { read } for pid=9746 comm="syz.4.2112" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 98.318850][ T9736] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 98.341753][ T29] audit: type=1400 audit(1734728542.050:7857): avc: denied { open } for pid=9746 comm="syz.4.2112" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 98.349590][ T9736] FAT-fs (loop8): Filesystem has been set read-only [ 98.376960][ T9736] syz.8.2109: attempt to access beyond end of device [ 98.376960][ T9736] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 98.381563][ T29] audit: type=1400 audit(1734728542.050:7858): avc: denied { ioctl } for pid=9746 comm="syz.4.2112" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 98.405532][ T9736] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 98.428904][ T9736] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 98.448637][ T9736] syz.8.2109: attempt to access beyond end of device [ 98.448637][ T9736] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.465437][ T9753] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.481585][ T9736] syz.8.2109: attempt to access beyond end of device [ 98.481585][ T9736] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.500775][ T29] audit: type=1400 audit(1734728542.230:7859): avc: denied { execute } for pid=9756 comm="syz.1.2115" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 98.551070][ T29] audit: type=1400 audit(1734728542.280:7860): avc: denied { create } for pid=9763 comm="syz.4.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 98.557976][ T9764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.581282][ T9736] syz.8.2109: attempt to access beyond end of device [ 98.581282][ T9736] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.608166][ T9736] syz.8.2109: attempt to access beyond end of device [ 98.608166][ T9736] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.622983][ T29] audit: type=1400 audit(1734728542.310:7861): avc: denied { ioctl } for pid=9765 comm="syz.2.2117" path="socket:[24653]" dev="sockfs" ino=24653 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.631903][ T9764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.648222][ T29] audit: type=1400 audit(1734728542.310:7862): avc: denied { setopt } for pid=9765 comm="syz.2.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.675897][ T29] audit: type=1400 audit(1734728542.310:7863): avc: denied { bind } for pid=9765 comm="syz.2.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.741078][ T29] audit: type=1400 audit(1734728542.470:7864): avc: denied { write } for pid=9768 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.835960][ T9779] loop8: detected capacity change from 0 to 1024 [ 98.847258][ T9779] EXT4-fs: Ignoring removed orlov option [ 98.853251][ T9779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.876254][ T9779] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 98.891517][ T9779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.943385][ T9799] loop2: detected capacity change from 0 to 164 [ 99.043388][ T5654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.402513][ T9851] loop4: detected capacity change from 0 to 164 [ 99.472522][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2144'. [ 99.580013][ T9865] IPv4: Oversized IP packet from 127.202.26.0 [ 99.664766][ T9864] loop8: detected capacity change from 0 to 8192 [ 99.679307][ T9851] syz.4.2142: attempt to access beyond end of device [ 99.679307][ T9851] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 99.711583][ T9851] syz.4.2142: attempt to access beyond end of device [ 99.711583][ T9851] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.919895][ T9890] loop8: detected capacity change from 0 to 1764 [ 99.950278][ T9895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9895 comm=syz.1.2159 [ 99.965035][ T9895] syz.1.2159[9895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.965094][ T9895] syz.1.2159[9895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.979699][ T9895] syz.1.2159[9895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.986277][ T9799] syz.2.2125 (9799) used greatest stack depth: 6360 bytes left [ 100.048134][ T9899] loop1: detected capacity change from 0 to 1024 [ 100.088006][ T9899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.117241][ T9899] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.138361][ T9915] loop4: detected capacity change from 0 to 732 [ 100.184308][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.192764][ T9917] loop2: detected capacity change from 0 to 8192 [ 100.219620][ T9921] loop8: detected capacity change from 0 to 1024 [ 100.239568][ T9921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.260220][ T9929] IPv4: Oversized IP packet from 127.202.26.0 [ 100.308724][ T9937] loop1: detected capacity change from 0 to 256 [ 100.331957][ T9937] FAT-fs (loop1): Directory bread(block 64) failed [ 100.338890][ T9937] FAT-fs (loop1): Directory bread(block 65) failed [ 100.347604][ T9937] FAT-fs (loop1): Directory bread(block 66) failed [ 100.354238][ T9937] FAT-fs (loop1): Directory bread(block 67) failed [ 100.360893][ T9937] FAT-fs (loop1): Directory bread(block 68) failed [ 100.367762][ T9937] FAT-fs (loop1): Directory bread(block 69) failed [ 100.374523][ T9937] FAT-fs (loop1): Directory bread(block 70) failed [ 100.381139][ T9937] FAT-fs (loop1): Directory bread(block 71) failed [ 100.387704][ T9937] FAT-fs (loop1): Directory bread(block 72) failed [ 100.394271][ T9937] FAT-fs (loop1): Directory bread(block 73) failed [ 100.420127][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2176'. [ 100.473366][ T9789] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 100.509253][ T9948] loop1: detected capacity change from 0 to 512 [ 100.518016][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2182'. [ 100.539953][ T9948] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.2181: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 100.572756][ T9948] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.2181: Bad quota inode: 3, type: 0 [ 100.585243][ T9948] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 100.600363][ T9948] EXT4-fs (loop1): mount failed [ 100.633585][ T9959] loop4: detected capacity change from 0 to 128 [ 100.646223][ T9959] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.658693][ T9959] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.673410][ T9921] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 100.685814][ T9921] EXT4-fs (loop8): This should not happen!! Data will be lost [ 100.685814][ T9921] [ 100.695579][ T9921] EXT4-fs (loop8): Total free blocks count 0 [ 100.701623][ T9921] EXT4-fs (loop8): Free/Dirty block details [ 100.707623][ T9921] EXT4-fs (loop8): free_blocks=68451041280 [ 100.713527][ T9921] EXT4-fs (loop8): dirty_blocks=16 [ 100.718704][ T9921] EXT4-fs (loop8): Block reservation details [ 100.724764][ T9921] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 100.788794][ T8481] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.799401][ T5654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.033548][ T9981] loop8: detected capacity change from 0 to 512 [ 101.047788][ T9981] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 101.055892][ T9981] System zones: 0-2, 18-18, 34-35 [ 101.066505][ T9985] loop2: detected capacity change from 0 to 1024 [ 101.071586][ T9981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.087415][ T9981] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.088704][ T9985] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.108945][ T9981] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 101.110229][ T9985] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2196: Invalid block bitmap block 0 in block_group 0 [ 101.134257][ T9985] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2196: Failed to acquire dquot type 0 [ 101.146967][ T5654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.147281][ T9985] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.2196: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.170828][ T9985] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2196: Invalid inode bitmap blk 0 in block_group 0 [ 101.184334][ T9985] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 101.194337][ T9985] EXT4-fs (loop2): 1 orphan inode deleted [ 101.200812][ T4072] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:7: Failed to release dquot type 0 [ 101.208395][ T9985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.251532][ T8782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.483174][T10012] loop8: detected capacity change from 0 to 128 [ 101.493248][T10014] loop2: detected capacity change from 0 to 512 [ 101.502394][T10012] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.518021][T10014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.521429][T10012] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.531054][T10014] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.610746][ T8782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.624863][T10026] loop1: detected capacity change from 0 to 512 [ 101.632639][ T5654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.642803][T10026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.674038][T10026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.692564][T10026] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.742897][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.756781][T10039] loop2: detected capacity change from 0 to 512 [ 101.763883][T10039] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.808537][T10039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.836115][T10039] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.865660][T10057] loop1: detected capacity change from 0 to 512 [ 101.886696][T10039] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 101.938132][T10056] loop4: detected capacity change from 0 to 8192 [ 101.952206][ T8782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.211015][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2234'. [ 102.306106][T10085] loop8: detected capacity change from 0 to 732 [ 102.336881][T10089] loop2: detected capacity change from 0 to 1764 [ 102.345433][T10049] syz.1.2229 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 102.356530][T10049] CPU: 0 UID: 0 PID: 10049 Comm: syz.1.2229 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 102.367412][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 102.377572][T10049] Call Trace: [ 102.380855][T10049] [ 102.383814][T10049] dump_stack_lvl+0xf2/0x150 [ 102.388425][T10049] dump_stack+0x15/0x1a [ 102.392598][T10049] dump_header+0x83/0x2d0 [ 102.397076][T10049] oom_kill_process+0x341/0x4c0 [ 102.401933][T10049] out_of_memory+0x9af/0xbe0 [ 102.406565][T10049] ? css_next_descendant_pre+0x11c/0x140 [ 102.412263][T10049] mem_cgroup_out_of_memory+0x13e/0x190 [ 102.417976][T10049] try_charge_memcg+0x508/0x7f0 [ 102.422840][T10049] charge_memcg+0x50/0xc0 [ 102.427178][T10049] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 102.433250][T10049] __read_swap_cache_async+0x236/0x480 [ 102.438727][T10049] swap_cluster_readahead+0x279/0x3f0 [ 102.444234][T10049] swapin_readahead+0xe4/0x6f0 [ 102.449094][T10049] ? __rcu_read_unlock+0x34/0x70 [ 102.454062][T10049] ? swap_cache_get_folio+0x77/0x210 [ 102.459428][T10049] do_swap_page+0x31b/0x2550 [ 102.464112][T10049] ? __rcu_read_lock+0x36/0x50 [ 102.468895][T10049] ? __pfx_default_wake_function+0x10/0x10 [ 102.474733][T10049] handle_mm_fault+0x8e4/0x2ac0 [ 102.479604][T10049] exc_page_fault+0x3b9/0x650 [ 102.484307][T10049] asm_exc_page_fault+0x26/0x30 [ 102.489180][T10049] RIP: 0033:0x7f4ad6decb1c [ 102.493647][T10049] Code: 66 0f 1f 44 00 00 69 3d 96 8b e4 00 e8 03 00 00 48 8d 1d 97 94 31 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 102.513312][T10049] RSP: 002b:00007ffe277afaf0 EFLAGS: 00010287 [ 102.519457][T10049] RAX: 0000000000000000 RBX: 00007f4ad7107040 RCX: 0000000000000000 [ 102.527440][T10049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555575e6b808 [ 102.535421][T10049] RBP: 00007f4ad7107ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 102.543411][T10049] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000190d3 [ 102.551386][T10049] R13: 00007f4ad7106080 R14: 0000000000000226 R15: ffffffffffffffff [ 102.559406][T10049] [ 102.562539][T10049] memory: usage 292128kB, limit 307200kB, failcnt 555 [ 102.569335][T10049] memory+swap: usage 280364kB, limit 9007199254740988kB, failcnt 0 [ 102.577248][T10049] kmem: usage 264548kB, limit 9007199254740988kB, failcnt 0 [ 102.584537][T10049] Memory cgroup stats for /syz1: [ 102.627024][T10090] pim6reg1: entered promiscuous mode [ 102.632358][T10090] pim6reg1: entered allmulticast mode [ 102.694271][T10049] cache 131072 [ 102.698131][T10049] rss 4096 [ 102.701166][T10049] shmem 0 [ 102.704166][T10049] mapped_file 65536 [ 102.708200][T10049] dirty 0 [ 102.711141][T10049] writeback 0 [ 102.714460][T10049] workingset_refault_anon 86 [ 102.719069][T10049] workingset_refault_file 212 [ 102.723752][T10049] swap 462848 [ 102.727095][T10049] swapcached 8192 [ 102.730792][T10049] pgpgin 41732 [ 102.734156][T10049] pgpgout 41698 [ 102.737658][T10049] pgfault 73021 [ 102.741122][T10049] pgmajfault 39 [ 102.742411][T10097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10097 comm=syz.8.2241 [ 102.744579][T10049] inactive_anon 4096 [ 102.760988][T10049] active_anon 4096 [ 102.764710][T10049] inactive_file 0 [ 102.768373][T10049] active_file 131072 [ 102.772430][T10049] unevictable 0 [ 102.775949][T10049] hierarchical_memory_limit 314572800 [ 102.781377][T10049] hierarchical_memsw_limit 9223372036854771712 [ 102.787594][T10049] total_cache 131072 [ 102.789258][T10097] netlink: 'syz.8.2241': attribute type 7 has an invalid length. [ 102.791475][T10049] total_rss 4096 [ 102.791485][T10049] total_shmem 0 [ 102.799242][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2241'. [ 102.802731][T10049] total_mapped_file 65536 [ 102.802742][T10049] total_dirty 0 [ 102.823046][T10049] total_writeback 0 [ 102.826899][T10049] total_workingset_refault_anon 86 [ 102.832152][T10049] total_workingset_refault_file 212 [ 102.837374][T10049] total_swap 462848 [ 102.841294][T10049] total_swapcached 8192 [ 102.845557][T10049] total_pgpgin 41732 [ 102.849507][T10049] total_pgpgout 41698 [ 102.853495][T10049] total_pgfault 73021 [ 102.857525][T10049] total_pgmajfault 39 [ 102.861595][T10049] total_inactive_anon 4096 [ 102.866050][T10049] total_active_anon 4096 [ 102.870295][T10049] total_inactive_file 0 [ 102.874464][T10049] total_active_file 131072 [ 102.878908][T10049] total_unevictable 0 [ 102.882218][T10098] loop9: detected capacity change from 0 to 8192 [ 102.882906][T10049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2229,pid=10049,uid=0 [ 102.904003][T10049] Memory cgroup out of memory: Killed process 10049 (syz.1.2229) total-vm:95564kB, anon-rss:788kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 103.079751][T10121] loop4: detected capacity change from 0 to 2048 [ 103.093504][T10123] loop8: detected capacity change from 0 to 512 [ 103.119093][T10119] syzkaller0: entered promiscuous mode [ 103.124717][T10119] syzkaller0: entered allmulticast mode [ 103.148355][T10123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.164843][T10121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.171678][T10132] syz.9.2254[10132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.177026][T10123] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.179722][T10132] syz.9.2254[10132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.199183][T10132] syz.9.2254[10132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.211774][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 103.211788][ T29] audit: type=1400 audit(1734728546.950:8197): avc: denied { map } for pid=10120 comm="syz.4.2251" path="/75/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.252002][ T29] audit: type=1400 audit(1734728546.950:8198): avc: denied { execute } for pid=10120 comm="syz.4.2251" path="/75/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.304823][ T5654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.365997][ T8481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.378588][T10140] loop9: detected capacity change from 0 to 512 [ 103.462605][ T29] audit: type=1400 audit(1734728547.190:8199): avc: denied { relabelfrom } for pid=10148 comm="syz.8.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.482826][ T29] audit: type=1400 audit(1734728547.190:8200): avc: denied { relabelto } for pid=10148 comm="syz.8.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.520987][ T29] audit: type=1400 audit(1734728547.250:8201): avc: denied { connect } for pid=10150 comm="syz.1.2263" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.543518][ T29] audit: type=1400 audit(1734728547.270:8202): avc: denied { write } for pid=10150 comm="syz.1.2263" path="socket:[25283]" dev="sockfs" ino=25283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.589411][ T29] audit: type=1326 audit(1734728547.320:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 103.613006][ T29] audit: type=1326 audit(1734728547.320:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 103.636832][ T29] audit: type=1326 audit(1734728547.320:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 103.636860][ T29] audit: type=1326 audit(1734728547.320:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10152 comm="syz.1.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad6f15d29 code=0x7ffc0000 [ 103.768018][ T7788] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 103.773385][T10157] loop8: detected capacity change from 0 to 2048 [ 103.779007][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 103.796198][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 103.806270][ T7788] Call Trace: [ 103.809573][ T7788] [ 103.812538][ T7788] dump_stack_lvl+0xf2/0x150 [ 103.817157][ T7788] dump_stack+0x15/0x1a [ 103.821542][ T7788] dump_header+0x83/0x2d0 [ 103.825896][ T7788] oom_kill_process+0x341/0x4c0 [ 103.830797][ T7788] out_of_memory+0x9af/0xbe0 [ 103.835472][ T7788] ? css_next_descendant_pre+0x11c/0x140 [ 103.841250][ T7788] mem_cgroup_out_of_memory+0x13e/0x190 [ 103.846831][ T7788] try_charge_memcg+0x508/0x7f0 [ 103.851719][ T7788] charge_memcg+0x50/0xc0 [ 103.856058][ T7788] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 103.862053][ T7788] __read_swap_cache_async+0x236/0x480 [ 103.867579][ T7788] swap_cluster_readahead+0x279/0x3f0 [ 103.872959][ T7788] swapin_readahead+0xe4/0x6f0 [ 103.877842][ T7788] ? __rcu_read_unlock+0x34/0x70 [ 103.882794][ T7788] ? swap_cache_get_folio+0x77/0x210 [ 103.888150][ T7788] do_swap_page+0x31b/0x2550 [ 103.892746][ T7788] ? finish_fault+0x730/0xa10 [ 103.897429][ T7788] ? __rcu_read_lock+0x36/0x50 [ 103.902203][ T7788] ? __pfx_default_wake_function+0x10/0x10 [ 103.908191][ T7788] handle_mm_fault+0x8e4/0x2ac0 [ 103.913094][ T7788] exc_page_fault+0x3b9/0x650 [ 103.917783][ T7788] asm_exc_page_fault+0x26/0x30 [ 103.922649][ T7788] RIP: 0033:0x7f0537a6d122 [ 103.927199][ T7788] Code: d7 82 de 1b 43 48 f7 a4 24 88 00 00 00 48 8b 05 84 86 e4 00 48 69 8c 24 80 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca 8b 48 08 <48> 8b 74 24 08 39 0c 24 48 89 d0 4c 0f 45 ea 48 29 f0 48 39 05 65 [ 103.946856][ T7788] RSP: 002b:00007ffd37e023d0 EFLAGS: 00010206 [ 103.952933][ T7788] RAX: 0000001b32320000 RBX: 0000000000000129 RCX: 0000000000000008 [ 103.960907][ T7788] RDX: 0000000000019528 RSI: 00007ffd37e02450 RDI: 0000000000000001 [ 103.968884][ T7788] RBP: 00007ffd37e023fc R08: 000000002aec8869 R09: 7fffffffffffffff [ 103.976858][ T7788] R10: 00007f0537a0a038 R11: 0000000000000010 R12: 0000000000000032 [ 103.984831][ T7788] R13: 00000000000193f1 R14: 00007ffd37e02450 R15: 0000000000000bb8 [ 103.992862][ T7788] [ 103.996033][ T7788] memory: usage 307200kB, limit 307200kB, failcnt 297 [ 104.002801][ T7788] memory+swap: usage 300216kB, limit 9007199254740988kB, failcnt 0 [ 104.011749][ T7788] kmem: usage 293732kB, limit 9007199254740988kB, failcnt 0 [ 104.019226][ T7788] Memory cgroup stats for /syz9: [ 104.048150][ T7788] cache 0 [ 104.056378][ T7788] rss 0 [ 104.059246][ T7788] shmem 0 [ 104.062191][ T7788] mapped_file 0 [ 104.065691][ T7788] dirty 0 [ 104.068636][ T7788] writeback 0 [ 104.071922][ T7788] workingset_refault_anon 6 [ 104.076524][ T7788] workingset_refault_file 33 [ 104.081126][ T7788] swap 569344 [ 104.084468][ T7788] swapcached 4096 [ 104.088310][ T7788] pgpgin 22998 [ 104.091732][ T7788] pgpgout 22997 [ 104.095201][ T7788] pgfault 32492 [ 104.098696][ T7788] pgmajfault 9 [ 104.102128][ T7788] inactive_anon 0 [ 104.105784][ T7788] active_anon 4096 [ 104.109300][T10162] netlink: 'syz.8.2268': attribute type 1 has an invalid length. [ 104.109492][ T7788] inactive_file 0 [ 104.109503][ T7788] active_file 0 [ 104.124403][ T7788] unevictable 0 [ 104.127967][ T7788] hierarchical_memory_limit 314572800 [ 104.133387][ T7788] hierarchical_memsw_limit 9223372036854771712 [ 104.139582][ T7788] total_cache 0 [ 104.143059][ T7788] total_rss 0 [ 104.146401][ T7788] total_shmem 0 [ 104.149905][ T7788] total_mapped_file 0 [ 104.153885][ T7788] total_dirty 0 [ 104.157383][ T7788] total_writeback 0 [ 104.161199][ T7788] total_workingset_refault_anon 6 [ 104.166251][ T7788] total_workingset_refault_file 33 [ 104.171362][ T7788] total_swap 569344 [ 104.175182][ T7788] total_swapcached 4096 [ 104.179369][ T7788] total_pgpgin 22998 [ 104.183267][ T7788] total_pgpgout 22997 [ 104.187282][ T7788] total_pgfault 32492 [ 104.191288][ T7788] total_pgmajfault 9 [ 104.195232][ T7788] total_inactive_anon 0 [ 104.199466][ T7788] total_active_anon 4096 [ 104.203759][ T7788] total_inactive_file 0 [ 104.208022][ T7788] total_active_file 0 [ 104.212011][ T7788] total_unevictable 0 [ 104.216058][ T7788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2256,pid=10134,uid=0 [ 104.230820][ T7788] Memory cgroup out of memory: Killed process 10134 (syz.9.2256) total-vm:95564kB, anon-rss:792kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 104.253175][T10162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.273300][T10161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.280579][T10161] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 104.294083][T10161] bond2: (slave vcan1): Error -95 calling set_mac_address [ 104.405045][T10181] syz.4.2278[10181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.405142][T10181] syz.4.2278[10181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.420182][T10181] syz.4.2278[10181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.470014][T10194] loop1: detected capacity change from 0 to 1024 [ 104.490858][T10197] loop8: detected capacity change from 0 to 164 [ 104.491822][T10194] EXT4-fs: Ignoring removed nobh option [ 104.502927][T10194] EXT4-fs: Ignoring removed bh option [ 104.502978][T10197] Unable to read rock-ridge attributes [ 104.516215][T10197] Unable to read rock-ridge attributes [ 104.569494][T10203] loop2: detected capacity change from 0 to 512 [ 104.577595][T10194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.646153][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.789410][T10219] loop1: detected capacity change from 0 to 164 [ 104.805365][T10219] syz.1.2291: attempt to access beyond end of device [ 104.805365][T10219] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 104.821761][T10219] syz.1.2291: attempt to access beyond end of device [ 104.821761][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.837192][T10219] syz.1.2291: attempt to access beyond end of device [ 104.837192][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.851168][T10219] syz.1.2291: attempt to access beyond end of device [ 104.851168][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.866781][T10219] syz.1.2291: attempt to access beyond end of device [ 104.866781][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.880575][T10219] syz.1.2291: attempt to access beyond end of device [ 104.880575][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.894267][T10219] syz.1.2291: attempt to access beyond end of device [ 104.894267][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.908062][T10219] syz.1.2291: attempt to access beyond end of device [ 104.908062][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.921766][T10219] syz.1.2291: attempt to access beyond end of device [ 104.921766][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.935454][T10219] syz.1.2291: attempt to access beyond end of device [ 104.935454][T10219] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 104.991591][T10227] loop8: detected capacity change from 0 to 512 [ 105.039985][T10227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.057271][T10227] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.127333][ T5654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.171475][T10231] loop8: detected capacity change from 0 to 128 [ 105.187798][T10231] FAT-fs (loop8): Directory bread(block 162) failed [ 105.194494][T10231] FAT-fs (loop8): Directory bread(block 163) failed [ 105.226916][T10231] FAT-fs (loop8): Directory bread(block 164) failed [ 105.233654][T10231] FAT-fs (loop8): Directory bread(block 165) failed [ 105.255543][T10231] FAT-fs (loop8): Directory bread(block 166) failed [ 105.262524][T10231] FAT-fs (loop8): Directory bread(block 167) failed [ 105.285572][T10231] FAT-fs (loop8): Directory bread(block 168) failed [ 105.295519][T10231] FAT-fs (loop8): Directory bread(block 169) failed [ 105.312800][T10231] FAT-fs (loop8): Directory bread(block 162) failed [ 105.326026][T10231] FAT-fs (loop8): Directory bread(block 163) failed [ 105.451204][T10195] syz.2.2283 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 105.462248][T10195] CPU: 1 UID: 0 PID: 10195 Comm: syz.2.2283 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 105.473041][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 105.483616][T10195] Call Trace: [ 105.486919][T10195] [ 105.489869][T10195] dump_stack_lvl+0xf2/0x150 [ 105.494549][T10195] dump_stack+0x15/0x1a [ 105.498740][T10195] dump_header+0x83/0x2d0 [ 105.503161][T10195] oom_kill_process+0x341/0x4c0 [ 105.508088][T10195] out_of_memory+0x9af/0xbe0 [ 105.512738][T10195] mem_cgroup_out_of_memory+0x13e/0x190 [ 105.518401][T10195] try_charge_memcg+0x508/0x7f0 [ 105.523302][T10195] charge_memcg+0x50/0xc0 [ 105.527654][T10195] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 105.533725][T10195] __read_swap_cache_async+0x236/0x480 [ 105.539294][T10195] swap_cluster_readahead+0x279/0x3f0 [ 105.544715][T10195] swapin_readahead+0xe4/0x6f0 [ 105.549507][T10195] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 105.555103][T10195] ? swap_cache_get_folio+0x77/0x210 [ 105.560459][T10195] do_swap_page+0x31b/0x2550 [ 105.565076][T10195] ? probe_sched_wakeup+0x81/0xa0 [ 105.570148][T10195] ? ttwu_do_activate+0x206/0x240 [ 105.575254][T10195] ? __rcu_read_lock+0x36/0x50 [ 105.580052][T10195] ? __pfx_default_wake_function+0x10/0x10 [ 105.585945][T10195] handle_mm_fault+0x8e4/0x2ac0 [ 105.590819][T10195] exc_page_fault+0x3b9/0x650 [ 105.595540][T10195] asm_exc_page_fault+0x26/0x30 [ 105.600423][T10195] RIP: 0033:0x7f559dcaf529 [ 105.604909][T10195] Code: 39 f0 73 46 49 89 34 24 48 89 ce 48 89 4f f8 49 8b 14 24 49 8b 4c 24 08 eb 85 0f 1f 80 00 00 00 00 48 89 fe 4c 89 ea 48 89 df f2 fe ff ff 48 89 d8 4c 29 e0 48 3d 80 00 00 00 7e 7f 4d 85 ed [ 105.624541][T10195] RSP: 002b:00007ffef428acf0 EFLAGS: 00010202 [ 105.630627][T10195] RAX: 00007f559d50b9c0 RBX: 00007f559d50b9c8 RCX: ffffffff81392d12 [ 105.638628][T10195] RDX: 000000000000001f RSI: 00007f559d545710 RDI: 00007f559d50b9c8 [ 105.646620][T10195] RBP: 00007f559d4a9000 R08: 00007f559d4f7380 R09: 00007f559dfb2000 [ 105.654604][T10195] R10: 00007f559d449008 R11: 0000000000000002 R12: 00007f559d4a8ff8 [ 105.662587][T10195] R13: 000000000000001f R14: 0000000000000226 R15: 00007f559d449008 [ 105.670651][T10195] ? bpf_probe_write_user+0x72/0xc0 [ 105.675880][T10195] [ 105.679120][T10195] memory: usage 307200kB, limit 307200kB, failcnt 131 [ 105.686200][T10195] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 105.694207][T10195] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 105.701549][T10195] Memory cgroup stats for /syz2: [ 105.710041][T10195] cache 0 [ 105.717998][T10195] rss 0 [ 105.720776][T10195] shmem 0 [ 105.723711][T10195] mapped_file 0 [ 105.727209][T10195] dirty 0 [ 105.730200][T10195] writeback 0 [ 105.733669][T10195] workingset_refault_anon 57 [ 105.738315][T10195] workingset_refault_file 0 [ 105.742851][T10195] swap 270336 [ 105.746160][T10195] swapcached 0 [ 105.749537][T10195] pgpgin 8960 [ 105.752848][T10195] pgpgout 8960 [ 105.756269][T10195] pgfault 15934 [ 105.759781][T10195] pgmajfault 36 [ 105.763256][T10195] inactive_anon 0 [ 105.766923][T10195] active_anon 0 [ 105.770394][T10195] inactive_file 0 [ 105.774035][T10195] active_file 0 [ 105.777585][T10195] unevictable 0 [ 105.781042][T10195] hierarchical_memory_limit 314572800 [ 105.786502][T10195] hierarchical_memsw_limit 9223372036854771712 [ 105.792693][T10195] total_cache 0 [ 105.796185][T10195] total_rss 0 [ 105.799468][T10195] total_shmem 0 [ 105.803059][T10195] total_mapped_file 0 [ 105.807079][T10195] total_dirty 0 [ 105.810580][T10195] total_writeback 0 [ 105.814391][T10195] total_workingset_refault_anon 57 [ 105.819554][T10195] total_workingset_refault_file 0 [ 105.824677][T10195] total_swap 270336 [ 105.828567][T10195] total_swapcached 0 [ 105.832494][T10195] total_pgpgin 8960 [ 105.836434][T10195] total_pgpgout 8960 [ 105.840337][T10195] total_pgfault 15934 [ 105.844324][T10195] total_pgmajfault 36 [ 105.848343][T10195] total_inactive_anon 0 [ 105.852569][T10195] total_active_anon 0 [ 105.856586][T10195] total_inactive_file 0 [ 105.860744][T10195] total_active_file 0 [ 105.864729][T10195] total_unevictable 0 [ 105.868814][T10195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2283,pid=10195,uid=0 [ 105.883659][T10195] Memory cgroup out of memory: Killed process 10195 (syz.2.2283) total-vm:95564kB, anon-rss:788kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 105.943624][T10258] loop1: detected capacity change from 0 to 1024 [ 105.950506][T10258] EXT4-fs: Ignoring removed nobh option [ 105.975446][T10258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.071498][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.140370][T10281] syzkaller0: entered promiscuous mode [ 106.145932][T10281] syzkaller0: entered allmulticast mode [ 106.310344][T10305] loop9: detected capacity change from 0 to 1024 [ 106.318202][T10302] loop4: detected capacity change from 0 to 2048 [ 106.318946][T10305] EXT4-fs: Ignoring removed nobh option [ 106.337978][T10305] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.338649][T10302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.411585][ T8481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.422310][ T7788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.522149][T10322] loop9: detected capacity change from 0 to 2048 [ 106.565933][T10322] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 106.571275][T10322] loop9: partition table partially beyond EOD, truncated [ 106.584489][T10322] loop9: p1 size 33024 extends beyond EOD, truncated [ 106.593228][T10322] loop9: p2 start 16908804 is beyond EOD, truncated [ 106.599908][T10322] loop9: p3 start 4284289 is beyond EOD, truncated [ 106.608567][T10322] loop9: p5 size 33024 extends beyond EOD, truncated [ 106.617705][T10322] loop9: p6 start 16908804 is beyond EOD, truncated [ 106.634640][T10322] devtmpfs: Unknown parameter 'dirsync±Ü¿_±{ïÌ' [ 106.748111][T10347] loop9: detected capacity change from 0 to 4096 [ 106.760453][T10347] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.789579][T10355] loop1: detected capacity change from 0 to 128 [ 106.905645][ T7788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.917942][T10363] loop4: detected capacity change from 0 to 128 [ 106.951422][T10365] loop9: detected capacity change from 0 to 1024 [ 106.958474][T10365] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.965455][T10365] EXT4-fs (loop9): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 106.992018][T10365] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 107.004352][T10365] EXT4-fs (loop9): orphan cleanup on readonly fs [ 107.012001][T10365] EXT4-fs error (device loop9): __ext4_get_inode_loc:4435: comm syz.9.2350: Invalid inode table block 0 in block_group 0 [ 107.025299][T10365] EXT4-fs (loop9): Remounting filesystem read-only [ 107.027333][T10372] netlink: 'syz.4.2354': attribute type 1 has an invalid length. [ 107.038981][T10365] EXT4-fs (loop9): 1 truncate cleaned up [ 107.039714][T10372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2354'. [ 107.055573][T10365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.076538][T10365] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 107.083745][T10365] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.145152][T10382] loop4: detected capacity change from 0 to 1024 [ 107.152023][T10382] EXT4-fs: Ignoring removed nobh option [ 107.210847][T10382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.216523][T10392] loop9: detected capacity change from 0 to 1024 [ 107.235377][T10392] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 107.246425][T10392] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 107.257926][T10392] EXT4-fs (loop9): invalid journal inode [ 107.272836][T10392] loop9: detected capacity change from 0 to 128 [ 107.302835][T10396] pim6reg1: entered promiscuous mode [ 107.308265][T10396] pim6reg1: entered allmulticast mode [ 107.362508][T10405] netlink: 'syz.9.2369': attribute type 1 has an invalid length. [ 107.370496][T10405] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2369'. [ 107.393004][ T8481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.453951][T10409] SELinux: syz.8.2372 (10409) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 107.610968][T10434] loop9: detected capacity change from 0 to 128 [ 107.651653][T10440] netlink: 'syz.8.2384': attribute type 1 has an invalid length. [ 107.659495][T10440] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2384'. [ 107.718607][T10445] syzkaller0: entered promiscuous mode [ 107.724220][T10445] syzkaller0: entered allmulticast mode [ 107.859669][T10451] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.966938][T10453] loop9: detected capacity change from 0 to 512 [ 107.977021][T10453] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.989692][T10453] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.083950][ T8674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.162690][T10470] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2399'. [ 108.309696][ T4072] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.333166][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 108.333183][ T29] audit: type=1400 audit(1734728552.060:8612): avc: denied { mounton } for pid=10484 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.397901][T10492] loop8: detected capacity change from 0 to 1024 [ 108.405801][ T29] audit: type=1326 audit(1734728552.140:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559ddd5d29 code=0x7ffc0000 [ 108.406782][T10492] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.430225][T10493] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2407'. [ 108.445096][ T29] audit: type=1326 audit(1734728552.170:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f559ddd5d29 code=0x7ffc0000 [ 108.457573][T10492] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 108.479522][T10492] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 108.488840][T10492] EXT4-fs (loop8): orphan cleanup on readonly fs [ 108.496200][ T4072] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.503350][T10492] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.2408: Invalid inode table block 0 in block_group 0 [ 108.506704][ T29] audit: type=1400 audit(1734728552.230:8615): avc: denied { name_bind } for pid=10497 comm="syz.4.2409" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 108.529967][T10492] EXT4-fs (loop8): Remounting filesystem read-only [ 108.547237][T10492] Quota error (device loop8): write_blk: dquota write failed [ 108.554663][T10492] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 108.564875][T10492] EXT4-fs (loop8): 1 truncate cleaned up [ 108.571264][T10492] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.583769][T10492] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 108.590807][T10492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.601965][ T4072] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.613827][T10493] 0ªX¹¦À: renamed from caif0 [ 108.623296][T10493] 0ªX¹¦À: entered allmulticast mode [ 108.628574][T10493] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.644797][ T29] audit: type=1326 audit(1734728552.370:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559ddd5d29 code=0x7ffc0000 [ 108.668510][ T29] audit: type=1326 audit(1734728552.370:8617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.2.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559ddd5d29 code=0x7ffc0000 [ 108.709757][T10503] loop2: detected capacity change from 0 to 128 [ 108.713406][ T4072] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.734847][T10507] loop8: detected capacity change from 0 to 128 [ 108.749102][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'. [ 108.794083][ T29] audit: type=1400 audit(1734728552.520:8618): avc: denied { read } for pid=10509 comm="syz.8.2414" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.846460][ T4072] bridge_slave_1: left allmulticast mode [ 108.852231][ T4072] bridge_slave_1: left promiscuous mode [ 108.858044][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.866492][ T4072] bridge_slave_0: left allmulticast mode [ 108.872173][ T4072] bridge_slave_0: left promiscuous mode [ 108.877900][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.914477][ T29] audit: type=1400 audit(1734728552.640:8619): avc: denied { create } for pid=10513 comm="syz.2.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.988108][ T4072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.001807][ T4072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.011610][ T4072] bond0 (unregistering): Released all slaves [ 109.046635][T10484] chnl_net:caif_netlink_parms(): no params data found [ 109.055990][T10525] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2419'. [ 109.075161][ T4072] tipc: Left network mode [ 109.080499][ T4072] IPVS: stopping backup sync thread 8094 ... [ 109.084191][T10525] loop2: detected capacity change from 0 to 512 [ 109.091560][T10520] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2419'. [ 109.117469][T10525] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 109.126166][T10525] System zones: 0-2, 18-18, 34-34 [ 109.133076][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.140616][ T4072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.149086][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.156536][ T4072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.160003][T10525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2419: bg 0: block 248: padding at end of block bitmap is not set [ 109.178393][T10525] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2419: Failed to acquire dquot type 1 [ 109.190364][T10525] EXT4-fs (loop2): 1 truncate cleaned up [ 109.196401][ T4072] veth1_macvtap: left promiscuous mode [ 109.196594][T10525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.201893][ T4072] veth0_macvtap: left promiscuous mode [ 109.214616][T10525] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.219892][ T4072] veth1_vlan: left promiscuous mode [ 109.235525][ T4072] veth0_vlan: left promiscuous mode [ 109.263896][ T8782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.340853][ T4072] team0 (unregistering): Port device team_slave_1 removed [ 109.355291][ T4072] team0 (unregistering): Port device team_slave_0 removed [ 109.438205][T10484] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.445339][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.457139][T10484] bridge_slave_0: entered allmulticast mode [ 109.463689][T10484] bridge_slave_0: entered promiscuous mode [ 109.470378][T10484] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.477501][T10484] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.484732][T10484] bridge_slave_1: entered allmulticast mode [ 109.494023][T10484] bridge_slave_1: entered promiscuous mode [ 109.686404][ T4072] bridge_slave_1: left allmulticast mode [ 109.692102][ T4072] bridge_slave_1: left promiscuous mode [ 109.697968][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.705585][ T4072] bridge_slave_0: left allmulticast mode [ 109.711255][ T4072] bridge_slave_0: left promiscuous mode [ 109.717026][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.767443][ T4072] bond0 (unregistering): Released all slaves [ 113.628071][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 113.628091][ T29] audit: type=1400 audit(1734728557.360:8887): avc: denied { execmem } for pid=10612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 113.670957][ T29] audit: type=1400 audit(1734728557.360:8888): avc: denied { map_create } for pid=10615 comm="syz.2.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.690309][ T29] audit: type=1400 audit(1734728557.360:8889): avc: denied { read write } for pid=10613 comm="syz.4.2456" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.714426][ T29] audit: type=1400 audit(1734728557.380:8890): avc: denied { map_create } for pid=10614 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.733669][ T29] audit: type=1400 audit(1734728557.380:8891): avc: denied { prog_load } for pid=10614 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.752887][ T29] audit: type=1400 audit(1734728557.380:8892): avc: denied { map_create } for pid=10614 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.772139][ T29] audit: type=1400 audit(1734728557.390:8893): avc: denied { execute } for pid=10614 comm="syz.1.2457" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=0 [ 113.798461][ T29] audit: type=1400 audit(1734728557.390:8894): avc: denied { prog_load } for pid=10616 comm="syz.8.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.817752][ T29] audit: type=1400 audit(1734728557.400:8895): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.842057][ T29] audit: type=1400 audit(1734728557.400:8896): avc: denied { create } for pid=10616 comm="syz.8.2459" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 119.694408][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 119.694428][ T29] audit: type=1400 audit(1734728563.420:9030): avc: denied { execmem } for pid=10662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 119.722589][ T29] audit: type=1400 audit(1734728563.430:9031): avc: denied { map_create } for pid=10664 comm="syz.2.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.742006][ T29] audit: type=1400 audit(1734728563.430:9032): avc: denied { prog_load } for pid=10664 comm="syz.2.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.761264][ T29] audit: type=1400 audit(1734728563.430:9033): avc: denied { prog_load } for pid=10664 comm="syz.2.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.780503][ T29] audit: type=1400 audit(1734728563.430:9034): avc: denied { prog_load } for pid=10664 comm="syz.2.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.799652][ T29] audit: type=1400 audit(1734728563.440:9035): avc: denied { read write } for pid=8782 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 119.823948][ T29] audit: type=1400 audit(1734728563.450:9036): avc: denied { create } for pid=10663 comm="syz.8.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 119.844711][ T29] audit: type=1400 audit(1734728563.450:9037): avc: denied { read write } for pid=10663 comm="syz.8.2479" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 119.868815][ T29] audit: type=1400 audit(1734728563.450:9038): avc: denied { prog_load } for pid=10668 comm="syz.4.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.888025][ T29] audit: type=1400 audit(1734728563.460:9039): avc: denied { prog_load } for pid=10668 comm="syz.4.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.354735][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 126.354753][ T29] audit: type=1400 audit(1734728570.080:9160): avc: denied { execmem } for pid=10700 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 126.388139][ T29] audit: type=1400 audit(1734728570.090:9161): avc: denied { map_create } for pid=10702 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.407436][ T29] audit: type=1400 audit(1734728570.090:9162): avc: denied { prog_load } for pid=10702 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.426667][ T29] audit: type=1400 audit(1734728570.090:9163): avc: denied { prog_load } for pid=10702 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.445913][ T29] audit: type=1400 audit(1734728570.090:9164): avc: denied { prog_load } for pid=10702 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.465189][ T29] audit: type=1400 audit(1734728570.090:9165): avc: denied { prog_load } for pid=10702 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.484409][ T29] audit: type=1326 audit(1734728570.100:9166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.8.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59582a5d29 code=0x7ffc0000 [ 126.508243][ T29] audit: type=1326 audit(1734728570.110:9167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.8.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59582a5d29 code=0x7ffc0000 [ 126.531733][ T29] audit: type=1326 audit(1734728570.110:9168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.8.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59582a5d29 code=0x7ffc0000 [ 126.555287][ T29] audit: type=1400 audit(1734728570.110:9169): avc: denied { map_create } for pid=10701 comm="syz.8.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Dec 20 21:02:54 syzkaller auth.info sshd[3285]: Received disconnect from 10.128.0.163 port 45610:11: disconnected by user Dec 20 21:02:54 syzkaller auth.info sshd[3285]: Disconnected from user root 10.128.0.163 port 45610 [ 130.430107][T10725] bond0: (slave syz_tun): Releasing backup interface [ 130.621851][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.658625][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.718191][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.768249][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.839546][ T11] bridge_slave_1: left allmulticast mode [ 130.845665][ T11] bridge_slave_1: left promiscuous mode [ 130.851370][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.859790][ T11] bridge_slave_0: left allmulticast mode [ 130.865618][ T11] bridge_slave_0: left promiscuous mode [ 130.871274][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.957759][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.967561][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.977310][ T11] bond0 (unregistering): Released all slaves [ 131.020383][ T11] hsr_slave_0: left promiscuous mode [ 131.026203][ T11] hsr_slave_1: left promiscuous mode [ 131.031867][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.039346][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.047077][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.054488][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.063513][ T11] veth1_macvtap: left promiscuous mode [ 131.069025][ T11] veth0_macvtap: left promiscuous mode [ 131.074526][ T11] veth1_vlan: left promiscuous mode [ 131.079897][ T11] veth0_vlan: left promiscuous mode [ 131.142418][ T11] team0 (unregistering): Port device team_slave_1 removed [ 131.152707][ T11] team0 (unregistering): Port device team_slave_0 removed Dec 20 21:02:57 [ 133.396921][ T29] kauditd_printk_skb: 96 callbacks suppressed syzkaller daemon[ 133.396937][ T29] audit: type=1400 audit(1734728577.130:9266): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[3038[ 133.428936][ T29] audit: type=1400 audit(1734728577.160:9267): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ]: ps_sendpsmmsg: Connection refused Dec 20 21:02:57 syzkaller daemon.err dhcpcd[3038]: ps_root_recvmsgcb: failed to send message to pid 6865: Connection refused [ 134.359611][ T29] audit: type=1400 audit(1734728578.090:9268): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 20 21:02:58 [ 134.382186][ T29] audit: type=1400 audit(1734728578.120:9269): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon.err dhcpcd[3038]: ps_sendpsmmsg: Connection refused Dec 20 21:02:58 syzkaller daemon.err dhcpcd[3038]: ps_root_recvmsgcb: failed to send message to pid 6951: Connection refused [ 135.552603][ T29] audit: type=1400 audit(1734728579.280:9270): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 20 21:02:59 [ 135.575191][ T29] audit: type=1400 audit(1734728579.310:9271): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon.err dhcpcd[3038]: ps_sendpsmmsg: Connection refused Dec 20 21:02:59 syzkaller daemon.err dhcpcd[3038]: ps_root_recvmsgcb: failed to send message to pid 7119: Connection refused [ 135.911708][ T29] audit: type=1400 audit(1734728579.640:9272): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Dec 20 21:02:59 [ 135.934107][ T29] audit: type=1400 audit(1734728579.660:9273): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon.err dhcpcd[3038]: ps_sendpsmmsg: Connection refused Dec 20 21:02:59 syzkaller daemon.err dhcpcd[3038]: ps_root_recvmsgcb: failed to send message to pid 7071: Connection refused [ 139.315617][ C1] ================================================================== [ 139.323734][ C1] BUG: KCSAN: data-race in __tmigr_cpu_deactivate / tmigr_handle_remote [ 139.332091][ C1] [ 139.334428][ C1] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 139.341813][ C1] __tmigr_cpu_deactivate+0xa1/0x410 [ 139.347103][ C1] tmigr_cpu_deactivate+0x66/0x180 [ 139.352234][ C1] __get_next_timer_interrupt+0x137/0x530 [ 139.357949][ C1] timer_base_try_to_set_idle+0x54/0x60 [ 139.363498][ C1] tick_nohz_idle_stop_tick+0x15b/0x650 [ 139.369058][ C1] do_idle+0x175/0x230 [ 139.373128][ C1] cpu_startup_entry+0x25/0x30 [ 139.377896][ C1] rest_init+0xef/0xf0 [ 139.381992][ C1] start_kernel+0x586/0x5e0 [ 139.386512][ C1] x86_64_start_reservations+0x2a/0x30 [ 139.391998][ C1] x86_64_start_kernel+0x9a/0xa0 [ 139.396955][ C1] common_startup_64+0x12c/0x137 [ 139.401974][ C1] [ 139.404385][ C1] read to 0xffff888237c205dc of 1 bytes by interrupt on cpu 1: [ 139.411943][ C1] tmigr_handle_remote+0x26e/0x940 [ 139.417060][ C1] run_timer_softirq+0x5f/0x70 [ 139.421834][ C1] handle_softirqs+0xbf/0x280 [ 139.426531][ C1] __irq_exit_rcu+0x3a/0xc0 [ 139.431040][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 139.436674][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.442648][ C1] acpi_safe_halt+0x21/0x30 [ 139.447159][ C1] acpi_idle_do_entry+0x1d/0x30 [ 139.452013][ C1] acpi_idle_enter+0x96/0xb0 [ 139.456592][ C1] cpuidle_enter_state+0xc5/0x260 [ 139.461714][ C1] cpuidle_enter+0x40/0x70 [ 139.466131][ C1] do_idle+0x192/0x230 [ 139.470204][ C1] cpu_startup_entry+0x25/0x30 [ 139.474968][ C1] start_secondary+0x96/0xa0 [ 139.479557][ C1] common_startup_64+0x12c/0x137 [ 139.484499][ C1] [ 139.486820][ C1] value changed: 0x01 -> 0x00 [ 139.491505][ C1] [ 139.493834][ C1] Reported by Kernel Concurrency Sanitizer on: [ 139.499985][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 139.510333][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 139.520389][ C1] ==================================================================