last executing test programs: 5m53.876569543s ago: executing program 3 (id=1383): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41180, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000500), 0x1, 0x14f400) 5m53.837813912s ago: executing program 3 (id=1386): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./bus\x00', 0x18000, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045510, &(0x7f0000000040)) 5m53.763615232s ago: executing program 3 (id=1391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x83f, &(0x7f00000004c0)={0x0, 0xa9ee, 0x400, 0x2, 0x8002ae}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x109880}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5m53.726042082s ago: executing program 3 (id=1393): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x2295898, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m53.704249042s ago: executing program 3 (id=1395): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') 5m53.467044742s ago: executing program 3 (id=1401): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setrlimit(0x9, 0x0) 5m53.466870891s ago: executing program 32 (id=1401): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setrlimit(0x9, 0x0) 4m14.041500893s ago: executing program 4 (id=5219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m13.937473823s ago: executing program 4 (id=5222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4m11.137528883s ago: executing program 4 (id=5235): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) fallocate(r0, 0x0, 0x400000000000000, 0x7) 4m10.801776752s ago: executing program 4 (id=5238): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@bsdgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x57b, &(0x7f0000000680)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7b6e, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m10.575858291s ago: executing program 4 (id=5251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 4m10.374284881s ago: executing program 4 (id=5259): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x97d6, 0x100000007000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) 4m10.373998441s ago: executing program 33 (id=5259): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x97d6, 0x100000007000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) 3m45.527702676s ago: executing program 6 (id=5985): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000180)={[{}, {@dioread_lock}, {@dax_never}, {@usrjquota}]}, 0xfe, 0x476, &(0x7f0000000840)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) set_mempolicy(0x3, &(0x7f0000000000)=0x8001, 0xdf) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m45.188871755s ago: executing program 6 (id=5996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1852f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 3m45.081742515s ago: executing program 6 (id=6001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3m44.770199824s ago: executing program 6 (id=6009): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@nobarrier}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@noload}]}, 0x1, 0x444, &(0x7f0000001f80)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, &(0x7f0000000000)=0x20000000) 3m44.636872403s ago: executing program 6 (id=6013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, 0x0, &(0x7f0000001cc0)) 3m44.306869522s ago: executing program 6 (id=6028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="04ec", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 3m44.304102942s ago: executing program 34 (id=6028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="04ec", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 3m37.337113389s ago: executing program 1 (id=6296): syz_io_uring_setup(0x7d5, &(0x7f0000000080)={0x0, 0x4, 0x400, 0x2, 0xb0}, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 3m37.336437768s ago: executing program 1 (id=6298): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m37.017395967s ago: executing program 1 (id=6312): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) 3m36.951689767s ago: executing program 1 (id=6316): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@nobarrier}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@noload}]}, 0x1, 0x444, &(0x7f0000001f80)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, &(0x7f0000000000)=0x20000000) 3m36.860200256s ago: executing program 1 (id=6318): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x120, 0x5dd8, 0x1000003, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 3m36.671076176s ago: executing program 1 (id=6321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 3m36.670941866s ago: executing program 35 (id=6321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 3m29.06079035s ago: executing program 5 (id=6565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) ustat(0x3, &(0x7f0000000240)) 3m29.03978621s ago: executing program 5 (id=6567): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) sysinfo(&(0x7f0000001080)=""/207) 3m28.77101577s ago: executing program 5 (id=6571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x0) 3m28.651020369s ago: executing program 5 (id=6576): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d9e14ef01060000e9009600fdff0000000000842d6dc700000000000000000400", "d30002000000000080eeff000000901a0000000000000000000000003afa00", [0x0, 0x3ff]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 3m28.371860198s ago: executing program 5 (id=6587): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m27.653602145s ago: executing program 5 (id=6608): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time={0x11000, 0x10000}, 0x0, {}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc02c5341, &(0x7f0000000100)) tkill(r0, 0x7) 3m27.640341586s ago: executing program 36 (id=6608): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time={0x11000, 0x10000}, 0x0, {}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc02c5341, &(0x7f0000000100)) tkill(r0, 0x7) 1.778037307s ago: executing program 9 (id=16448): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1f5) sync_file_range(r2, 0x8, 0x0, 0x3) 1.727169876s ago: executing program 9 (id=16452): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x35d5, &(0x7f0000000080)={0x0, 0xa0a4, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000002340)={[0xae69]}, 0x8) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 1.545780496s ago: executing program 9 (id=16457): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.545327046s ago: executing program 2 (id=16467): unshare(0x24060400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.455090006s ago: executing program 2 (id=16458): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 1.448433455s ago: executing program 2 (id=16459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 1.350849095s ago: executing program 2 (id=16461): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.274728495s ago: executing program 2 (id=16462): pipe(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) 1.274290175s ago: executing program 0 (id=16463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)='7', 0x1, 0x2004890, &(0x7f0000000040)={0x11, 0xcf, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 1.242422865s ago: executing program 0 (id=16464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) unshare(0x24060400) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2c020400) 1.123064545s ago: executing program 0 (id=16466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.112258404s ago: executing program 0 (id=16469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 1.104782505s ago: executing program 7 (id=16470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1.043049674s ago: executing program 0 (id=16471): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.042854734s ago: executing program 7 (id=16472): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 999.057854ms ago: executing program 7 (id=16473): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x5, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) 677.228293ms ago: executing program 7 (id=16476): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000900)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca.\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, 'ro\x00'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 588.627983ms ago: executing program 7 (id=16479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x60f8, &(0x7f0000000a40)={0x0, 0x1, 0x2, 0x3, 0x40003bd}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) 480.006102ms ago: executing program 7 (id=16482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0xffffffff, 0x273}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 429.432472ms ago: executing program 9 (id=16483): r0 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5c, 0x0, 0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 323.858482ms ago: executing program 9 (id=16486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x20000006}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 299.049511ms ago: executing program 9 (id=16487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 198.649882ms ago: executing program 8 (id=16491): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listxattr(&(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) 132.094091ms ago: executing program 8 (id=16492): open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="1500000065ffff018004000407"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 112.771201ms ago: executing program 8 (id=16493): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) 108.805511ms ago: executing program 0 (id=16494): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 80.920431ms ago: executing program 8 (id=16495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 56.685901ms ago: executing program 8 (id=16496): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x2, 0xfff2}, {0x0, 0x8}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000881c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 8 (id=16497): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000007c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) kernel console output (not intermixed with test programs): t(1738961815.224:110363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3988 comm="syz.9.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7226c1cda9 code=0x7ffc0000 [ 382.431125][ T29] audit: type=1326 audit(1738961815.224:110364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3988 comm="syz.9.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7226c1cda9 code=0x7ffc0000 [ 382.441500][T11926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.454937][ T29] audit: type=1400 audit(1738961815.224:110365): avc: denied { map_create } for pid=3988 comm="syz.9.14799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.484757][ T29] audit: type=1326 audit(1738961815.224:110366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3988 comm="syz.9.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7226c1cda9 code=0x7ffc0000 [ 382.508588][ T29] audit: type=1326 audit(1738961815.224:110367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3988 comm="syz.9.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7226c1cda9 code=0x7ffc0000 [ 382.532358][ T29] audit: type=1326 audit(1738961815.224:110368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3988 comm="syz.9.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7226c1cda9 code=0x7ffc0000 [ 384.363952][T14501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.002205][T11943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.641573][T11943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.912750][ T4393] binfmt_misc: register: failed to install interpreter file ./file2 [ 386.027444][ T4420] veth0_to_team: entered promiscuous mode [ 386.033455][ T4420] veth0_to_team: entered allmulticast mode [ 386.935499][ T4556] pim6reg1: entered promiscuous mode [ 386.940905][ T4556] pim6reg1: entered allmulticast mode [ 387.313881][ T29] kauditd_printk_skb: 1053 callbacks suppressed [ 387.313899][ T29] audit: type=1326 audit(1739224220.169:111422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.8.15043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb846accda9 code=0x7fc00000 [ 387.347721][ T29] audit: type=1400 audit(1739224220.199:111423): avc: denied { read write } for pid=18200 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.407286][ T29] audit: type=1400 audit(1739224220.239:111424): avc: denied { read write } for pid=18909 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.431981][ T29] audit: type=1400 audit(1739224220.249:111425): avc: denied { map_create } for pid=4563 comm="syz.8.15075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.451503][ T29] audit: type=1400 audit(1739224220.249:111426): avc: denied { prog_load } for pid=4563 comm="syz.8.15075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.471128][ T29] audit: type=1400 audit(1739224220.249:111427): avc: denied { prog_load } for pid=4563 comm="syz.8.15075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.545421][ T29] audit: type=1400 audit(1739224220.259:111428): avc: denied { read write } for pid=18200 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.570093][ T29] audit: type=1400 audit(1739224220.289:111429): avc: denied { prog_load } for pid=4562 comm="syz.9.15076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.589415][ T29] audit: type=1400 audit(1739224220.289:111430): avc: denied { map_create } for pid=4562 comm="syz.9.15076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.608855][ T29] audit: type=1400 audit(1739224220.289:111431): avc: denied { prog_load } for pid=4562 comm="syz.9.15076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.629047][T11934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.824269][ T4606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.834250][ T4602] vlan2: entered allmulticast mode [ 387.839390][ T4602] vlan1: entered allmulticast mode [ 387.844735][ T4602] veth0_vlan: entered allmulticast mode [ 387.858634][ T4606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.869350][ T4602] vlan1: left allmulticast mode [ 387.874289][ T4602] veth0_vlan: left allmulticast mode [ 387.931667][ T4615] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.15099'. [ 387.980782][ T4622] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 387.980782][ T4622] program syz.9.15103 not setting count and/or reply_len properly [ 388.773632][ T4781] loop2: detected capacity change from 0 to 128 [ 388.781186][ T4781] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.794771][ T4781] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.842551][T14501] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.977690][ T4801] loop9: detected capacity change from 0 to 128 [ 388.984623][ T4801] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.996774][ T4801] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.035744][T11943] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.123254][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15131'. [ 389.217535][ T4824] loop8: detected capacity change from 0 to 2048 [ 389.244887][ T4827] loop0: detected capacity change from 0 to 4096 [ 389.259464][ T4824] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.273007][ T4827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.296457][ T4834] loop9: detected capacity change from 0 to 164 [ 389.316447][T15932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.331426][ T4834] syz.9.15138: attempt to access beyond end of device [ 389.331426][ T4834] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 389.350616][ T4834] syz.9.15138: attempt to access beyond end of device [ 389.350616][ T4834] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 389.420010][ T4838] loop0: detected capacity change from 0 to 128 [ 389.428959][T18200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.481467][T14501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.590056][ T4865] loop9: detected capacity change from 0 to 512 [ 389.626437][ T4865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.651191][ T4865] ext4 filesystem being mounted at /1741/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.676190][ T4877] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.688415][ T4870] loop2: detected capacity change from 0 to 512 [ 389.715526][ T4870] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 389.759938][T18909] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.799358][ T4870] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 389.825932][ T4870] EXT4-fs (loop2): 1 truncate cleaned up [ 389.836750][ T4870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.872024][T16065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.887450][ T4890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15163'. [ 389.909611][ T4890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15163'. [ 390.427951][ T4912] ip6gretap0: entered promiscuous mode [ 390.444220][ T4912] batadv_slave_0: entered promiscuous mode [ 390.482111][ T4912] ip6gretap0: left promiscuous mode [ 390.499512][ T4912] batadv_slave_0: left promiscuous mode [ 390.626077][ T4925] SELinux: security_context_str_to_sid () failed with errno=-22 [ 390.654422][ T4929] vlan2: entered promiscuous mode [ 390.659506][ T4929] gretap0: entered promiscuous mode [ 390.704372][ T4938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15184'. [ 390.761106][T11926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.763015][T11943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.851933][ T4953] xt_CT: No such helper "snmp_trap" [ 390.878060][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15197'. [ 390.895046][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15197'. [ 391.005523][ T4986] loop8: detected capacity change from 0 to 512 [ 391.015481][ T4987] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 391.027135][ T4986] EXT4-fs (loop8): orphan cleanup on readonly fs [ 391.033620][ T4986] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 391.059967][ T4986] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 391.085251][ T4986] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.15206: attempt to clear invalid blocks 2 len 1 [ 391.100305][ T4986] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.15206: invalid indirect mapped block 1819239214 (level 0) [ 391.123417][ T4986] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.15206: invalid indirect mapped block 1819239214 (level 1) [ 391.182903][ T4986] EXT4-fs (loop8): 1 truncate cleaned up [ 391.193945][ T4986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.214680][ T5002] wg2: entered promiscuous mode [ 391.219684][ T5002] wg2: entered allmulticast mode [ 391.225382][T11943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.246417][ T4986] ext4: Unknown parameter '00000000000000000000' [ 391.253703][ T5012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15218'. [ 391.290452][T18200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.361518][ T5026] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.417938][ T5034] loop9: detected capacity change from 0 to 512 [ 391.459522][ T5034] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.15229: Failed to acquire dquot type 1 [ 391.490485][ T5034] EXT4-fs (loop9): 1 truncate cleaned up [ 391.496673][ T5034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.509317][ T5034] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.519839][ T5047] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 391.537448][ T5034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.149668][ T5097] rose0: refused to change device tx_queue_len [ 392.324971][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 392.324986][ T29] audit: type=1400 audit(1739224225.179:111721): avc: denied { read } for pid=5104 comm="syz.7.15261" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 392.373786][ T5101] loop9: detected capacity change from 0 to 8192 [ 392.381049][ T29] audit: type=1400 audit(1739224225.219:111722): avc: denied { open } for pid=5104 comm="syz.7.15261" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 392.416873][ T29] audit: type=1400 audit(1739224225.269:111723): avc: denied { read write } for pid=5106 comm="syz.7.15262" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 392.418455][ T5101] syz.9.15259: attempt to access beyond end of device [ 392.418455][ T5101] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 392.440593][ T29] audit: type=1400 audit(1739224225.269:111724): avc: denied { open } for pid=5106 comm="syz.7.15262" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 392.476009][ T5101] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 392.477482][ T29] audit: type=1400 audit(1739224225.269:111725): avc: denied { ioctl } for pid=5106 comm="syz.7.15262" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 392.485283][ T5101] FAT-fs (loop9): Filesystem has been set read-only [ 392.513699][ T5101] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 392.529699][ T5101] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 392.610556][ T29] audit: type=1400 audit(1739224225.459:111726): avc: denied { mounton } for pid=5112 comm="syz.8.15264" path="/proc/3832/task" dev="proc" ino=116169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 392.633751][ T29] audit: type=1400 audit(1739224225.459:111727): avc: denied { mount } for pid=5112 comm="syz.8.15264" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 392.719815][ T29] audit: type=1400 audit(1739224225.569:111728): avc: denied { tracepoint } for pid=5125 comm="syz.7.15269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 392.782574][ T29] audit: type=1326 audit(1739224225.619:111729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.9.15271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7226c1cda9 code=0x7ffc0000 [ 392.806335][ T29] audit: type=1326 audit(1739224225.619:111730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.9.15271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7226c1cda9 code=0x7ffc0000 [ 392.885575][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15272'. [ 392.894766][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15272'. [ 392.980160][ T5133] __nla_validate_parse: 4 callbacks suppressed [ 392.980180][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15272'. [ 392.995579][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15272'. [ 393.004679][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15272'. [ 393.189210][ T5156] loop7: detected capacity change from 0 to 256 [ 393.199414][ T5156] FAT-fs (loop7): bogus number of FAT sectors [ 393.205651][ T5156] FAT-fs (loop7): Can't find a valid FAT filesystem [ 393.211397][ T5153] bond1: entered promiscuous mode [ 393.217393][ T5153] bond1: entered allmulticast mode [ 393.222977][ T5153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.243154][ T5153] bond1 (unregistering): Released all slaves [ 393.325494][T14501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.377212][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15286'. [ 393.386335][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15286'. [ 393.395447][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15286'. [ 393.440274][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15286'. [ 393.449413][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15286'. [ 393.458503][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15286'. [ 393.503661][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15286'. [ 393.559093][ T5177] syzkaller1: entered promiscuous mode [ 393.564702][ T5177] syzkaller1: entered allmulticast mode [ 393.585023][ T5181] bridge0: entered allmulticast mode [ 393.599200][ T5181] erspan0: left allmulticast mode [ 393.604345][ T5181] erspan0: left promiscuous mode [ 393.609420][ T5181] bridge0: port 4(erspan0) entered disabled state [ 393.619317][ T5181] hsr0: left allmulticast mode [ 393.624231][ T5181] hsr_slave_0: left allmulticast mode [ 393.629658][ T5181] hsr_slave_1: left allmulticast mode [ 393.635115][ T5181] hsr0: left promiscuous mode [ 393.639979][ T5181] bridge0: port 3(hsr0) entered disabled state [ 393.650640][ T5181] bridge_slave_1: left allmulticast mode [ 393.656470][ T5181] bridge_slave_1: left promiscuous mode [ 393.662190][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.673480][ T5181] bridge_slave_0: left allmulticast mode [ 393.679164][ T5181] bridge_slave_0: left promiscuous mode [ 393.684849][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.827283][ T5198] netlink: 'syz.9.15300': attribute type 39 has an invalid length. [ 394.526200][ T5317] loop8: detected capacity change from 0 to 512 [ 394.593668][ T5317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.608189][ T5317] ext4 filesystem being mounted at /1847/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.679424][T18200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.796528][ T5365] loop7: detected capacity change from 0 to 1024 [ 394.804461][ T5365] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 394.814514][ T5365] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 394.828657][ T5365] EXT4-fs (loop7): journal inode is deleted [ 394.983272][ T5386] loop7: detected capacity change from 0 to 128 [ 395.015974][ T5386] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.028735][ T5386] ext4 filesystem being mounted at /1789/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 395.097801][T17495] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.187153][ T5412] syzkaller0: entered allmulticast mode [ 395.241887][T14501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.497477][ T5470] program syz.2.15356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.620791][ T5485] loop7: detected capacity change from 0 to 2048 [ 395.642399][ T5485] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.663000][ T5485] ext4 filesystem being mounted at /1794/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.736058][T17495] EXT4-fs error (device loop7): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /1794/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 395.776756][T17495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.044591][ T5547] bridge0: port 5(batadv1) entered blocking state [ 396.051371][ T5547] bridge0: port 5(batadv1) entered disabled state [ 396.064800][ T5547] batadv1: entered allmulticast mode [ 396.093296][ T5547] batadv1: entered promiscuous mode [ 396.522066][T14510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.537179][T11950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.541597][T11943] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 396.556958][T11943] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 397.037490][ T5726] loop7: detected capacity change from 0 to 512 [ 397.059065][ T5726] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.15407: corrupted in-inode xattr: invalid ea_ino [ 397.075878][ T5726] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.15407: couldn't read orphan inode 15 (err -117) [ 397.089853][ T5726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.115969][ T5735] syz.0.15408: attempt to access beyond end of device [ 397.115969][ T5735] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 397.187972][T17495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.260098][ T5750] loop2: detected capacity change from 0 to 2048 [ 397.275362][ T5750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.362265][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 397.362284][ T29] audit: type=1326 audit(1739224230.219:111869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.392321][ T29] audit: type=1326 audit(1739224230.219:111870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.416150][ T29] audit: type=1326 audit(1739224230.219:111871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.439914][ T29] audit: type=1326 audit(1739224230.219:111872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.463599][ T29] audit: type=1326 audit(1739224230.219:111873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.487422][ T29] audit: type=1326 audit(1739224230.219:111874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.511329][ T29] audit: type=1326 audit(1739224230.219:111875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.535067][ T29] audit: type=1326 audit(1739224230.219:111876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.558742][ T29] audit: type=1326 audit(1739224230.219:111877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.582472][ T29] audit: type=1326 audit(1739224230.219:111878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.15431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f31a107cda9 code=0x7ffc0000 [ 397.615077][ T5750] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 397.630103][ T5750] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 397.642637][ T5750] EXT4-fs (loop2): This should not happen!! Data will be lost [ 397.642637][ T5750] [ 397.652336][ T5750] EXT4-fs (loop2): Total free blocks count 0 [ 397.658334][ T5750] EXT4-fs (loop2): Free/Dirty block details [ 397.664334][ T5750] EXT4-fs (loop2): free_blocks=2415919104 [ 397.670091][ T5750] EXT4-fs (loop2): dirty_blocks=8192 [ 397.675515][ T5750] EXT4-fs (loop2): Block reservation details [ 397.681545][ T5750] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 397.693201][ T5768] ip6tnl1: entered promiscuous mode [ 397.722543][ T5761] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 397.834793][ T5786] loop9: detected capacity change from 0 to 128 [ 397.926438][ T5790] loop0: detected capacity change from 0 to 2048 [ 397.972979][ T5790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.068054][ T5803] __nla_validate_parse: 16 callbacks suppressed [ 398.068069][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15434'. [ 398.091116][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15434'. [ 398.107716][T15932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.184042][ T5824] loop2: detected capacity change from 0 to 1024 [ 398.193649][ T5824] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 398.208934][ T5824] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 398.209476][ T5828] loop0: detected capacity change from 0 to 1024 [ 398.219747][ T5824] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #32: comm syz.2.15448: iget: special inode unallocated [ 398.226618][ T5828] EXT4-fs: Ignoring removed nobh option [ 398.242637][ T5824] EXT4-fs (loop2): no journal found [ 398.244428][ T5828] EXT4-fs: Ignoring removed bh option [ 398.249454][ T5824] EXT4-fs (loop2): can't get journal size [ 398.262128][ T5829] team_slave_0: entered promiscuous mode [ 398.267070][ T5824] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz.2.15448: iget: special inode unallocated [ 398.267807][ T5829] team_slave_1: entered promiscuous mode [ 398.281139][ T5824] EXT4-fs (loop2): failed to initialize system zone (-117) [ 398.286592][ T5829] macsec1: entered promiscuous mode [ 398.293709][ T5824] EXT4-fs (loop2): mount failed [ 398.298865][ T5829] team0: entered promiscuous mode [ 398.309884][ T5829] team0: Device macsec1 is already an upper device of the team interface [ 398.321213][ T5829] team0: left promiscuous mode [ 398.326266][ T5829] team_slave_0: left promiscuous mode [ 398.331731][ T5829] team_slave_1: left promiscuous mode [ 398.332063][ T5828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.441077][T14510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.476643][T15932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.488423][ T5845] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 398.513733][ T5845] vhci_hcd: invalid port number 23 [ 399.110445][ T5898] IPv6: Can't replace route, no match found [ 399.137984][ T5902] loop2: detected capacity change from 0 to 512 [ 399.152577][ T5902] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 399.169884][ T5902] EXT4-fs (loop2): orphan cleanup on readonly fs [ 399.179112][ T5902] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 399.197489][ T5902] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 399.204849][ T5902] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 399.221543][ T5902] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 399.232111][ T5902] EXT4-fs (loop2): 1 truncate cleaned up [ 399.238216][ T5902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.301086][T16065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.490607][ T5938] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15499'. [ 399.499814][ T5938] netem: unknown loss type 13 [ 399.504705][ T5938] netem: change failed [ 399.588507][ T5956] loop2: detected capacity change from 0 to 2048 [ 399.616706][ T5956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.635530][ T5965] loop7: detected capacity change from 0 to 2048 [ 399.651533][ T5956] EXT4-fs (loop2): shut down requested (0) [ 399.678737][ T5965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.695716][T16065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.820756][ T5986] wg2: entered promiscuous mode [ 399.825756][ T5986] wg2: entered allmulticast mode [ 399.875093][ T5994] netlink: 'syz.0.15523': attribute type 3 has an invalid length. [ 399.893292][ T5990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.916373][ T5990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.932654][ T5990] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 399.946342][ T5990] bond1: (slave wireguard1): Error -95 calling set_mac_address [ 399.991083][ T5965] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 400.006157][ T5965] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 400.018764][ T5965] EXT4-fs (loop7): This should not happen!! Data will be lost [ 400.018764][ T5965] [ 400.028581][ T5965] EXT4-fs (loop7): Total free blocks count 0 [ 400.034697][ T5965] EXT4-fs (loop7): Free/Dirty block details [ 400.040618][ T5965] EXT4-fs (loop7): free_blocks=2415919104 [ 400.046416][ T5965] EXT4-fs (loop7): dirty_blocks=8192 [ 400.051831][ T5965] EXT4-fs (loop7): Block reservation details [ 400.057824][ T5965] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 400.079458][ T5982] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 400.384774][ T6043] netlink: 132 bytes leftover after parsing attributes in process `syz.7.15545'. [ 400.479917][ T6055] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 400.496826][ T6057] loop8: detected capacity change from 0 to 2048 [ 400.571211][ T6057] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.791345][ T6067] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 400.806387][ T6067] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 400.819223][ T6067] EXT4-fs (loop8): This should not happen!! Data will be lost [ 400.819223][ T6067] [ 400.829121][ T6067] EXT4-fs (loop8): Total free blocks count 0 [ 400.835173][ T6067] EXT4-fs (loop8): Free/Dirty block details [ 400.841263][ T6067] EXT4-fs (loop8): free_blocks=2415919104 [ 400.847098][ T6067] EXT4-fs (loop8): dirty_blocks=8192 [ 400.852492][ T6067] EXT4-fs (loop8): Block reservation details [ 400.858627][ T6067] EXT4-fs (loop8): i_reserved_data_blocks=512 [ 400.905740][ T6057] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 401.001537][T11929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.202602][ T6122] loop2: detected capacity change from 0 to 1024 [ 401.211514][ T6122] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 401.231518][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15584'. [ 401.241992][ T6122] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.15582: Invalid block bitmap block 0 in block_group 0 [ 401.256613][ T6122] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.15582: Failed to acquire dquot type 0 [ 401.270612][ T6122] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.15582: Freeing blocks not in datazone - block = 0, count = 4096 [ 401.284862][ T6122] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.15582: Invalid inode bitmap blk 0 in block_group 0 [ 401.300113][ T6122] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 401.304149][ T6129] loop9: detected capacity change from 0 to 2048 [ 401.316078][T14501] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:56: Failed to release dquot type 0 [ 401.316164][ T6122] EXT4-fs (loop2): 1 orphan inode deleted [ 401.334090][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.369633][T16065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.382537][ T6129] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.571673][ T6154] loop0: detected capacity change from 0 to 512 [ 401.578833][ T6153] SELinux: ebitmap: empty map [ 401.583684][ T6153] SELinux: failed to load policy [ 401.615811][ T6154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.641855][T14510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.660866][ T6154] ext4 filesystem being mounted at /2083/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.679579][ T6129] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 401.694975][ T6129] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 401.707538][ T6129] EXT4-fs (loop9): This should not happen!! Data will be lost [ 401.707538][ T6129] [ 401.717379][ T6129] EXT4-fs (loop9): Total free blocks count 0 [ 401.723408][ T6129] EXT4-fs (loop9): Free/Dirty block details [ 401.729360][ T6129] EXT4-fs (loop9): free_blocks=2415919104 [ 401.735173][ T6129] EXT4-fs (loop9): dirty_blocks=8192 [ 401.740477][ T6129] EXT4-fs (loop9): Block reservation details [ 401.746576][ T6129] EXT4-fs (loop9): i_reserved_data_blocks=512 [ 401.766000][ T6142] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 401.812653][T15932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.010262][ T6187] loop0: detected capacity change from 0 to 512 [ 402.039328][ T6187] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.15610: bg 0: block 248: padding at end of block bitmap is not set [ 402.056919][ T6193] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 402.057740][ T6187] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.15610: Failed to acquire dquot type 1 [ 402.072311][ T6186] loop2: detected capacity change from 0 to 2048 [ 402.087094][ T6187] EXT4-fs (loop0): 1 truncate cleaned up [ 402.096212][ T6187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.109742][ T6193] loop8: detected capacity change from 0 to 512 [ 402.111838][ T6187] ext4 filesystem being mounted at /2087/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.128906][ T6193] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 402.138106][ T6193] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 402.147401][ T6193] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 402.159468][ T6193] EXT4-fs error (device loop8): ext4_orphan_get:1389: comm syz.8.15606: inode #15: comm syz.8.15606: iget: illegal inode # [ 402.174724][T15932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.174843][ T6193] EXT4-fs (loop8): Remounting filesystem read-only [ 402.190834][ T6193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.203724][ T6193] SELinux: (dev loop8, type ext2) getxattr errno 5 [ 402.211242][ T6186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.215687][ T6193] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.281255][T14510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.309314][ T6204] loop0: detected capacity change from 0 to 2048 [ 402.357470][ T6204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.422948][ T6186] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 402.441389][ T6186] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 402.448429][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 402.448501][ T29] audit: type=1400 audit(1739224235.299:112148): avc: denied { shutdown } for pid=6214 comm="syz.7.15618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.453917][ T6186] EXT4-fs (loop2): This should not happen!! Data will be lost [ 402.453917][ T6186] [ 402.453934][ T6186] EXT4-fs (loop2): Total free blocks count 0 [ 402.453947][ T6186] EXT4-fs (loop2): Free/Dirty block details [ 402.501726][ T6186] EXT4-fs (loop2): free_blocks=2415919104 [ 402.507516][ T6186] EXT4-fs (loop2): dirty_blocks=8192 [ 402.512502][ T29] audit: type=1400 audit(1739224235.359:112149): avc: denied { name_bind } for pid=6216 comm="syz.8.15620" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 402.512909][ T6186] EXT4-fs (loop2): Block reservation details [ 402.540724][ T6186] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 402.576666][ T29] audit: type=1400 audit(1739224235.419:112150): avc: denied { write } for pid=6219 comm="syz.9.15619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.596522][ T29] audit: type=1400 audit(1739224235.429:112151): avc: denied { write } for pid=6223 comm="syz.7.15621" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 402.646681][ T6207] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 402.668886][T15932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.737650][ T29] audit: type=1400 audit(1739224235.589:112152): avc: denied { ioctl } for pid=6236 comm="syz.0.15624" path="socket:[118476]" dev="sockfs" ino=118476 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.737732][ T6237] syzkaller1: entered promiscuous mode [ 402.768478][ T6237] syzkaller1: entered allmulticast mode [ 402.784213][ T29] audit: type=1400 audit(1739224235.639:112153): avc: denied { read } for pid=6238 comm="syz.9.15628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 402.855369][ T6242] loop9: detected capacity change from 0 to 256 [ 402.862387][ T6242] FAT-fs (loop9): bogus number of FAT sectors [ 402.868558][ T6242] FAT-fs (loop9): Can't find a valid FAT filesystem [ 402.926229][T14501] batadv1: left allmulticast mode [ 402.931409][T14501] batadv1: left promiscuous mode [ 402.936570][T14501] bridge0: port 3(batadv1) entered disabled state [ 402.948628][T14501] bridge_slave_1: left allmulticast mode [ 402.954566][T14501] bridge_slave_1: left promiscuous mode [ 402.960290][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.971212][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15632'. [ 402.980390][T14501] bridge_slave_0: left allmulticast mode [ 402.986124][T14501] bridge_slave_0: left promiscuous mode [ 402.991896][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.020170][T14501] dvmrp0 (unregistering): left allmulticast mode [ 403.029449][ T29] audit: type=1400 audit(1739224235.879:112154): avc: denied { bind } for pid=6252 comm="syz.2.15634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.058077][T14501] bridge0 (unregistering): left allmulticast mode [ 403.082366][ T29] audit: type=1400 audit(1739224235.939:112155): avc: denied { ioctl } for pid=6256 comm="syz.9.15636" path="socket:[118509]" dev="sockfs" ino=118509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 403.113380][T14501] bond0 (unregistering): (slave team_slave_1): Releasing active interface [ 403.124259][T14501] bond0 (unregistering): Released all slaves [ 403.130293][ T29] audit: type=1400 audit(1739224235.979:112156): avc: denied { read write } for pid=16065 comm="syz-executor" name="loop2" dev="devtmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 403.153990][ T29] audit: type=1400 audit(1739224235.979:112157): avc: denied { open } for pid=16065 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 403.215982][T14501] tipc: Disabling bearer [ 403.221006][T14501] tipc: Left network mode [ 403.286738][T14501] hsr_slave_0: left promiscuous mode [ 403.297004][T14501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.308121][T14501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.326886][T14501] pim6reg (unregistering): left allmulticast mode [ 403.339069][T14501] pimreg (unregistering): left allmulticast mode [ 403.419143][T14501] team0 (unregistering): Port device team_slave_0 removed [ 403.489660][ T6284] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15648'. [ 403.500239][ T6285] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 403.723858][ T6313] loop7: detected capacity change from 0 to 1024 [ 403.755900][ T6313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.839098][ T6333] loop2: detected capacity change from 0 to 164 [ 403.852090][T14501] IPVS: stop unused estimator thread 0... [ 403.873334][T17495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.912391][ T6333] syz.2.15668: attempt to access beyond end of device [ 403.912391][ T6333] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 403.932654][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15672'. [ 403.952519][ T6333] syz.2.15668: attempt to access beyond end of device [ 403.952519][ T6333] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 403.979143][ T6341] veth0_macvtap: left promiscuous mode [ 404.016736][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15674'. [ 404.107884][ T6353] loop8: detected capacity change from 0 to 2048 [ 404.145880][ T6362] loop7: detected capacity change from 0 to 2048 [ 404.145881][ T6353] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.170071][T18200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.197994][ T6362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.210416][T12013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.230877][ T6371] loop8: detected capacity change from 0 to 128 [ 404.274362][ T6371] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.294646][ T6371] ext4 filesystem being mounted at /1890/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.328966][T18200] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.493375][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.503901][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.521466][ T6362] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 404.536305][ T6362] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 404.548995][ T6362] EXT4-fs (loop7): This should not happen!! Data will be lost [ 404.548995][ T6362] [ 404.558701][ T6362] EXT4-fs (loop7): Total free blocks count 0 [ 404.564764][ T6362] EXT4-fs (loop7): Free/Dirty block details [ 404.570772][ T6362] EXT4-fs (loop7): free_blocks=2415919104 [ 404.576488][ T6362] EXT4-fs (loop7): dirty_blocks=8192 [ 404.581816][ T6362] EXT4-fs (loop7): Block reservation details [ 404.587829][ T6362] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 404.609990][ T6375] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 404.972980][ T6398] loop7: detected capacity change from 0 to 1024 [ 404.992715][ T6398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.121933][ T6410] netem: change failed [ 405.130422][T17495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.176200][ T6414] loop0: detected capacity change from 0 to 2048 [ 405.195510][ T6414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.233394][ T6414] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 405.249516][ T6414] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 405.261877][ T6414] EXT4-fs (loop0): This should not happen!! Data will be lost [ 405.261877][ T6414] [ 405.271582][ T6414] EXT4-fs (loop0): Total free blocks count 0 [ 405.277650][ T6414] EXT4-fs (loop0): Free/Dirty block details [ 405.283754][ T6414] EXT4-fs (loop0): free_blocks=2415919504 [ 405.289568][ T6414] EXT4-fs (loop0): dirty_blocks=48 [ 405.294792][ T6414] EXT4-fs (loop0): Block reservation details [ 405.300942][ T6414] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 405.309062][ T6425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 405.419405][ T6436] loop2: detected capacity change from 0 to 128 [ 405.533393][ T6448] loop2: detected capacity change from 0 to 512 [ 405.565029][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15716'. [ 405.574238][ T6448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 405.597362][ T6448] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.15714: corrupted in-inode xattr: e_name out of bounds [ 405.612260][ T6448] EXT4-fs (loop2): Remounting filesystem read-only [ 405.619129][ T6448] EXT4-fs (loop2): 1 truncate cleaned up [ 405.629021][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.645943][ T6448] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 405.653449][ T6448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.834381][ T6480] loop8: detected capacity change from 0 to 1024 [ 405.855913][ T6480] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 405.865791][ T6480] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 405.879790][ T6480] EXT4-fs (loop8): journal inode is deleted [ 405.962368][ T6491] loop2: detected capacity change from 0 to 512 [ 405.969106][ T6491] EXT4-fs: Ignoring removed i_version option [ 405.975217][ T6491] EXT4-fs: Ignoring removed mblk_io_submit option [ 405.994462][ T6499] netlink: 'syz.7.15732': attribute type 2 has an invalid length. [ 405.999004][ T6497] xt_hashlimit: max too large, truncated to 1048576 [ 406.011443][ T6491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 406.021446][ T6497] No such timeout policy "syz1" [ 406.046443][ T6491] EXT4-fs (loop2): 1 truncate cleaned up [ 406.060580][ T6491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.134526][T16065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.234652][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 406.234836][ T6531] netlink: 64 bytes leftover after parsing attributes in process `syz.7.15743'. [ 406.258932][ T6534] netlink: 'syz.9.15745': attribute type 21 has an invalid length. [ 406.267220][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15745'. [ 406.306933][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.309812][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15746'. [ 406.314120][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.335354][ T6492] bridge_slave_0: entered allmulticast mode [ 406.342222][ T6492] bridge_slave_0: entered promiscuous mode [ 406.347119][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15746'. [ 406.351157][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.364301][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.371569][ T6492] bridge_slave_1: entered allmulticast mode [ 406.377999][ T6492] bridge_slave_1: entered promiscuous mode [ 406.404006][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.414707][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.446441][ T6545] loop7: detected capacity change from 0 to 512 [ 406.454119][ T6492] team0: Port device team_slave_0 added [ 406.460856][ T6492] team0: Port device team_slave_1 added [ 406.482353][ T6545] ext4 filesystem being mounted at /1886/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.517364][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.524406][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.550507][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.580352][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.587463][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.613440][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.624629][ T6553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6553 comm=syz.9.15752 [ 406.637370][ T6553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6553 comm=syz.9.15752 [ 406.673909][ T6492] hsr_slave_0: entered promiscuous mode [ 406.683272][T11929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.687713][ T6492] hsr_slave_1: entered promiscuous mode [ 406.707519][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.716087][ T6492] Cannot create hsr debugfs directory [ 406.753828][ T6566] loop9: detected capacity change from 0 to 1764 [ 406.760515][ T6566] iso9660: Unknown parameter 'hidemxide' [ 406.771892][T11950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.790371][ T6566] tmpfs: Bad value for 'mpol' [ 406.813146][ T6492] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.828466][ T6569] netlink: 'syz.7.15760': attribute type 1 has an invalid length. [ 406.836376][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15760'. [ 406.873250][ T6574] netlink: 36 bytes leftover after parsing attributes in process `syz.9.15762'. [ 406.892364][ T6492] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.944530][ T6492] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.992295][ T6580] loop7: detected capacity change from 0 to 8192 [ 407.002321][ T6492] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.021698][ T6580] loop7: p1 < > p3 < > p4 < > [ 407.026528][ T6580] loop7: partition table partially beyond EOD, truncated [ 407.036774][ T6580] loop7: p3 start 327168 is beyond EOD, truncated [ 407.147859][ T6492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.160031][ T6492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.183375][ T6492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.202752][ T6492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.245063][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.263440][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.281287][T11950] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.288484][T11950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.300239][T11950] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.307479][T11950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.369292][ T6623] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 407.369292][ T6623] program syz.7.15785 not setting count and/or reply_len properly [ 407.384384][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.458477][ T6627] loop9: detected capacity change from 0 to 8192 [ 407.466307][ T6627] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.482848][ T6492] veth0_vlan: entered promiscuous mode [ 407.491414][ T6492] veth1_vlan: entered promiscuous mode [ 407.508471][ T6492] veth0_macvtap: entered promiscuous mode [ 407.518366][ T6492] veth1_macvtap: entered promiscuous mode [ 407.529381][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.539904][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.549916][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.560577][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.570456][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.580917][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.590799][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.601269][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.611120][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.621560][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.631434][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.641888][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.651733][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.662235][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.673181][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.684324][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.694859][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.704693][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.715140][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.724991][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.728055][ T6637] loop9: detected capacity change from 0 to 512 [ 407.735430][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.735450][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.735468][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.735485][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.744547][ T6637] EXT4-fs: Ignoring removed oldalloc option [ 407.751600][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.751619][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.808592][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.818451][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.828884][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.838768][ T6637] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.15787: Parent and EA inode have the same ino 15 [ 407.840145][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.865219][ T6492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.865600][ T6637] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.15787: Parent and EA inode have the same ino 15 [ 407.874017][ T6492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.891569][ T6637] EXT4-fs (loop9): 1 orphan inode deleted [ 407.895181][ T6492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.909806][ T6492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.939912][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 407.939930][ T29] audit: type=1400 audit(1739224240.789:112431): avc: denied { mounton } for pid=6492 comm="syz-executor" path="/root/syzkaller.2kLKH3/syz-tmp" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 407.970799][ T29] audit: type=1400 audit(1739224240.789:112432): avc: denied { mount } for pid=6492 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 407.993724][ T29] audit: type=1400 audit(1739224240.799:112433): avc: denied { mount } for pid=6492 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 408.016160][ T29] audit: type=1400 audit(1739224240.799:112434): avc: denied { mounton } for pid=6492 comm="syz-executor" path="/root/syzkaller.2kLKH3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 408.043290][ T29] audit: type=1400 audit(1739224240.799:112435): avc: denied { mounton } for pid=6492 comm="syz-executor" path="/root/syzkaller.2kLKH3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=119629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 408.044648][T11929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.071141][ T29] audit: type=1400 audit(1739224240.829:112436): avc: denied { bind } for pid=6639 comm="syz.2.15788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.071166][ T29] audit: type=1400 audit(1739224240.829:112437): avc: denied { name_bind } for pid=6639 comm="syz.2.15788" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 408.123326][ T29] audit: type=1400 audit(1739224240.829:112438): avc: denied { node_bind } for pid=6639 comm="syz.2.15788" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 408.145351][ T29] audit: type=1400 audit(1739224240.829:112439): avc: denied { name_connect } for pid=6639 comm="syz.2.15788" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 408.168127][ T29] audit: type=1400 audit(1739224240.849:112440): avc: denied { mounton } for pid=6492 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 408.242325][ T6650] loop0: detected capacity change from 0 to 512 [ 408.257850][ T6654] SELinux: security policydb version 18 (MLS) not backwards compatible [ 408.266266][ T6654] SELinux: failed to load policy [ 408.267413][ T6650] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 408.294209][ T6650] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.15791: corrupted in-inode xattr: e_name out of bounds [ 408.310595][ T6650] EXT4-fs (loop0): Remounting filesystem read-only [ 408.319862][ T6650] EXT4-fs (loop0): 1 truncate cleaned up [ 408.326230][ T6650] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 408.367351][ T6664] loop9: detected capacity change from 0 to 512 [ 408.376779][ T6664] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 408.393808][ T6667] macsec1: entered allmulticast mode [ 408.399250][ T6667] macvlan0: entered allmulticast mode [ 408.404763][ T6667] veth1_vlan: entered allmulticast mode [ 408.413470][ T6667] macvlan0: left allmulticast mode [ 408.418727][ T6667] veth1_vlan: left allmulticast mode [ 408.447967][ T6664] ext4 filesystem being mounted at /1891/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.482430][ T6664] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.15798: corrupted xattr block 32: bad e_name length [ 408.502807][ T6664] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 408.512114][ T6664] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.15798: corrupted xattr block 32: bad e_name length [ 408.527989][ T6664] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 408.537111][ T6684] loop0: detected capacity change from 0 to 1024 [ 408.539108][ T6680] EXT4-fs error (device loop9): __ext4_new_inode:1277: comm syz.9.15798: failed to insert inode 16: doubly allocated? [ 408.573370][ T6684] EXT4-fs: Ignoring removed orlov option [ 408.579163][ T6684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.586598][ T6686] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 408.597540][ T6682] loop7: detected capacity change from 0 to 4096 [ 408.771882][ T6710] loop9: detected capacity change from 0 to 164 [ 408.778994][ T6710] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 408.802420][ T6710] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 408.937059][ T6722] loop0: detected capacity change from 0 to 2048 [ 408.946146][ T6731] netlink: 'syz.9.15826': attribute type 1 has an invalid length. [ 408.954127][ T6731] __nla_validate_parse: 3 callbacks suppressed [ 408.954143][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.9.15826'. [ 409.961540][T14501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.127854][ T6790] bond1: entered promiscuous mode [ 410.132982][ T6790] bond1: entered allmulticast mode [ 410.138419][ T6790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.153881][ T6790] bond1 (unregistering): Released all slaves [ 410.161355][ T6794] netlink: 'syz.0.15852': attribute type 10 has an invalid length. [ 410.169317][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15852'. [ 410.217308][ T6794] team0: Port device geneve1 added [ 410.310915][ T6815] bond_slave_1: entered promiscuous mode [ 410.318957][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15858'. [ 410.328686][ T6811] loop7: detected capacity change from 0 to 1764 [ 410.372952][ T6815] bond0: (slave bond_slave_1): Releasing backup interface [ 410.392318][ T6815] bond_slave_1 (unregistering): left promiscuous mode [ 410.550424][ T6849] loop9: detected capacity change from 0 to 512 [ 410.583461][ T6849] ext4 filesystem being mounted at /1905/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.813515][ T6892] loop7: detected capacity change from 0 to 1024 [ 410.820944][ T6892] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 410.872884][ T6892] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.15895: Invalid block bitmap block 0 in block_group 0 [ 410.906983][ T6892] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.15895: Failed to acquire dquot type 0 [ 410.939647][ T6892] EXT4-fs error (device loop7): ext4_free_blocks:6589: comm syz.7.15895: Freeing blocks not in datazone - block = 0, count = 4096 [ 410.976647][ T6892] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.15895: Invalid inode bitmap blk 0 in block_group 0 [ 411.000994][T11929] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:11: Failed to release dquot type 0 [ 411.039017][ T6892] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 411.047923][ T6892] EXT4-fs (loop7): 1 orphan inode deleted [ 411.129767][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15904'. [ 411.174102][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 411.181635][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.189042][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.196582][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.204015][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.211443][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.218843][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4 [ 411.226284][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.233736][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 411.242072][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.250088][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.257521][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.264950][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.272377][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4 [ 411.279821][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.287312][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.294766][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.302187][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.309708][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.317136][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.324597][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.332021][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.339421][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.346859][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.354460][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.361994][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.369396][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.376898][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.384457][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.391879][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.399322][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.406947][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.414381][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.421907][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.429385][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.436872][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.444297][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.451728][ T3377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 411.459765][ T3377] hid-generic 0000:0000:0000.0008: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 411.491209][ T6930] loop9: detected capacity change from 0 to 4096 [ 411.533421][ T6932] loop0: detected capacity change from 0 to 4096 [ 411.696672][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15917'. [ 411.750560][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15917'. [ 411.889025][ T6958] netlink: 'syz.2.15923': attribute type 6 has an invalid length. [ 411.948674][ T6964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15924'. [ 411.964527][ T6966] loop8: detected capacity change from 0 to 1024 [ 411.975508][ T6964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15924'. [ 412.003458][ T6971] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 412.013086][ T6964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15924'. [ 412.049086][ T6964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15924'. [ 412.195507][ T6987] loop2: detected capacity change from 0 to 512 [ 412.207348][T14501] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 412.242354][T14501] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1128 with error 28 [ 412.254887][T14501] EXT4-fs (loop8): This should not happen!! Data will be lost [ 412.254887][T14501] [ 412.264678][T14501] EXT4-fs (loop8): Total free blocks count 0 [ 412.270758][T14501] EXT4-fs (loop8): Free/Dirty block details [ 412.276701][T14501] EXT4-fs (loop8): free_blocks=68451041280 [ 412.282688][T14501] EXT4-fs (loop8): dirty_blocks=1136 [ 412.288058][T14501] EXT4-fs (loop8): Block reservation details [ 412.294133][T14501] EXT4-fs (loop8): i_reserved_data_blocks=71 [ 412.307979][ T6987] ext4 filesystem being mounted at /2100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.345442][ T6999] bond1: entered promiscuous mode [ 412.350525][ T6999] bond1: entered allmulticast mode [ 412.359852][ T6987] Process accounting resumed [ 412.365897][ T6999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.375060][ T6987] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 412.386781][ T6999] bond1 (unregistering): Released all slaves [ 412.572343][ T7006] loop8: detected capacity change from 0 to 4096 [ 412.755945][ T7026] veth0_macvtap: left promiscuous mode [ 412.772944][ T7028] loop9: detected capacity change from 0 to 512 [ 412.779714][ T7028] EXT4-fs: inline encryption not supported [ 412.789725][ T7028] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 412.801359][ T7028] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 412.811622][ T7028] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.15949: Corrupt directory, running e2fsck is recommended [ 412.827981][ T7028] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 412.836328][ T7028] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.15949: corrupted in-inode xattr: invalid ea_ino [ 412.851344][ T7028] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.15949: couldn't read orphan inode 15 (err -117) [ 412.874358][ T7028] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 412.885966][ T7028] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 412.896153][ T7028] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.15949: Corrupt directory, running e2fsck is recommended [ 412.914348][ T7028] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 412.926001][ T7028] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 412.936397][ T7028] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.15949: Corrupt directory, running e2fsck is recommended [ 412.968538][ T7041] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 412.980312][ T7041] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 412.983128][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 412.983147][ T29] audit: type=1400 audit(1739224245.829:112632): avc: denied { write } for pid=7040 comm="syz.0.15955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 412.990421][ T7041] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.15949: Corrupt directory, running e2fsck is recommended [ 413.022909][ T29] audit: type=1400 audit(1739224245.879:112633): avc: denied { bind } for pid=7045 comm="syz.7.15965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 413.049868][ T7028] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 413.054554][ T29] audit: type=1326 audit(1739224245.909:112634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7043 comm="syz.2.15956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28afccda9 code=0x7ffc0000 [ 413.125763][ T29] audit: type=1326 audit(1739224245.939:112635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7043 comm="syz.2.15956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fb28afccda9 code=0x7ffc0000 [ 413.149612][ T29] audit: type=1326 audit(1739224245.939:112636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7043 comm="syz.2.15956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28afccda9 code=0x7ffc0000 [ 413.149774][ T7028] EXT4-fs error (device loop9): ext4_readdir:261: inode #2: block 3: comm syz.9.15949: path /1920/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 413.200167][ T7049] loop2: detected capacity change from 0 to 8192 [ 413.208084][ T7056] syz_tun: entered allmulticast mode [ 413.213872][T12013] bridge_slave_1: left allmulticast mode [ 413.219622][T12013] bridge_slave_1: left promiscuous mode [ 413.225325][T12013] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.233468][ T7028] EXT4-fs error (device loop9): ext4_readdir:261: inode #2: block 8: comm syz.9.15949: path /1920/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 413.253964][T12013] bridge_slave_0: left allmulticast mode [ 413.259650][T12013] bridge_slave_0: left promiscuous mode [ 413.265698][T12013] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.574121][T12013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.594279][T12013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.615067][T12013] bond0 (unregistering): Released all slaves [ 413.664576][T12013] bond1 (unregistering): (slave team_slave_1): Releasing active interface [ 413.677646][T12013] team_slave_1: left promiscuous mode [ 413.685634][T12013] bond1 (unregistering): Released all slaves [ 413.699503][ T7055] syz_tun: left allmulticast mode [ 413.738404][ T7075] loop9: detected capacity change from 0 to 512 [ 413.773855][T12013] IPVS: stopping master sync thread 15102 ... [ 413.785925][ T29] audit: type=1400 audit(1739224246.639:112637): avc: denied { read } for pid=7078 comm="syz.8.15970" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 413.814539][T12013] hsr_slave_0: left promiscuous mode [ 413.838962][ T7075] ext4 filesystem being mounted at /1922/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.852147][ T29] audit: type=1400 audit(1739224246.709:112638): avc: denied { create } for pid=7074 comm="syz.9.15968" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 413.874314][ T7075] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.15968: corrupted inode contents [ 413.880866][T12013] hsr_slave_1: left promiscuous mode [ 413.894751][ T29] audit: type=1400 audit(1739224246.749:112639): avc: denied { ioctl } for pid=7084 comm="syz.0.15972" path="socket:[121373]" dev="sockfs" ino=121373 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 413.894776][T12013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.894840][T12013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.925110][ T7075] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.15968: mark_inode_dirty error [ 413.946318][ T7075] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.15968: corrupted inode contents [ 413.953414][T12013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.961388][ T7075] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.15968: mark_inode_dirty error [ 413.965856][T12013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.031159][T12013] veth1_macvtap: left promiscuous mode [ 414.036779][T12013] veth0_macvtap: left promiscuous mode [ 414.042712][T12013] veth1_vlan: left promiscuous mode [ 414.048025][T12013] veth0_vlan: left promiscuous mode [ 414.077747][ T7093] netlink: 'syz.7.15974': attribute type 1 has an invalid length. [ 414.085675][ T7093] __nla_validate_parse: 3 callbacks suppressed [ 414.085690][ T7093] netlink: 76 bytes leftover after parsing attributes in process `syz.7.15974'. [ 414.123140][ T29] audit: type=1400 audit(1739224246.969:112640): avc: denied { read } for pid=7094 comm="syz.9.15975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.153367][ T7096] netlink: 'syz.7.15974': attribute type 1 has an invalid length. [ 414.161291][ T7096] netlink: 76 bytes leftover after parsing attributes in process `syz.7.15974'. [ 414.214600][T12013] team0 (unregistering): Port device team_slave_0 removed [ 414.242342][ T29] audit: type=1400 audit(1739224247.099:112641): avc: denied { execute } for pid=7100 comm="syz.9.15978" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=121969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 414.283582][ T7085] pimreg: entered allmulticast mode [ 414.386855][ T7111] loop0: detected capacity change from 0 to 4096 [ 414.609020][T12013] IPVS: stop unused estimator thread 0... [ 414.647920][ T7142] netlink: 268 bytes leftover after parsing attributes in process `syz.8.15995'. [ 414.667898][ T7143] loop9: detected capacity change from 0 to 2048 [ 414.797412][ T7162] loop9: detected capacity change from 0 to 2048 [ 414.804446][ T7162] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.836686][ T7166] loop2: detected capacity change from 0 to 4096 [ 414.854425][ T7162] Process accounting resumed [ 414.863968][T11943] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 234: padding at end of block bitmap is not set [ 414.903332][T11943] EXT4-fs (loop9): Remounting filesystem read-only [ 415.072963][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16017'. [ 415.086525][ T7192] IPVS: Error joining to the multicast group [ 415.125548][ T7202] xt_hashlimit: max too large, truncated to 1048576 [ 415.133111][ T7200] loop0: detected capacity change from 0 to 512 [ 415.140292][ T7202] Cannot find set identified by id 0 to match [ 415.174286][ T7200] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.205241][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16027'. [ 415.265391][ T7200] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.16021: corrupted inode contents [ 415.286438][ T7200] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.16021: mark_inode_dirty error [ 415.300149][ T7200] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.16021: corrupted inode contents [ 415.314689][ T7200] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.16021: mark_inode_dirty error [ 415.329760][ T7200] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.16021: mark inode dirty (error -117) [ 415.344450][ T7200] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 415.479154][ T7247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.487482][ T7249] loop0: detected capacity change from 0 to 512 [ 415.521461][ T7249] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.577009][ T7266] bond_slave_1: entered promiscuous mode [ 415.602917][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16050'. [ 415.616768][ T7270] loop8: detected capacity change from 0 to 4096 [ 415.629224][ T7266] bond0: (slave bond_slave_1): Releasing backup interface [ 415.638776][ T7266] bond_slave_1 (unregistering): left promiscuous mode [ 415.773186][ T7283] syz_tun: entered allmulticast mode [ 415.816213][ T7282] syz_tun: left allmulticast mode [ 415.878654][ T7290] pim6reg: entered allmulticast mode [ 415.885878][ T7290] pim6reg: left allmulticast mode [ 415.955682][ T7297] loop9: detected capacity change from 0 to 1024 [ 415.963947][ T7297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 415.992500][ T7300] vlan1: entered allmulticast mode [ 415.997792][ T7300] macvlan0: entered allmulticast mode [ 416.003399][ T7300] veth1_vlan: entered allmulticast mode [ 416.011912][ T7300] macvlan0: left allmulticast mode [ 416.017167][ T7300] veth1_vlan: left allmulticast mode [ 416.030472][ T7302] Process accounting resumed [ 416.058554][ T7304] loop0: detected capacity change from 0 to 1024 [ 416.066993][ T7297] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 416.137724][ T7313] bond_slave_1: entered promiscuous mode [ 416.161247][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16069'. [ 416.192740][ T7313] bond0: (slave bond_slave_1): Releasing backup interface [ 416.213868][ T7313] bond_slave_1 (unregistering): left promiscuous mode [ 416.260299][T11943] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 416.299076][T11943] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1404 with error 28 [ 416.311658][T11943] EXT4-fs (loop0): This should not happen!! Data will be lost [ 416.311658][T11943] [ 416.321391][T11943] EXT4-fs (loop0): Total free blocks count 0 [ 416.327515][T11943] EXT4-fs (loop0): Free/Dirty block details [ 416.333578][T11943] EXT4-fs (loop0): free_blocks=68451041280 [ 416.339462][T11943] EXT4-fs (loop0): dirty_blocks=1408 [ 416.344966][T11943] EXT4-fs (loop0): Block reservation details [ 416.350984][T11943] EXT4-fs (loop0): i_reserved_data_blocks=88 [ 416.375041][ T7327] loop2: detected capacity change from 0 to 512 [ 416.407187][ T7329] loop7: detected capacity change from 0 to 512 [ 416.431966][ T7327] ext4 filesystem being mounted at /2133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.442240][ T7329] ext4 filesystem being mounted at /1953/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.590587][ T7354] bond_slave_1: entered promiscuous mode [ 416.597063][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16085'. [ 416.612600][ T7354] bond0: (slave bond_slave_1): Releasing backup interface [ 416.613098][ T7356] loop9: detected capacity change from 0 to 512 [ 416.628695][ T7354] bond_slave_1 (unregistering): left promiscuous mode [ 416.652824][ T7356] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 416.668019][ T7356] EXT4-fs (loop9): orphan cleanup on readonly fs [ 416.676204][ T7356] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 416.693417][ T7356] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 416.713236][ T7356] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 416.728015][ T7356] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 416.741508][ T7356] EXT4-fs (loop9): 1 truncate cleaned up [ 416.814943][ T7378] loop0: detected capacity change from 0 to 8192 [ 416.834275][ T7391] loop9: detected capacity change from 0 to 512 [ 416.841476][ T7391] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 416.851909][ T7378] loop0: p1 < > p3 < > p4 < > [ 416.856764][ T7378] loop0: partition table partially beyond EOD, truncated [ 416.864669][ T7378] loop0: p3 start 327168 is beyond EOD, truncated [ 416.879696][ T7391] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.16094: corrupted inode contents [ 416.892117][ T7391] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.16094: mark_inode_dirty error [ 416.903926][ T7391] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.16094: corrupted inode contents [ 416.928721][ T7401] netlink: 'syz.2.16095': attribute type 3 has an invalid length. [ 416.960133][ T7405] futex_wake_op: syz.9.16097 tries to shift op by -1; fix this program [ 417.010470][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16100'. [ 417.022298][ T7411] veth0_macvtap: left promiscuous mode [ 417.120928][ T7418] loop0: detected capacity change from 0 to 512 [ 417.128008][ T7418] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 417.142347][ T7418] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.174477][ T7418] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.16103: corrupted xattr block 32: bad e_name length [ 417.200888][ T7418] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 417.210238][ T7418] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.16103: corrupted xattr block 32: bad e_name length [ 417.224706][ T7418] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 417.236269][ T7430] EXT4-fs warning (device loop0): __ext4_unlink:3292: inode #16: comm syz.0.16103: Deleting file 'file3' with no links [ 417.324050][ T7440] smc: net device bond0 applied user defined pnetid SYZ0 [ 417.332073][ T7440] smc: net device bond0 erased user defined pnetid SYZ0 [ 417.444795][ T7452] loop0: detected capacity change from 0 to 2048 [ 417.451509][ T7452] ext4: Unknown parameter 'smackfsdef' [ 417.568138][ T7467] netlink: 'syz.2.16125': attribute type 280 has an invalid length. [ 417.693566][ T7478] bond0: (slave bond_slave_0): Releasing backup interface [ 417.702360][ T7478] veth0_to_team: left promiscuous mode [ 417.707858][ T7478] veth0_to_team: left allmulticast mode [ 417.715709][ T7478] team0: Port device team_slave_0 removed [ 417.725821][ T7478] team0: Port device team_slave_1 removed [ 417.733257][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.742315][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.751836][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.760650][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.790344][ T7478] batman_adv: batadv0: Removing interface: macsec0 [ 417.800347][ T7478] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.808814][ T7478] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.817413][ T7478] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.825876][ T7478] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.848634][ T7478] wireguard0: left promiscuous mode [ 417.853972][ T7478] wireguard0: left allmulticast mode [ 417.903492][ T7492] loop9: detected capacity change from 0 to 256 [ 417.943896][ T7496] loop8: detected capacity change from 0 to 1024 [ 418.025047][ T7509] loop8: detected capacity change from 0 to 1024 [ 418.032051][ T7509] EXT4-fs: Ignoring removed orlov option [ 418.037723][ T7509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.103002][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 418.103020][ T29] audit: type=1326 audit(1739224250.959:112907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569585cda9 code=0x7ffc0000 [ 418.133470][ T29] audit: type=1326 audit(1739224250.959:112908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569585cda9 code=0x7ffc0000 [ 418.157386][ T29] audit: type=1326 audit(1739224250.959:112909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f569585cda9 code=0x7ffc0000 [ 418.181163][ T29] audit: type=1326 audit(1739224250.959:112910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569585cda9 code=0x7ffc0000 [ 418.204940][ T29] audit: type=1326 audit(1739224250.959:112911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f569585cda9 code=0x7ffc0000 [ 418.228812][ T29] audit: type=1326 audit(1739224250.959:112912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569585cda9 code=0x7ffc0000 [ 418.252623][ T29] audit: type=1326 audit(1739224250.959:112913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569585cda9 code=0x7ffc0000 [ 418.276390][ T29] audit: type=1326 audit(1739224250.959:112914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f569585cda9 code=0x7ffc0000 [ 418.300449][ T29] audit: type=1326 audit(1739224250.959:112915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f569585cde3 code=0x7ffc0000 [ 418.324399][ T29] audit: type=1326 audit(1739224250.959:112916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.16147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f569585cde3 code=0x7ffc0000 [ 418.565108][ T7529] loop7: detected capacity change from 0 to 512 [ 418.644284][ T7529] EXT4-fs (loop7): 1 orphan inode deleted [ 418.653765][ T7529] ext4 filesystem being mounted at /1961/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.673135][T14501] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:56: Failed to release dquot type 1 [ 418.698610][ T7529] Process accounting resumed [ 418.713837][T11943] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:25: Failed to release dquot type 1 [ 418.728514][ T7529] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 418.812731][ T7538] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16154'. [ 418.970247][ T7564] syz.9.16163: attempt to access beyond end of device [ 418.970247][ T7564] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 419.342691][ T7619] loop9: detected capacity change from 0 to 164 [ 419.469941][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16198'. [ 419.631121][ T7659] can0: slcan on pts0. [ 419.670966][ T7658] can0 (unregistered): slcan off pts0. [ 419.839206][T14501] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.892276][T14501] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.932184][T14501] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.973597][T14501] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.047671][T14501] batadv1: left allmulticast mode [ 420.052795][T14501] batadv1: left promiscuous mode [ 420.058027][T14501] bridge0: port 5(batadv1) entered disabled state [ 420.065627][T14501] erspan0: left allmulticast mode [ 420.070759][T14501] erspan0: left promiscuous mode [ 420.075885][T14501] bridge0: port 4(erspan0) entered disabled state [ 420.083063][T14501] hsr0: left allmulticast mode [ 420.087858][T14501] hsr_slave_0: left allmulticast mode [ 420.093287][T14501] hsr_slave_1: left allmulticast mode [ 420.098782][T14501] hsr0: left promiscuous mode [ 420.103596][T14501] bridge0: port 3(hsr0) entered disabled state [ 420.110451][T14501] bridge_slave_1: left allmulticast mode [ 420.116158][T14501] bridge_slave_1: left promiscuous mode [ 420.122004][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.129652][T14501] bridge_slave_0: left allmulticast mode [ 420.135336][T14501] bridge_slave_0: left promiscuous mode [ 420.141107][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.224011][T14501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.233809][T14501] bond0 (unregistering): Released all slaves [ 420.286987][T14501] tipc: Disabling bearer [ 420.292166][T14501] tipc: Left network mode [ 420.298370][ T7684] chnl_net:caif_netlink_parms(): no params data found [ 420.333741][T14501] hsr_slave_0: left promiscuous mode [ 420.338845][ T7709] netlink: 165 bytes leftover after parsing attributes in process `syz.9.16226'. [ 420.348638][ T7709] netlink: 277 bytes leftover after parsing attributes in process `syz.9.16226'. [ 420.358078][T14501] hsr_slave_1: left promiscuous mode [ 420.373107][T14501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.380578][T14501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.388398][T14501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.396006][T14501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.396437][ T7713] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 420.414282][T14501] veth1_macvtap: left promiscuous mode [ 420.420163][T14501] veth1_vlan: left promiscuous mode [ 420.426011][T14501] veth0_vlan: left promiscuous mode [ 420.503969][T14501] team0 (unregistering): Port device team_slave_1 removed [ 420.514321][T14501] team0 (unregistering): Port device team_slave_0 removed [ 420.577329][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.584475][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.594387][ T7684] bridge_slave_0: entered allmulticast mode [ 420.601222][ T7684] bridge_slave_0: entered promiscuous mode [ 420.608205][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.615402][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.622708][ T7684] bridge_slave_1: entered allmulticast mode [ 420.629379][ T7684] bridge_slave_1: entered promiscuous mode [ 420.655793][ T7725] loop7: detected capacity change from 0 to 256 [ 420.662121][ T7684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.663619][ T7684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.714072][ T7684] team0: Port device team_slave_0 added [ 420.722080][ T7684] team0: Port device team_slave_1 added [ 420.739427][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.746516][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.772736][ T7684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.784962][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.790631][ T7730] loop8: detected capacity change from 0 to 164 [ 420.791997][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.792028][ T7684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.839236][ T7730] Unable to read rock-ridge attributes [ 420.849399][ T7684] hsr_slave_0: entered promiscuous mode [ 420.861478][ T7684] hsr_slave_1: entered promiscuous mode [ 420.960357][ T7740] Unable to read rock-ridge attributes [ 420.996359][ T7740] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 421.010221][T14501] IPVS: stop unused estimator thread 0... [ 421.011679][ T7748] hub 9-0:1.0: USB hub found [ 421.020884][ T7748] hub 9-0:1.0: 8 ports detected [ 421.097151][ T7755] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 421.287978][ T7764] netlink: 'syz.9.16248': attribute type 3 has an invalid length. [ 421.366891][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.388042][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.445805][ T7684] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.470093][ T7684] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.492742][ T7684] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.514489][ T7684] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.590582][ T7684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.625247][ T7684] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.647788][T11950] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.654945][T11950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.701389][T14510] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.708553][T14510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.788160][ T7788] loop9: detected capacity change from 0 to 1024 [ 421.795649][ T7788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.809871][ T7684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.825264][ T7788] EXT4-fs mount: 64 callbacks suppressed [ 421.825280][ T7788] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.872344][T18909] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.939085][ T7684] veth0_vlan: entered promiscuous mode [ 421.954976][ T7684] veth1_vlan: entered promiscuous mode [ 421.976878][ T7684] veth0_macvtap: entered promiscuous mode [ 421.991535][ T7684] veth1_macvtap: entered promiscuous mode [ 422.008014][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.018657][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.028565][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.039121][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.049038][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.059532][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.069473][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.079923][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.089870][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.100327][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.112110][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.131211][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.141742][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.151692][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.162151][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.172002][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.182454][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.192382][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.202830][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.205694][ T7821] loop9: detected capacity change from 0 to 1024 [ 422.212648][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.212668][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.220331][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.252069][ T7684] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.261088][ T7684] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.269958][ T7684] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.278858][ T7684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.306806][ T7821] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.375943][T18909] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.387696][ T7839] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16273'. [ 422.402623][ T7841] loop9: detected capacity change from 0 to 164 [ 422.409897][ T7841] Unable to read rock-ridge attributes [ 422.418556][ T7841] Unable to read rock-ridge attributes [ 422.428350][ T7844] netlink: 88 bytes leftover after parsing attributes in process `syz.8.16275'. [ 422.437817][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16275'. [ 422.617337][ T7863] loop7: detected capacity change from 0 to 512 [ 422.644783][ T7863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.657747][ T7863] ext4 filesystem being mounted at /1989/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.671393][ T7863] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.16284: corrupted inode contents [ 422.684503][ T7863] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.16284: mark_inode_dirty error [ 422.696221][ T7863] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.16284: corrupted inode contents [ 422.708601][ T7863] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.16284: mark_inode_dirty error [ 422.750572][T17495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.040018][ T7888] loop0: detected capacity change from 0 to 512 [ 423.081750][ T7888] EXT4-fs (loop0): 1 orphan inode deleted [ 423.088100][ T7888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.105744][ T7888] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.119951][T11950] __quota_error: 189 callbacks suppressed [ 423.119968][T11950] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.135720][T11950] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:32: Failed to release dquot type 1 [ 423.149572][ T7888] Process accounting resumed [ 423.155840][T11950] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.165808][T11950] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:32: Failed to release dquot type 1 [ 423.195419][ T7888] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 423.227988][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16300'. [ 423.238006][ T7903] IPVS: Error joining to the multicast group [ 423.246285][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.266997][ T29] audit: type=1400 audit(1739224256.119:113104): avc: denied { setopt } for pid=7905 comm="syz.7.16302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 423.310774][ T29] audit: type=1400 audit(1739224256.149:113105): avc: denied { getopt } for pid=7908 comm="syz.0.16301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 423.321167][ T7911] loop9: detected capacity change from 0 to 512 [ 423.351794][ T7911] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.16304: corrupted in-inode xattr: invalid ea_ino [ 423.383925][ T7906] loop8: detected capacity change from 0 to 8192 [ 423.393075][ T7911] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.16304: couldn't read orphan inode 15 (err -117) [ 423.410120][ T7911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.424077][ T7911] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.9.16304: path /2000/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 423.458544][T18909] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.538332][ T7927] bond1: entered promiscuous mode [ 423.543611][ T7927] bond1: entered allmulticast mode [ 423.549177][ T7927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.568168][ T7927] bond1 (unregistering): Released all slaves [ 423.599834][ T7932] loop9: detected capacity change from 0 to 512 [ 423.625301][ T7932] EXT4-fs (loop9): 1 orphan inode deleted [ 423.632304][ T7932] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.645032][T14510] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.654885][T14510] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:60: Failed to release dquot type 1 [ 423.655483][ T7932] ext4 filesystem being mounted at /2003/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.700928][ T7932] Process accounting resumed [ 423.707153][T11929] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.717222][T11929] EXT4-fs error (device loop9): ext4_release_dquot:6950: comm kworker/u8:11: Failed to release dquot type 1 [ 423.762237][ T7932] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 423.785323][T18909] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.812221][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.822846][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.848721][ T29] audit: type=1400 audit(1739224256.699:113106): avc: denied { checkpoint_restore } for pid=7940 comm="syz.2.16316" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 423.891747][ T7945] ipip0: entered promiscuous mode [ 423.937873][ T7949] dummy0: entered promiscuous mode [ 423.945881][ T7949] dummy0: left promiscuous mode [ 423.969422][ T7947] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16318'. [ 423.978537][ T7947] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16318'. [ 424.285304][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.295941][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.312472][ T7962] loop7: detected capacity change from 0 to 512 [ 424.328697][ T7962] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 424.340021][ T7964] loop2: detected capacity change from 0 to 512 [ 424.346972][ T7962] EXT4-fs (loop7): invalid journal inode [ 424.353089][ T7962] EXT4-fs (loop7): can't get journal size [ 424.363190][ T7962] EXT4-fs (loop7): 1 truncate cleaned up [ 424.369337][ T7962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.392182][ T7969] loop8: detected capacity change from 0 to 512 [ 424.399122][ T7969] EXT4-fs: Ignoring removed i_version option [ 424.403048][ T7964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.405743][ T7969] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 424.418751][T17495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.429635][ T7964] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.448016][ T7969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 424.462565][ T7969] System zones: 1-12 [ 424.466817][ T7969] EXT4-fs (loop8): orphan cleanup on readonly fs [ 424.479684][ T7969] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.16328: invalid indirect mapped block 12 (level 1) [ 424.493920][ T7974] loop7: detected capacity change from 0 to 2048 [ 424.500598][ T7969] EXT4-fs (loop8): Remounting filesystem read-only [ 424.507296][ T7969] EXT4-fs (loop8): 1 truncate cleaned up [ 424.512991][ T7964] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.16326: corrupted inode contents [ 424.513070][ T7964] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.16326: mark_inode_dirty error [ 424.525463][ T7969] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 424.540819][ T7964] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.16326: corrupted inode contents [ 424.548817][ T7969] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 424.562808][ T7964] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.16326: mark_inode_dirty error [ 424.567942][ T7974] loop7: p1 < > p4 [ 424.579645][ T7969] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 424.585506][ T7964] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.16326: mark inode dirty (error -117) [ 424.606467][ T7974] loop7: p4 size 8388608 extends beyond EOD, truncated [ 424.611970][ T7964] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 424.681363][ T29] audit: type=1400 audit(1739224257.529:113107): avc: denied { unmount } for pid=17495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 424.703457][ T7684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.726183][ T7979] loop7: detected capacity change from 0 to 512 [ 424.736566][ T7979] EXT4-fs (loop7): orphan cleanup on readonly fs [ 424.742973][ T7979] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 424.753692][ T7979] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 424.768830][ T7979] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.16331: attempt to clear invalid blocks 2 len 1 [ 424.783318][ T7979] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.16331: invalid indirect mapped block 1819239214 (level 0) [ 424.797758][ T7979] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.16331: invalid indirect mapped block 1819239214 (level 1) [ 424.804694][ T7986] loop8: detected capacity change from 0 to 512 [ 424.812324][ T7979] EXT4-fs (loop7): 1 truncate cleaned up [ 424.825020][ T7979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.844193][ T7979] ext4: Unknown parameter '00000000000000000000' [ 424.849688][ T7986] EXT4-fs (loop8): 1 orphan inode deleted [ 424.856746][ T7986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.871508][T14510] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 424.881389][T14510] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:60: Failed to release dquot type 1 [ 424.896463][ T7986] ext4 filesystem being mounted at /2025/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.899141][T17495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.916729][ T7986] Process accounting resumed [ 424.922484][T12013] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 424.932329][T12013] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:53: Failed to release dquot type 1 [ 424.944768][ T7986] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 424.969618][T18200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.002924][ T7999] __nla_validate_parse: 1 callbacks suppressed [ 425.003002][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16339'. [ 425.023265][ T8001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8001 comm=syz.8.16340 [ 425.041316][ T8003] ref_ctr_offset mismatch. inode: 0x28a6 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 425.052981][ T8001] netlink: 'syz.8.16340': attribute type 1 has an invalid length. [ 425.063529][ T8005] hub 5-0:1.0: USB hub found [ 425.067223][ T8001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.068324][ T8005] hub 5-0:1.0: 8 ports detected [ 425.099212][ T8001] bond2: (slave ip6gretap1): making interface the new active one [ 425.108278][ T8001] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 425.181639][ T8018] loop7: detected capacity change from 0 to 512 [ 425.203061][ T8018] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 425.214234][ T8018] EXT4-fs (loop7): orphan cleanup on readonly fs [ 425.221388][ T8018] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 425.244511][ T8018] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 425.262258][ T8018] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 425.281158][ T8032] syzkaller0: entered promiscuous mode [ 425.283371][ T8018] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 425.286660][ T8032] syzkaller0: entered allmulticast mode [ 425.297939][ T8018] EXT4-fs (loop7): 1 truncate cleaned up [ 425.307502][ T8018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.338413][T17495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.366650][ T8038] netlink: 'syz.9.16356': attribute type 1 has an invalid length. [ 425.525205][ T8053] ebtables: ebtables: counters copy to user failed while replacing table [ 425.564633][ T8065] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.572593][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.580287][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.587940][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.595583][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.603012][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 425.731603][ T8086] loop2: detected capacity change from 0 to 764 [ 425.787050][ T8096] netlink: 'syz.2.16383': attribute type 21 has an invalid length. [ 425.795039][ T8096] netlink: 'syz.2.16383': attribute type 20 has an invalid length. [ 425.803064][ T8096] IPv6: NLM_F_CREATE should be specified when creating new route [ 425.873527][ T8105] sd 0:0:1:0: device reset [ 425.958777][ T8119] loop7: detected capacity change from 0 to 1024 [ 425.969615][ T8119] EXT4-fs: test_dummy_encryption option not supported [ 426.134239][ T8150] netlink: 'syz.8.16402': attribute type 21 has an invalid length. [ 426.145463][ T8148] ref_ctr increment failed for inode: 0x2910 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881148df380 [ 426.232230][ T8147] uprobe: syz.7.16416:8147 failed to unregister, leaking uprobe [ 426.263676][ T8157] loop2: detected capacity change from 0 to 512 [ 426.284987][ T8157] EXT4-fs (loop2): 1 orphan inode deleted [ 426.291328][ T8157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.302598][T14510] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:60: Failed to release dquot type 1 [ 426.304537][ T8157] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.333259][ T8157] Process accounting resumed [ 426.338792][T11929] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:11: Failed to release dquot type 1 [ 426.351453][ T8157] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 426.373562][ T7684] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.418646][ T8169] loop7: detected capacity change from 0 to 512 [ 426.426942][ T8169] EXT4-fs (loop7): failed to initialize system zone (-117) [ 426.434520][ T8169] EXT4-fs (loop7): mount failed [ 426.507542][ T8173] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 426.515102][ T8173] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 427.082264][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16436'. [ 427.093709][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16436'. [ 427.194684][ T8231] loop2: detected capacity change from 0 to 164 [ 427.219430][ T8231] Unable to read rock-ridge attributes [ 427.247860][ T8231] Unable to read rock-ridge attributes [ 427.462102][ T8262] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.542621][ T8262] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.594348][ T8262] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.611466][ T8267] loop9: detected capacity change from 0 to 8192 [ 427.642705][ T8262] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.660277][ T8273] siw: device registration error -23 [ 427.701745][ T8262] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.724380][ T8262] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.741068][ T8262] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.755931][ T8276] Process accounting resumed [ 427.763794][ T8262] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.123367][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 428.123382][ T29] audit: type=1326 audit(1739224260.979:113255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.190904][ T29] audit: type=1326 audit(1739224261.019:113256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.214692][ T29] audit: type=1326 audit(1739224261.019:113257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.238362][ T29] audit: type=1326 audit(1739224261.019:113258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.262074][ T29] audit: type=1326 audit(1739224261.019:113259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.285898][ T29] audit: type=1326 audit(1739224261.019:113260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.309634][ T29] audit: type=1326 audit(1739224261.019:113261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.333345][ T29] audit: type=1326 audit(1739224261.019:113262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.357091][ T29] audit: type=1326 audit(1739224261.019:113263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.7.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da553cda9 code=0x7ffc0000 [ 428.539824][ T29] audit: type=1400 audit(1739224261.389:113264): avc: denied { sqpoll } for pid=8317 comm="syz.7.16479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 428.805939][ T8340] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.854455][ T8340] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.912688][ T8340] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.992399][ T8340] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.020996][ T8353] loop0: detected capacity change from 0 to 8192 [ 429.050843][ T8340] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.062664][ T8340] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.074856][ T8340] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.086794][ T8340] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.098475][ T8353] ================================================================== [ 429.106581][ T8353] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 429.113802][ T8353] [ 429.116212][ T8353] write to 0xffff8881066d5d14 of 4 bytes by task 8360 on cpu 1: [ 429.123842][ T8353] __xa_set_mark+0x182/0x1b0 [ 429.128454][ T8353] __folio_mark_dirty+0x3b5/0x4e0 [ 429.133488][ T8353] mark_buffer_dirty+0x134/0x230 [ 429.138435][ T8353] block_write_end+0x123/0x210 [ 429.143209][ T8353] generic_write_end+0x5c/0x160 [ 429.148070][ T8353] fat_write_end+0x4e/0x160 [ 429.152586][ T8353] generic_perform_write+0x33c/0x4a0 [ 429.157879][ T8353] __generic_file_write_iter+0xa1/0x120 [ 429.163430][ T8353] generic_file_write_iter+0x8f/0x310 [ 429.168806][ T8353] iter_file_splice_write+0x5f1/0x980 [ 429.174185][ T8353] direct_splice_actor+0x160/0x2c0 [ 429.179301][ T8353] splice_direct_to_actor+0x302/0x670 [ 429.184792][ T8353] do_splice_direct+0xd7/0x150 [ 429.189574][ T8353] do_sendfile+0x398/0x660 [ 429.194008][ T8353] __x64_sys_sendfile64+0x110/0x150 [ 429.199223][ T8353] x64_sys_call+0xfbd/0x2dc0 [ 429.203833][ T8353] do_syscall_64+0xc9/0x1c0 [ 429.208345][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.214251][ T8353] [ 429.216572][ T8353] read to 0xffff8881066d5d14 of 4 bytes by task 8353 on cpu 0: [ 429.224131][ T8353] xas_find_marked+0x608/0x650 [ 429.228906][ T8353] find_get_entry+0x54/0x390 [ 429.233510][ T8353] filemap_get_folios_tag+0x9e/0x210 [ 429.238813][ T8353] file_write_and_wait_range+0x204/0x2f0 [ 429.244467][ T8353] __generic_file_fsync+0x46/0x140 [ 429.249587][ T8353] fat_file_fsync+0x46/0x100 [ 429.254185][ T8353] vfs_fsync_range+0x116/0x130 [ 429.258963][ T8353] generic_file_write_iter+0x1c3/0x310 [ 429.264428][ T8353] iter_file_splice_write+0x5f1/0x980 [ 429.269802][ T8353] direct_splice_actor+0x160/0x2c0 [ 429.274922][ T8353] splice_direct_to_actor+0x302/0x670 [ 429.280302][ T8353] do_splice_direct+0xd7/0x150 [ 429.285155][ T8353] do_sendfile+0x398/0x660 [ 429.289584][ T8353] __x64_sys_sendfile64+0x110/0x150 [ 429.294800][ T8353] x64_sys_call+0xfbd/0x2dc0 [ 429.299407][ T8353] do_syscall_64+0xc9/0x1c0 [ 429.304004][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.309909][ T8353] [ 429.312231][ T8353] value changed: 0x04000021 -> 0x0e000021 [ 429.317959][ T8353] [ 429.320280][ T8353] Reported by Kernel Concurrency Sanitizer on: [ 429.326426][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.0.16494 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 429.337191][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 429.347268][ T8353] ==================================================================