last executing test programs: 1m0.245687348s ago: executing program 4 (id=190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) 1m0.14875173s ago: executing program 4 (id=192): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xc7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @mcast2, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$qrtr(0x2a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a0101000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x20044041}, 0x8040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) geteuid() sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$qrtr(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 59.987110233s ago: executing program 4 (id=194): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x54}}, 0x20000490) 59.763142197s ago: executing program 4 (id=197): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000004c0)='./file0\x00') 59.362328245s ago: executing program 4 (id=205): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x4, 0xe, 0x4, 0x7fff, 0xf, 0xe}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) 58.492850841s ago: executing program 4 (id=219): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x2, 0x0, 0x0, 0x42, 0x5c}) 58.492483511s ago: executing program 32 (id=219): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x2, 0x0, 0x0, 0x42, 0x5c}) 28.178952681s ago: executing program 2 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 28.167495141s ago: executing program 2 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = getgid() close(0xffffffffffffffff) lchown(&(0x7f0000000300)='./file0\x00', 0x0, r6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") io_setup(0x7f, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x40044) rt_sigqueueinfo(r0, 0x17, &(0x7f0000000340)={0x33, 0x1, 0xfffffff7}) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 26.317479336s ago: executing program 2 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 26.176883988s ago: executing program 2 (id=1028): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 26.132487819s ago: executing program 2 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x2b00, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 25.912771784s ago: executing program 2 (id=1031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) 25.901254804s ago: executing program 33 (id=1031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) 3.156339851s ago: executing program 1 (id=1349): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$RTC_WIE_OFF(r2, 0x7010) pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r1, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r4, r1, 0x1, &(0x7f0000000a80)=[r3, r0, r2, r3], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) io_pgetevents(0x0, 0x3, 0x0, &(0x7f00000002c0), &(0x7f00000004c0)={0x77359400}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0xaac8c000) 2.234766778s ago: executing program 1 (id=1357): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) tgkill(0x0, 0x0, 0x21) 2.092469131s ago: executing program 1 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = getgid() close(0xffffffffffffffff) lchown(&(0x7f0000000300)='./file0\x00', 0x0, r6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") io_setup(0x7f, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x40044) rt_sigqueueinfo(r0, 0x17, &(0x7f0000000340)={0x33, 0x1, 0xfffffff7}) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.465171523s ago: executing program 5 (id=1371): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0xffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r3, 0x20, &(0x7f00000003c0)={&(0x7f0000000ac0)=""/4096, 0x1000, 0x0, &(0x7f0000002000)=""/4096, 0x1000}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa88a800008100000008004500001c0066000000019078ac1414bbac14140012009078000067ce"], 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00022dbd7000fbdbdf45020000000d4c0b34b0dd01008bb88a73129018417731b4b1851c772c8e183edd856a97d9393a05f15fc585319e77f5d81f42f181fef2c94393c82ebaac51398778dabf9784b01fd0319c93d41f631015ba9fb21aabe76beb1339380daf5bcbfa764c69344ffe3e96c9de70fbd09a548c3ca2ead7e1655d053b096d46dc708affd0467f5a87aa5686be5b18207425fcac472f382c0e8894d8bd04bb582919c4f90c7a465972287accd7005161377025858647d7e6e5304f65aaa70a8d4285ca20100ff3ff3033af599a154bd7083d2da41b11172511c5c6695270e30d6d8e0b4017395dbded"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 1.436476043s ago: executing program 5 (id=1372): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINK={0x8, 0x5, r6}]}, 0x28}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) 1.236465427s ago: executing program 1 (id=1374): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) 1.235798197s ago: executing program 3 (id=1376): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.227736058s ago: executing program 3 (id=1377): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.144246119s ago: executing program 3 (id=1378): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x28}}, 0x4040040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) process_madvise(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000006c0)="000acc255cd3853294e8f3d008a9506d42096035f0f1c1a09f159e9398e5b2dc194206b9f2b6e5d4c7171846b9b3196621e9484b1daf900e87672e28b064bd231adbc6154d01b95e9a8dbb4318514c710d422a60", 0x54}, {&(0x7f00000007c0)="5ed0ad910af0a3fc56b60356e4237ff01c137987dd76efcc0e8448202ab46377d817becf09fa2f05fefbab0b775b72908181f9f842605327169a41e341841f8ec03a499d6aba8827deb44a04c4a83362af977ea72102a26f19bd5368e12227e46e38679378ffd10f33df0105af27c23a7d0124ca2f56e370a40beb46eb093d86934bc3201a58a05105ac5a013928f69ecf23dc888fd0ed76c84cb57be1d660736bd499e5f8", 0xa5}], 0x2, 0xe, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @random="0b65c01cd7d3"}, 0x10) socket$packet(0x11, 0xf9c7aa07db766d7f, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r11, 0x0, 0x1d}, 0x18) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 990.280122ms ago: executing program 3 (id=1379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e800110020010000000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff0300000200000002000a0064010100000000000000000000000000fe8000000000000000000000000000aa000000000a0000000000000000000000ac1e0101000000000000000000000000ff040000003500000200080064010101000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000f43b0000000000000008000200"], 0x138}}, 0x0) 989.468832ms ago: executing program 3 (id=1380): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x24060400) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x4d48, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10) close(r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x0, &(0x7f0000000200)=0x1, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='mm_page_alloc\x00', r11, 0x0, 0x10000000006}, 0x18) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 777.607706ms ago: executing program 3 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = getgid() close(0xffffffffffffffff) lchown(&(0x7f0000000300)='./file0\x00', 0x0, r6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") io_setup(0x7f, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x40044) rt_sigqueueinfo(r0, 0x17, &(0x7f0000000340)={0x33, 0x1, 0xfffffff7}) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 668.610458ms ago: executing program 0 (id=1387): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) removexattr(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) 639.181858ms ago: executing program 0 (id=1388): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 569.961899ms ago: executing program 5 (id=1389): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x28}}, 0x4040040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) process_madvise(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000006c0)="000acc255cd3853294e8f3d008a9506d42096035f0f1c1a09f159e9398e5b2dc194206b9f2b6e5d4c7171846b9b3196621e9484b1daf900e87672e28b064bd231adbc6154d01b95e9a8dbb4318514c710d422a60", 0x54}, {&(0x7f00000007c0)="5ed0ad910af0a3fc56b60356e4237ff01c137987dd76efcc0e8448202ab46377d817becf09fa2f05fefbab0b775b72908181f9f842605327169a41e341841f8ec03a499d6aba8827deb44a04c4a83362af977ea72102a26f19bd5368e12227e46e38679378ffd10f33df0105af27c23a7d0124ca2f56e370a40beb46eb093d86934bc3201a58a05105ac5a013928f69ecf23dc888fd0ed76c84cb57be1d660736bd499e5f89cb80f41ec15cdeeef38519adaad583fe43776754db1e1e2c745cdba", 0xc1}], 0x2, 0xe, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @random="0b65c01cd7d3"}, 0x10) socket$packet(0x11, 0xf9c7aa07db766d7f, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r11, 0x0, 0x1d}, 0x18) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 555.84279ms ago: executing program 0 (id=1390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 545.10167ms ago: executing program 6 (id=1391): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x42) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000006c0)={0x15, 0x110, 0xfa00, {r1, 0x7, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000002000000001393000000dd00"}, 0x8074, 0x0, 0x7fff}}}, 0x118) 477.470851ms ago: executing program 0 (id=1392): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 447.267662ms ago: executing program 0 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 446.649672ms ago: executing program 6 (id=1394): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x24060400) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x4d48, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10) close(r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x0, &(0x7f0000000200)=0x1, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='mm_page_alloc\x00', r11, 0x0, 0x10000000006}, 0x18) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 380.826463ms ago: executing program 0 (id=1395): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 379.552263ms ago: executing program 5 (id=1405): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1000040, &(0x7f0000000240)=ANY=[], 0x81, 0x1237, &(0x7f00000006c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 311.854354ms ago: executing program 1 (id=1396): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 242.723476ms ago: executing program 6 (id=1397): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 241.766686ms ago: executing program 1 (id=1408): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) 240.468306ms ago: executing program 5 (id=1398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0xffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r3, 0x20, &(0x7f00000003c0)={&(0x7f0000000ac0)=""/4096, 0x1000, 0x0, &(0x7f0000002000)=""/4096, 0x1000}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18) r8 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa88a800008100000008004500001c0066000000019078ac1414bbac14140012009078000067ce"], 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00022dbd7000fbdbdf45020000000d4c0b34b0dd01008bb88a73129018417731b4b1851c772c8e183edd856a97d9393a05f15fc585319e77f5d81f42f181fef2c94393c82ebaac51398778dabf9784b01fd0319c93d41f631015ba9fb21aabe76beb1339380daf5bcbfa764c69344ffe3e96c9de70fbd09a548c3ca2ead7e1655d053b096d46dc708affd0467f5a87aa5686be5b18207425fcac472f382c0e8894d8bd04bb582919c4f90c7a465972287accd7005161377025858647d7e6e5304f65aaa70a8d4285ca20100ff3ff3033af599a154bd7083d2da41b11172511c5c6695270e30d6d8e0b4017395dbded"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 51.358919ms ago: executing program 6 (id=1399): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) removexattr(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) 50.692599ms ago: executing program 5 (id=1400): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINK={0x8, 0x5, r6}]}, 0x28}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) 22.21407ms ago: executing program 6 (id=1401): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 0s ago: executing program 6 (id=1402): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$RTC_WIE_OFF(r3, 0x7010) pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r5, r2, 0x1, &(0x7f0000000a80)=[r4, r1, r3, r4], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) io_pgetevents(0x0, 0x3, 0x0, &(0x7f00000002c0), &(0x7f00000004c0)={0x77359400}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0xaac8c000) kernel console output (not intermixed with test programs): 00000000-0000-0000-0000-000000000000. [ 43.188465][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.308416][ T3994] tipc: Started in network mode [ 43.313398][ T3994] tipc: Node identity 00000000000000700a, cluster identity 4711 [ 43.339764][ T3998] loop4: detected capacity change from 0 to 512 [ 43.363405][ T3998] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.379564][ T3998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 43.535064][ T3998] System zones: 1-12 [ 43.540867][ T3998] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.557495][ T4002] futex_wake_op: syz.0.200 tries to shift op by -1; fix this program [ 43.574611][ T3998] EXT4-fs (loop4): 1 truncate cleaned up [ 43.580991][ T3998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.628195][ T4007] loop0: detected capacity change from 0 to 512 [ 43.651056][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.667318][ T3324] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.669334][ T4009] loop1: detected capacity change from 0 to 128 [ 43.689681][ T4007] EXT4-fs: Ignoring removed orlov option [ 43.726259][ T3324] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 43.760317][ T3324] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.789899][ T4007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.807751][ T4009] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.834970][ T4007] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.847280][ T4009] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.881397][ T3324] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 43.924040][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.955417][ T3324] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 43.955511][ T4009] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #2: comm syz.1.204: No space for directory leaf checksum. Please run e2fsck -D. [ 43.955543][ T4009] EXT4-fs error (device loop1): htree_dirblock_to_tree:1053: inode #2: comm syz.1.204: Directory block failed checksum [ 44.010666][ T3324] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 44.053892][ T3324] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 44.104707][ T4022] loop0: detected capacity change from 0 to 2048 [ 44.121795][ T3324] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 44.158153][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.186714][ T3324] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /46/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 44.215690][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.252688][ T3324] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 44.311315][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.438476][ T3972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.473339][ T4042] loop1: detected capacity change from 0 to 256 [ 44.484349][ T4044] loop0: detected capacity change from 0 to 512 [ 44.493711][ T4042] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 44.501658][ T4042] FAT-fs (loop1): Filesystem has been set read-only [ 44.523346][ T4044] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.569151][ T4044] EXT4-fs (loop0): 1 truncate cleaned up [ 44.575873][ T4044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.595648][ T4044] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.608599][ T4044] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 44.628471][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.665427][ T4055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 44.748758][ T4072] loop0: detected capacity change from 0 to 512 [ 44.771538][ T4072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.784097][ T4072] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.807372][ T4080] loop1: detected capacity change from 0 to 512 [ 44.819250][ T12] bridge_slave_1: left allmulticast mode [ 44.825000][ T12] bridge_slave_1: left promiscuous mode [ 44.830719][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.868749][ T4080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.882211][ T4080] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.899184][ T12] bridge_slave_0: left allmulticast mode [ 44.904920][ T12] bridge_slave_0: left promiscuous mode [ 44.910640][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.926778][ T4085] loop2: detected capacity change from 0 to 8192 [ 45.005924][ T4091] loop2: detected capacity change from 0 to 164 [ 45.023842][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.036777][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.048473][ T12] bond0 (unregistering): Released all slaves [ 45.150241][ T12] hsr_slave_0: left promiscuous mode [ 45.161806][ T12] hsr_slave_1: left promiscuous mode [ 45.167718][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.176408][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.221464][ T12] team0 (unregistering): Port device team_slave_1 removed [ 45.249102][ T12] team0 (unregistering): Port device team_slave_0 removed [ 45.330308][ T4120] loop2: detected capacity change from 0 to 512 [ 45.394912][ T4120] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.968502][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 46.169278][ T4143] loop1: detected capacity change from 0 to 512 [ 46.215836][ T4143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.283867][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.290980][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.321568][ T4143] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.333117][ T4049] bridge_slave_0: entered allmulticast mode [ 46.340397][ T4049] bridge_slave_0: entered promiscuous mode [ 46.346962][ T4143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'. [ 46.358336][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.365510][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.374121][ T4049] bridge_slave_1: entered allmulticast mode [ 46.380588][ T4049] bridge_slave_1: entered promiscuous mode [ 46.400738][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.433309][ T4163] loop3: detected capacity change from 0 to 512 [ 46.458797][ T4163] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.482999][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.507814][ T4165] loop0: detected capacity change from 0 to 128 [ 46.529003][ T4165] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.549635][ T4163] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.575372][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 46.575388][ T29] audit: type=1400 audit(1747172971.668:241): avc: denied { create } for pid=4164 comm="syz.0.252" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.603458][ T4049] team0: Port device team_slave_0 added [ 46.609947][ T4049] team0: Port device team_slave_1 added [ 46.623619][ T4163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.250'. [ 46.657423][ T29] audit: type=1400 audit(1747172971.708:242): avc: denied { write open } for pid=4164 comm="syz.0.252" path="/50/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.680689][ T29] audit: type=1400 audit(1747172971.708:243): avc: denied { ioctl } for pid=4164 comm="syz.0.252" path="/50/file1/file0" dev="loop0" ino=12 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.710738][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.717821][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.743831][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.757480][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.764524][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.791089][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.819855][ T4049] hsr_slave_0: entered promiscuous mode [ 46.827139][ T4049] hsr_slave_1: entered promiscuous mode [ 46.833266][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.840879][ T4049] Cannot create hsr debugfs directory [ 46.921248][ T4049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.930964][ T4049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.940470][ T4049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.950762][ T4049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.989779][ T29] audit: type=1400 audit(1747172972.078:244): avc: denied { write } for pid=4173 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.047735][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.068787][ T4181] loop0: detected capacity change from 0 to 512 [ 47.099454][ T4181] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.124147][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.156411][ T29] audit: type=1400 audit(1747172972.228:245): avc: denied { getopt } for pid=4184 comm="syz.2.257" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.169859][ T4049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.187280][ T4049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.241489][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.246235][ T29] audit: type=1400 audit(1747172972.338:246): avc: denied { write } for pid=4198 comm="syz.2.260" name="tcp6" dev="proc" ino=4026532638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.248717][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.285803][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.292920][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.400099][ T4221] xt_TPROXY: Can be used only with -p tcp or -p udp [ 47.404957][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.414256][ T29] audit: type=1400 audit(1747172972.488:247): avc: denied { mount } for pid=4216 comm="syz.2.263" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 47.415619][ T4217] devtmpfs: Bad value for 'nr_inodes' [ 47.458316][ T29] audit: type=1400 audit(1747172972.508:248): avc: denied { remount } for pid=4216 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 47.522618][ T29] audit: type=1400 audit(1747172972.548:249): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 47.542640][ T29] audit: type=1400 audit(1747172972.608:250): avc: denied { create } for pid=4232 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.576757][ T4237] loop1: detected capacity change from 0 to 512 [ 47.584291][ T4237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.629197][ T4237] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.642892][ T4237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 47.653482][ T4237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 47.783025][ T4049] veth0_vlan: entered promiscuous mode [ 47.803147][ T4049] veth1_vlan: entered promiscuous mode [ 47.827088][ T4049] veth0_macvtap: entered promiscuous mode [ 47.844189][ T4049] veth1_macvtap: entered promiscuous mode [ 47.866316][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.902386][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.927575][ T4049] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.936479][ T4049] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.945282][ T4049] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.954391][ T4049] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.088366][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 48.125014][ T4301] wireguard0: entered promiscuous mode [ 48.180477][ T4310] loop0: detected capacity change from 0 to 512 [ 48.209569][ T4310] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.314574][ T4331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 48.355903][ T4334] loop1: detected capacity change from 0 to 1024 [ 48.371305][ T4336] loop2: detected capacity change from 0 to 512 [ 48.373445][ T4334] EXT4-fs: Ignoring removed orlov option [ 48.398215][ T4336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.416204][ T4343] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 48.473886][ T4336] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.493878][ T4336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.287'. [ 48.642840][ T4359] xt_hashlimit: max too large, truncated to 1048576 [ 48.658012][ T4359] Cannot find set identified by id 0 to match [ 48.675352][ T4360] loop3: detected capacity change from 0 to 512 [ 48.685998][ T4360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.732981][ T4360] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.780829][ T4360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.293'. [ 48.836264][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 49.119478][ T4398] syz.2.301 uses obsolete (PF_INET,SOCK_PACKET) [ 49.167423][ T4403] loop0: detected capacity change from 0 to 512 [ 49.188612][ T4403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.276122][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 49.282290][ T4403] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.308636][ T4419] capability: warning: `syz.2.305' uses deprecated v2 capabilities in a way that may be insecure [ 49.353181][ T4403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.302'. [ 49.353817][ T4424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.304'. [ 49.388342][ T4426] loop5: detected capacity change from 0 to 512 [ 49.396425][ T4426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.465286][ T4426] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.602364][ T4454] syzkaller0: entered allmulticast mode [ 49.608128][ T4454] syzkaller0: entered promiscuous mode [ 49.615464][ T4454] syzkaller0 (unregistering): left promiscuous mode [ 49.622435][ T4454] syzkaller0 (unregistering): left allmulticast mode [ 49.678965][ T4463] loop5: detected capacity change from 0 to 512 [ 49.695385][ T4463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.719598][ T4468] xt_hashlimit: max too large, truncated to 1048576 [ 49.742835][ T4468] Cannot find set identified by id 0 to match [ 49.746566][ T4463] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.816361][ T4477] loop2: detected capacity change from 0 to 512 [ 49.838294][ T4477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.885043][ T4477] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.953151][ T4477] netlink: 'syz.2.327': attribute type 13 has an invalid length. [ 50.010693][ T4496] Illegal XDP return value 4294967262 on prog (id 149) dev N/A, expect packet loss! [ 50.076370][ T4500] loop3: detected capacity change from 0 to 512 [ 50.099859][ T4503] netlink: 'syz.2.338': attribute type 3 has an invalid length. [ 50.110603][ T4500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.142087][ T4500] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.179755][ T4512] loop2: detected capacity change from 0 to 512 [ 50.233913][ T4514] loop3: detected capacity change from 0 to 512 [ 50.240550][ T4512] EXT4-fs: Ignoring removed i_version option [ 50.265346][ T4514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.309777][ T4519] loop5: detected capacity change from 0 to 512 [ 50.316815][ T4514] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.348581][ T4519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.363445][ T4514] netlink: 'syz.3.342': attribute type 13 has an invalid length. [ 50.389514][ T4525] netlink: 'syz.2.346': attribute type 3 has an invalid length. [ 50.415565][ T4519] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.452911][ T4519] netlink: 'syz.5.344': attribute type 13 has an invalid length. [ 50.605539][ T4550] loop3: detected capacity change from 0 to 1024 [ 50.634446][ T4550] EXT4-fs: Ignoring removed orlov option [ 50.856823][ T4576] xt_hashlimit: max too large, truncated to 1048576 [ 50.910155][ T4576] Cannot find set identified by id 0 to match [ 50.987685][ T4591] loop2: detected capacity change from 0 to 512 [ 50.996618][ T4591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.040367][ T4591] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.078820][ T4591] netlink: 'syz.2.374': attribute type 13 has an invalid length. [ 51.086681][ T4591] netlink: 'syz.2.374': attribute type 27 has an invalid length. [ 51.593154][ T4621] loop5: detected capacity change from 0 to 512 [ 51.600325][ T4621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.647583][ T4621] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.671042][ T4621] netlink: 'syz.5.387': attribute type 13 has an invalid length. [ 51.678962][ T4621] netlink: 'syz.5.387': attribute type 27 has an invalid length. [ 51.714537][ T4638] loop1: detected capacity change from 0 to 512 [ 51.723551][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 51.723567][ T29] audit: type=1400 audit(1747172976.818:306): avc: denied { create } for pid=4633 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.752245][ T4638] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.780452][ T29] audit: type=1400 audit(1747172976.838:307): avc: denied { ioctl } for pid=4633 comm="syz.3.392" path="socket:[7909]" dev="sockfs" ino=7909 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.810863][ T4638] ext4 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.843995][ T4641] loop2: detected capacity change from 0 to 1024 [ 51.867150][ T4641] EXT4-fs: Ignoring removed orlov option [ 51.936515][ T4653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4653 comm=syz.1.399 [ 51.949071][ T4653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4653 comm=syz.1.399 [ 52.032766][ T4659] loop0: detected capacity change from 0 to 1024 [ 52.039963][ T4659] EXT4-fs: Ignoring removed orlov option [ 52.046645][ T4656] xt_hashlimit: max too large, truncated to 1048576 [ 52.072300][ T4656] Cannot find set identified by id 0 to match [ 52.137019][ T4662] loop1: detected capacity change from 0 to 512 [ 52.241630][ T4662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.406027][ T4662] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.564134][ T4662] netlink: 'syz.1.402': attribute type 13 has an invalid length. [ 52.626449][ T4667] loop1: detected capacity change from 0 to 512 [ 52.682384][ T4667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.721119][ T4667] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.743704][ T4641] syz.2.395 (4641) used greatest stack depth: 9776 bytes left [ 52.762989][ T4667] __nla_validate_parse: 19 callbacks suppressed [ 52.763007][ T4667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'. [ 52.789349][ T29] audit: type=1400 audit(1747172977.878:308): avc: denied { tracepoint } for pid=4670 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.933446][ T29] audit: type=1326 audit(1747172978.018:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 52.956839][ T29] audit: type=1326 audit(1747172978.018:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 52.980862][ T29] audit: type=1326 audit(1747172978.018:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 53.004746][ T29] audit: type=1326 audit(1747172978.018:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 53.028203][ T29] audit: type=1326 audit(1747172978.018:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 53.052404][ T29] audit: type=1326 audit(1747172978.058:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 53.075887][ T29] audit: type=1326 audit(1747172978.058:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 53.264632][ T4705] loop5: detected capacity change from 0 to 1024 [ 53.275418][ T4705] EXT4-fs: Ignoring removed orlov option [ 53.298171][ T4714] loop1: detected capacity change from 0 to 256 [ 53.466206][ T4725] loop2: detected capacity change from 0 to 512 [ 53.651484][ T4731] xt_hashlimit: max too large, truncated to 1048576 [ 53.721040][ T4731] Cannot find set identified by id 0 to match [ 53.894639][ T4725] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.048940][ T4745] loop1: detected capacity change from 0 to 512 [ 54.092552][ T4744] loop3: detected capacity change from 0 to 512 [ 54.125716][ T4745] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.306419][ T4745] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz.1.429: directory missing '.' [ 54.346724][ T4744] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.410782][ T4755] loop5: detected capacity change from 0 to 256 [ 54.460683][ T4757] syzkaller0: entered allmulticast mode [ 54.518259][ T4760] syzkaller0: entered promiscuous mode [ 54.532941][ T4757] syzkaller0 (unregistering): left promiscuous mode [ 54.539780][ T4757] syzkaller0 (unregistering): left allmulticast mode [ 54.613897][ T4764] loop1: detected capacity change from 0 to 128 [ 54.920534][ T4772] loop0: detected capacity change from 0 to 256 [ 55.109633][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.109633][ T12] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 55.164447][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.164447][ T12] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 55.206791][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.206791][ T12] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 55.220219][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.220219][ T12] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 55.237856][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.237856][ T12] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 55.252407][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.252407][ T12] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 55.265948][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.265948][ T12] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 55.287128][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.287128][ T12] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 55.302262][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.302262][ T12] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 55.313455][ T4781] loop0: detected capacity change from 0 to 1024 [ 55.339438][ T4785] loop5: detected capacity change from 0 to 512 [ 55.341473][ T12] kworker/u8:0: attempt to access beyond end of device [ 55.341473][ T12] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 55.351692][ T4781] EXT4-fs: Ignoring removed orlov option [ 55.373062][ T4785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.477345][ T4785] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.515936][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.449'. [ 55.569017][ T4799] validate_nla: 3 callbacks suppressed [ 55.569032][ T4799] netlink: 'syz.5.449': attribute type 13 has an invalid length. [ 55.582520][ T4799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.449'. [ 55.626740][ T4801] xt_hashlimit: max too large, truncated to 1048576 [ 55.642379][ T4801] Cannot find set identified by id 0 to match [ 55.658019][ T4803] loop1: detected capacity change from 0 to 512 [ 55.724279][ T4803] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.931925][ T4810] loop5: detected capacity change from 0 to 512 [ 55.945826][ T4810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.954903][ T4810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.071583][ T4810] EXT4-fs (loop5): 1 truncate cleaned up [ 56.198365][ T4822] loop5: detected capacity change from 0 to 512 [ 56.237016][ T4822] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.264704][ T4822] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.302758][ T4822] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.458: bg 0: block 304: padding at end of block bitmap is not set [ 56.368308][ T4822] EXT4-fs (loop5): Remounting filesystem read-only [ 56.602886][ T4849] loop1: detected capacity change from 0 to 512 [ 56.652151][ T4852] xt_hashlimit: max too large, truncated to 1048576 [ 56.653104][ T4849] EXT4-fs: Ignoring removed nobh option [ 56.711866][ T4852] Cannot find set identified by id 0 to match [ 56.740870][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 56.740933][ T29] audit: type=1326 audit(1747172981.828:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8df77e969 code=0x7ffc0000 [ 56.770627][ T29] audit: type=1326 audit(1747172981.828:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8df77e969 code=0x7ffc0000 [ 56.842229][ T4849] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.480: invalid indirect mapped block 256 (level 2) [ 56.865720][ T4866] loop5: detected capacity change from 0 to 1024 [ 56.878211][ T4866] EXT4-fs: Ignoring removed orlov option [ 56.912731][ T4862] loop2: detected capacity change from 0 to 1024 [ 56.950497][ T4849] EXT4-fs (loop1): 2 truncates cleaned up [ 56.961587][ T4862] EXT4-fs: Ignoring removed orlov option [ 56.968937][ T29] audit: type=1326 audit(1747172981.888:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7ff8df77e969 code=0x7ffc0000 [ 56.992380][ T29] audit: type=1326 audit(1747172981.888:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8df77e969 code=0x7ffc0000 [ 57.011452][ T4849] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.480: bg 0: block 5: invalid block bitmap [ 57.015983][ T29] audit: type=1326 audit(1747172981.888:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8df77e969 code=0x7ffc0000 [ 57.052108][ T29] audit: type=1400 audit(1747172982.088:350): avc: denied { write } for pid=4848 comm="syz.1.480" name="control" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.073916][ T29] audit: type=1400 audit(1747172982.088:351): avc: denied { add_name } for pid=4848 comm="syz.1.480" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.238816][ T29] audit: type=1326 audit(1747172982.328:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 57.262624][ T29] audit: type=1326 audit(1747172982.328:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 57.285933][ T29] audit: type=1326 audit(1747172982.328:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.1.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 57.520173][ T4877] loop0: detected capacity change from 0 to 512 [ 57.555123][ T4877] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.685822][ T4884] loop0: detected capacity change from 0 to 256 [ 57.897088][ T4905] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 57.910119][ T4905] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 57.934164][ T4908] loop2: detected capacity change from 0 to 512 [ 57.940801][ T4908] EXT4-fs: Ignoring removed orlov option [ 58.010247][ T4912] loop1: detected capacity change from 0 to 1024 [ 58.018784][ T4908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.032083][ T4912] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.043303][ T4912] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.068868][ T4912] JBD2: no valid journal superblock found [ 58.074709][ T4912] EXT4-fs (loop1): Could not load journal inode [ 58.089147][ T4912] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 58.112695][ T4908] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.205721][ T4908] EXT4-fs warning (device loop2): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 58.589267][ T4952] loop5: detected capacity change from 0 to 512 [ 58.636323][ T4950] loop2: detected capacity change from 0 to 256 [ 58.713214][ T4952] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.767882][ T4957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.513'. [ 58.803343][ T4950] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.593877][ T5002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.673804][ T5009] loop2: detected capacity change from 0 to 512 [ 59.723578][ T5009] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.756600][ T5016] xt_hashlimit: max too large, truncated to 1048576 [ 59.838302][ T5016] Cannot find set identified by id 0 to match [ 59.886662][ T5027] syzkaller0: entered allmulticast mode [ 59.895319][ T5025] loop1: detected capacity change from 0 to 1024 [ 59.905782][ T5027] syzkaller0: entered promiscuous mode [ 59.915792][ T5025] EXT4-fs: Ignoring removed orlov option [ 59.927463][ T5027] syzkaller0 (unregistering): left promiscuous mode [ 59.934173][ T5027] syzkaller0 (unregistering): left allmulticast mode [ 60.389855][ T5051] syzkaller0: entered allmulticast mode [ 60.400180][ T5051] syzkaller0: entered promiscuous mode [ 60.406220][ T5055] loop1: detected capacity change from 0 to 1024 [ 60.413276][ T5055] EXT4-fs: Ignoring removed orlov option [ 60.420002][ T5051] syzkaller0 (unregistering): left promiscuous mode [ 60.426889][ T5051] syzkaller0 (unregistering): left allmulticast mode [ 60.440928][ T5060] netlink: 256 bytes leftover after parsing attributes in process `syz.0.553'. [ 60.526798][ T5073] loop5: detected capacity change from 0 to 1024 [ 60.533922][ T5073] EXT4-fs: Ignoring removed orlov option [ 60.744220][ T5090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.565'. [ 60.748078][ T5091] xt_hashlimit: max too large, truncated to 1048576 [ 60.785739][ T5091] Cannot find set identified by id 0 to match [ 60.995925][ T5100] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 61.004337][ T5100] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 61.125703][ T5104] syzkaller0: entered allmulticast mode [ 61.147324][ T5104] syzkaller0: entered promiscuous mode [ 61.170956][ T5104] syzkaller0 (unregistering): left promiscuous mode [ 61.177997][ T5104] syzkaller0 (unregistering): left allmulticast mode [ 61.360142][ T5114] loop1: detected capacity change from 0 to 128 [ 61.373726][ T5113] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.381874][ T5113] FAT-fs (loop1): Filesystem has been set read-only [ 61.389440][ T5113] bio_check_eod: 103 callbacks suppressed [ 61.389453][ T5113] syz.1.576: attempt to access beyond end of device [ 61.389453][ T5113] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 61.410487][ T5113] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.418535][ T5113] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 61.432831][ T5114] syz.1.576: attempt to access beyond end of device [ 61.432831][ T5114] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 61.446800][ T5114] syz.1.576: attempt to access beyond end of device [ 61.446800][ T5114] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 61.461484][ T5114] syz.1.576: attempt to access beyond end of device [ 61.461484][ T5114] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 61.475743][ T5114] syz.1.576: attempt to access beyond end of device [ 61.475743][ T5114] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 61.545053][ T5128] loop3: detected capacity change from 0 to 1024 [ 61.572220][ T5128] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.603324][ T5128] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.615007][ T5136] loop0: detected capacity change from 0 to 1024 [ 61.622014][ T5128] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.624013][ T5141] loop5: detected capacity change from 0 to 512 [ 61.629199][ T5136] EXT4-fs: Ignoring removed orlov option [ 61.636841][ T5128] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 61.655377][ T5128] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 61.684917][ T5140] loop1: detected capacity change from 0 to 1024 [ 61.692181][ T5141] EXT4-fs: Ignoring removed nobh option [ 61.698385][ T5128] EXT4-fs (loop3): 1 truncate cleaned up [ 61.724890][ T5140] EXT4-fs: Ignoring removed orlov option [ 61.742501][ T5141] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.588: corrupted inode contents [ 61.760216][ T5141] EXT4-fs (loop5): Remounting filesystem read-only [ 61.766937][ T5141] EXT4-fs (loop5): 1 truncate cleaned up [ 61.773100][ T5141] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.783543][ T338] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.794391][ T338] __quota_error: 196 callbacks suppressed [ 61.794400][ T338] Quota error (device loop5): write_blk: dquota write failed [ 61.807746][ T338] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 61.817953][ T338] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.828817][ T338] Quota error (device loop5): write_blk: dquota write failed [ 61.836304][ T338] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 61.946515][ T29] audit: type=1326 audit(1747172987.038:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 61.993863][ T29] audit: type=1326 audit(1747172987.058:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 62.017259][ T29] audit: type=1326 audit(1747172987.068:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 62.040598][ T29] audit: type=1326 audit(1747172987.068:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 62.064099][ T29] audit: type=1326 audit(1747172987.068:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 62.087445][ T29] audit: type=1326 audit(1747172987.068:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 62.121668][ T338] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.569103][ T5207] netlink: 56 bytes leftover after parsing attributes in process `syz.5.619'. [ 62.578050][ T5207] netlink: 40 bytes leftover after parsing attributes in process `syz.5.619'. [ 62.630625][ T5215] loop3: detected capacity change from 0 to 1024 [ 62.651853][ T5215] EXT4-fs: Ignoring removed orlov option [ 62.691409][ T5213] loop2: detected capacity change from 0 to 1024 [ 62.698116][ T5213] EXT4-fs: Ignoring removed orlov option [ 62.947819][ T5249] SELinux: syz.1.635 (5249) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 62.968585][ T5243] syzkaller0: entered allmulticast mode [ 62.974877][ T5243] syzkaller0: entered promiscuous mode [ 62.990341][ T5243] syzkaller0 (unregistering): left promiscuous mode [ 62.997346][ T5243] syzkaller0 (unregistering): left allmulticast mode [ 63.006179][ T5245] loop0: detected capacity change from 0 to 512 [ 63.061527][ T5245] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.326926][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 63.423709][ T5279] syzkaller0: entered allmulticast mode [ 63.471562][ T5279] syzkaller0: entered promiscuous mode [ 63.486147][ T5279] syzkaller0 (unregistering): left promiscuous mode [ 63.492996][ T5279] syzkaller0 (unregistering): left allmulticast mode [ 63.681731][ T5304] xt_hashlimit: max too large, truncated to 1048576 [ 63.710965][ T5307] loop1: detected capacity change from 0 to 512 [ 63.716322][ T5304] Cannot find set identified by id 0 to match [ 63.724848][ T5307] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.737591][ T5307] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.746112][ T5307] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.662: invalid indirect mapped block 256 (level 2) [ 63.760623][ T5307] EXT4-fs (loop1): 2 truncates cleaned up [ 63.827879][ T5314] loop5: detected capacity change from 0 to 1024 [ 63.890920][ T5314] EXT4-fs: Ignoring removed orlov option [ 63.946000][ T5319] loop2: detected capacity change from 0 to 1024 [ 63.956345][ T5319] EXT4-fs: Ignoring removed orlov option [ 64.025724][ T5328] syzkaller0: entered allmulticast mode [ 64.033458][ T5328] syzkaller0: entered promiscuous mode [ 64.041726][ T5328] syzkaller0 (unregistering): left promiscuous mode [ 64.048497][ T5328] syzkaller0 (unregistering): left allmulticast mode [ 64.266997][ T5333] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 64.275296][ T5333] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 64.913222][ T5359] loop2: detected capacity change from 0 to 512 [ 64.933626][ T5359] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.979544][ T5359] EXT4-fs (loop2): 1 truncate cleaned up [ 64.987939][ T5365] loop3: detected capacity change from 0 to 1024 [ 65.020306][ T5365] EXT4-fs: Ignoring removed orlov option [ 65.151092][ T5379] loop0: detected capacity change from 0 to 1024 [ 65.251090][ T5397] loop5: detected capacity change from 0 to 128 [ 65.265668][ T5397] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 65.350554][ T5407] loop2: detected capacity change from 0 to 512 [ 65.378023][ T5407] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 65.411711][ T5407] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.431496][ T5407] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.705: Block bitmap for bg 0 marked uninitialized [ 65.447330][ T5407] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 65.462157][ T5407] EXT4-fs (loop2): 1 orphan inode deleted [ 65.483620][ T5407] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 65.495325][ T5407] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 65.545282][ T5421] netlink: 256 bytes leftover after parsing attributes in process `syz.0.712'. [ 65.676720][ T5431] syzkaller0: entered allmulticast mode [ 65.682985][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 65.698815][ T5431] syzkaller0: entered promiscuous mode [ 65.736213][ T5431] syzkaller0 (unregistering): left promiscuous mode [ 65.739093][ T5451] loop1: detected capacity change from 0 to 256 [ 65.743179][ T5431] syzkaller0 (unregistering): left allmulticast mode [ 65.762789][ T5451] FAT-fs (loop1): Directory bread(block 64) failed [ 65.769666][ T5451] FAT-fs (loop1): Directory bread(block 65) failed [ 65.782844][ T5451] FAT-fs (loop1): Directory bread(block 66) failed [ 65.789596][ T5451] FAT-fs (loop1): Directory bread(block 67) failed [ 65.812249][ T5451] FAT-fs (loop1): Directory bread(block 68) failed [ 65.828077][ T5451] FAT-fs (loop1): Directory bread(block 69) failed [ 65.836532][ T5451] FAT-fs (loop1): Directory bread(block 70) failed [ 65.843842][ T5451] FAT-fs (loop1): Directory bread(block 71) failed [ 65.850698][ T5451] FAT-fs (loop1): Directory bread(block 72) failed [ 65.857653][ T5451] FAT-fs (loop1): Directory bread(block 73) failed [ 65.989144][ T5481] loop0: detected capacity change from 0 to 512 [ 66.044303][ T5489] SELinux: syz.2.746 (5489) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 66.048232][ T5487] syzkaller0: entered allmulticast mode [ 66.069892][ T5487] syzkaller0: entered promiscuous mode [ 66.077607][ T5487] syzkaller0 (unregistering): left promiscuous mode [ 66.084410][ T5487] syzkaller0 (unregistering): left allmulticast mode [ 66.168880][ T5505] netlink: 'syz.3.752': attribute type 8 has an invalid length. [ 66.183050][ T5508] loop5: detected capacity change from 0 to 128 [ 66.191848][ T5508] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 66.202191][ T5508] FAT-fs (loop5): Filesystem has been set read-only [ 66.260774][ T5516] loop0: detected capacity change from 0 to 764 [ 66.270425][ T5518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.759'. [ 66.282269][ T5516] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 66.365843][ T5534] syzkaller0: entered allmulticast mode [ 66.375133][ T5534] syzkaller0: entered promiscuous mode [ 66.460709][ T5534] syzkaller0 (unregistering): left promiscuous mode [ 66.467546][ T5534] syzkaller0 (unregistering): left allmulticast mode [ 66.542708][ T5545] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 66.580555][ T5549] loop5: detected capacity change from 0 to 512 [ 66.589829][ T5549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.601504][ T5549] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.772: invalid block [ 66.614373][ T5549] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.772: invalid indirect mapped block 4294967295 (level 1) [ 66.633359][ T5549] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.772: invalid indirect mapped block 4294967295 (level 1) [ 66.648494][ T5549] EXT4-fs (loop5): 2 truncates cleaned up [ 66.655218][ T5549] EXT4-fs mount: 118 callbacks suppressed [ 66.655231][ T5549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.704463][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.800475][ T5576] loop1: detected capacity change from 0 to 128 [ 66.818271][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 66.818295][ T29] audit: type=1400 audit(1747172991.908:639): avc: denied { remount } for pid=5575 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.852689][ T5576] FAT-fs (loop1): error, corrupted directory (invalid i_start) [ 66.860313][ T5576] FAT-fs (loop1): Filesystem has been set read-only [ 66.931102][ T5591] loop5: detected capacity change from 0 to 1024 [ 66.942098][ T5589] loop1: detected capacity change from 0 to 512 [ 66.943917][ T5587] loop3: detected capacity change from 0 to 4096 [ 66.955907][ T5591] EXT4-fs: Ignoring removed orlov option [ 66.961672][ T5591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.972223][ T5589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.984426][ T5587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.006845][ T5587] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #15: comm syz.3.791: corrupted inode contents [ 67.019027][ T5587] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #15: comm syz.3.791: mark_inode_dirty error [ 67.026346][ T5591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.044412][ T5587] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #15: comm syz.3.791: corrupted inode contents [ 67.053141][ T5589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.068857][ T5587] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.791: mark_inode_dirty error [ 67.080604][ T5587] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #15: comm syz.3.791: corrupted inode contents [ 67.093234][ T5589] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.104656][ T5587] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.791: mark_inode_dirty error [ 67.116309][ T5587] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #15: comm syz.3.791: corrupted inode contents [ 67.129808][ T5587] EXT4-fs error (device loop3): ext4_truncate:4255: inode #15: comm syz.3.791: mark_inode_dirty error [ 67.141486][ T5589] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 67.151400][ T5589] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 67.167526][ T29] audit: type=1400 audit(1747172992.238:640): avc: denied { relabelto } for pid=5588 comm="syz.1.789" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 67.194319][ T5587] EXT4-fs error (device loop3) in ext4_setattr:5628: Corrupt filesystem [ 67.204643][ T5606] xt_hashlimit: max too large, truncated to 1048576 [ 67.219616][ T5606] Cannot find set identified by id 0 to match [ 67.227729][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.246314][ T5587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.282389][ T29] audit: type=1400 audit(1747172992.378:641): avc: denied { block_suspend } for pid=5612 comm="syz.1.796" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.326431][ T5615] ip6t_rpfilter: unknown options [ 67.333373][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.385530][ T5622] loop3: detected capacity change from 0 to 164 [ 67.396452][ T5624] loop5: detected capacity change from 0 to 512 [ 67.414947][ T5622] process 'syz.3.802' launched '/dev/fd/4' with NULL argv: empty string added [ 67.421680][ T5624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.423963][ T29] audit: type=1400 audit(1747172992.508:642): avc: denied { execute } for pid=5621 comm="syz.3.802" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.451998][ T5622] syz.3.802: attempt to access beyond end of device [ 67.451998][ T5622] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 67.457396][ T29] audit: type=1400 audit(1747172992.528:643): avc: denied { execute_no_trans } for pid=5621 comm="syz.3.802" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.494403][ T5624] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.501475][ T5622] syz.3.802: attempt to access beyond end of device [ 67.501475][ T5622] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 67.536077][ T5630] loop1: detected capacity change from 0 to 512 [ 67.681674][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.695110][ T5631] xt_hashlimit: max too large, truncated to 1048576 [ 67.705670][ T5630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.718289][ T5630] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.804110][ T5631] Cannot find set identified by id 0 to match [ 68.037768][ T5641] syzkaller0: entered allmulticast mode [ 68.057429][ T5641] syzkaller0: entered promiscuous mode [ 68.081246][ T5643] loop2: detected capacity change from 0 to 2048 [ 68.091393][ T5641] syzkaller0 (unregistering): left promiscuous mode [ 68.098078][ T5641] syzkaller0 (unregistering): left allmulticast mode [ 68.115373][ T5643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.132239][ T5643] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.809: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 68.150584][ T5643] EXT4-fs (loop2): Remounting filesystem read-only [ 68.309949][ T29] audit: type=1400 audit(1747172993.388:644): avc: denied { bind } for pid=5646 comm="syz.0.810" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.330403][ T29] audit: type=1400 audit(1747172993.388:645): avc: denied { node_bind } for pid=5646 comm="syz.0.810" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.360845][ T5649] loop3: detected capacity change from 0 to 512 [ 68.374731][ T5649] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 68.383628][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.400488][ T5649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 68.409420][ T5649] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.811: corrupted in-inode xattr: e_value size too large [ 68.424759][ T5649] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.811: couldn't read orphan inode 15 (err -117) [ 68.436824][ T29] audit: type=1400 audit(1747172993.488:646): avc: denied { read } for pid=5650 comm="syz.0.813" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.461422][ T5649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.533068][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.728403][ T5661] loop3: detected capacity change from 0 to 8192 [ 68.760095][ T5661] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.792506][ T29] audit: type=1400 audit(1747172993.878:647): avc: denied { write } for pid=5666 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.930257][ T29] audit: type=1326 audit(1747172994.018:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 69.206226][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.232553][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 69.252440][ T5697] loop1: detected capacity change from 0 to 1024 [ 69.259949][ T5697] EXT4-fs: dax option not supported [ 69.311881][ T5712] bridge_slave_0: default FDB implementation only supports local addresses [ 69.383938][ T5723] netlink: 76 bytes leftover after parsing attributes in process `syz.1.843'. [ 69.400269][ T5725] loop2: detected capacity change from 0 to 1024 [ 69.407375][ T5725] EXT4-fs: Ignoring removed orlov option [ 69.422122][ T5726] xt_hashlimit: max too large, truncated to 1048576 [ 69.431245][ T5725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.480539][ T5726] Cannot find set identified by id 0 to match [ 69.818601][ T5755] syzkaller0: entered allmulticast mode [ 69.824541][ T5755] syzkaller0: entered promiscuous mode [ 69.837036][ T5753] loop1: detected capacity change from 0 to 1024 [ 69.844024][ T5753] EXT4-fs: Ignoring removed orlov option [ 69.947181][ T5753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.972187][ T5755] syzkaller0 (unregistering): left promiscuous mode [ 69.978892][ T5755] syzkaller0 (unregistering): left allmulticast mode [ 70.267353][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.388307][ T5781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5781 comm=syz.0.868 [ 70.413459][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.444527][ T5783] syzkaller0: entered allmulticast mode [ 70.483630][ T5783] syzkaller0: entered promiscuous mode [ 70.490689][ T5783] syzkaller0 (unregistering): left promiscuous mode [ 70.497540][ T5783] syzkaller0 (unregistering): left allmulticast mode [ 70.552363][ T5794] loop5: detected capacity change from 0 to 1024 [ 70.575099][ T5794] EXT4-fs: Ignoring removed orlov option [ 70.605517][ T5794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.904732][ T5823] syzkaller0: entered allmulticast mode [ 70.910514][ T5823] syzkaller0: entered promiscuous mode [ 70.917382][ C0] hrtimer: interrupt took 27584 ns [ 70.952798][ T5823] syzkaller0 (unregistering): left promiscuous mode [ 70.959585][ T5823] syzkaller0 (unregistering): left allmulticast mode [ 71.106597][ T5837] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.893' sets config #0 [ 71.247281][ T5842] loop0: detected capacity change from 0 to 8192 [ 71.384934][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.448393][ T5859] syzkaller0: entered allmulticast mode [ 71.469560][ T5859] syzkaller0: entered promiscuous mode [ 71.494903][ T5859] syzkaller0 (unregistering): left promiscuous mode [ 71.501748][ T5859] syzkaller0 (unregistering): left allmulticast mode [ 71.579590][ T5863] loop3: detected capacity change from 0 to 164 [ 71.589302][ T5863] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.626935][ T5863] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.702973][ T5882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.913'. [ 71.711933][ T5882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.913'. [ 71.733835][ T5885] xt_hashlimit: max too large, truncated to 1048576 [ 71.751879][ T5885] Cannot find set identified by id 0 to match [ 71.771830][ T5886] xt_hashlimit: max too large, truncated to 1048576 [ 71.779378][ T5886] Cannot find set identified by id 0 to match [ 72.027256][ T5898] syzkaller0: entered allmulticast mode [ 72.034268][ T5898] syzkaller0: entered promiscuous mode [ 72.041767][ T5898] syzkaller0 (unregistering): left promiscuous mode [ 72.048554][ T5898] syzkaller0 (unregistering): left allmulticast mode [ 72.254966][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 72.254983][ T29] audit: type=1326 audit(1747172997.348:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.284716][ T29] audit: type=1326 audit(1747172997.348:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.308165][ T29] audit: type=1326 audit(1747172997.348:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.331815][ T29] audit: type=1326 audit(1747172997.348:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.355243][ T29] audit: type=1326 audit(1747172997.348:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.378937][ T29] audit: type=1326 audit(1747172997.348:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.385162][ T5908] loop2: detected capacity change from 0 to 1024 [ 72.402229][ T29] audit: type=1326 audit(1747172997.348:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.410023][ T5908] EXT4-fs: Ignoring removed orlov option [ 72.431796][ T29] audit: type=1326 audit(1747172997.348:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.460802][ T29] audit: type=1326 audit(1747172997.348:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5905 comm="syz.2.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8323fe969 code=0x7ffc0000 [ 72.501084][ T5908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.523415][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.531851][ T29] audit: type=1400 audit(1747172997.618:674): avc: denied { ioctl } for pid=5915 comm="syz.5.927" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.567222][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.583542][ T5914] infiniband syz!: set down [ 72.588189][ T5914] infiniband syz!: added team_slave_0 [ 72.605398][ T5914] RDS/IB: syz!: added [ 72.609460][ T5914] smc: adding ib device syz! with port count 1 [ 72.616393][ T5914] smc: ib device syz! port 1 has pnetid [ 72.663874][ T5927] syzkaller0: entered allmulticast mode [ 72.670117][ T5927] syzkaller0: entered promiscuous mode [ 72.688896][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 72.704939][ T5927] syzkaller0 (unregistering): left promiscuous mode [ 72.711800][ T5927] syzkaller0 (unregistering): left allmulticast mode [ 72.770513][ T5935] SELinux: failed to load policy [ 72.968343][ T5946] xt_hashlimit: max too large, truncated to 1048576 [ 73.012942][ T5946] Cannot find set identified by id 0 to match [ 73.146482][ T5958] xt_hashlimit: max too large, truncated to 1048576 [ 73.177702][ T5961] syzkaller0: entered allmulticast mode [ 73.184594][ T5961] syzkaller0: entered promiscuous mode [ 73.203674][ T5961] syzkaller0 (unregistering): left promiscuous mode [ 73.210338][ T5961] syzkaller0 (unregistering): left allmulticast mode [ 73.225287][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.254373][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.947'. [ 73.453038][ T5991] loop2: detected capacity change from 0 to 1024 [ 73.459749][ T5991] EXT4-fs: Ignoring removed orlov option [ 73.493561][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.666387][ T6009] syzkaller0: entered allmulticast mode [ 73.672627][ T6009] syzkaller0: entered promiscuous mode [ 73.698816][ T6009] syzkaller0 (unregistering): left promiscuous mode [ 73.705557][ T6009] syzkaller0 (unregistering): left allmulticast mode [ 73.786564][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.838824][ T6022] loop3: detected capacity change from 0 to 512 [ 73.854194][ T6022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.867078][ T6022] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.894664][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.973956][ T6034] netlink: 'syz.0.978': attribute type 2 has an invalid length. [ 74.053832][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.982'. [ 74.063125][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.982'. [ 74.131408][ T6045] xt_hashlimit: max too large, truncated to 1048576 [ 74.150414][ T6045] Cannot find set identified by id 0 to match [ 74.190649][ T6047] xt_hashlimit: max too large, truncated to 1048576 [ 74.210621][ T6049] loop0: detected capacity change from 0 to 1024 [ 74.225826][ T6049] EXT4-fs: Ignoring removed orlov option [ 74.228758][ T6047] Cannot find set identified by id 0 to match [ 74.240700][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.256335][ T6051] syzkaller0: entered allmulticast mode [ 74.262185][ T6051] syzkaller0: entered promiscuous mode [ 74.269566][ T6051] syzkaller0 (unregistering): left promiscuous mode [ 74.276386][ T6051] syzkaller0 (unregistering): left allmulticast mode [ 74.344137][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.376524][ T6056] loop2: detected capacity change from 0 to 512 [ 74.393731][ T6056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.406475][ T6056] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.430129][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.621175][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 74.630266][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 74.650301][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 74.683050][ T6065] loop2: detected capacity change from 0 to 512 [ 74.704486][ T6065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.719084][ T6065] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.741540][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 74.754222][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.863965][ T6084] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 74.913074][ T6088] syzkaller0: entered allmulticast mode [ 74.951215][ T6088] syzkaller0: entered promiscuous mode [ 74.982105][ T6088] syzkaller0 (unregistering): left promiscuous mode [ 74.988838][ T6088] syzkaller0 (unregistering): left allmulticast mode [ 75.006433][ T6094] loop2: detected capacity change from 0 to 512 [ 75.116342][ T6094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.128981][ T6094] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.334108][ T6103] loop5: detected capacity change from 0 to 512 [ 75.420460][ T6103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.518161][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.535738][ T6103] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.636988][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.816692][ T6113] loop3: detected capacity change from 0 to 4096 [ 75.837064][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.858423][ T6113] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 75.919350][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.149712][ T6129] syzkaller0: entered allmulticast mode [ 76.156566][ T6129] syzkaller0: entered promiscuous mode [ 76.173004][ T6129] syzkaller0 (unregistering): left promiscuous mode [ 76.179690][ T6129] syzkaller0 (unregistering): left allmulticast mode [ 76.497314][ T6146] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.606536][ T6152] loop5: detected capacity change from 0 to 512 [ 76.622545][ T6150] xt_hashlimit: max too large, truncated to 1048576 [ 76.660986][ T6152] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.688650][ T6150] Cannot find set identified by id 0 to match [ 76.701372][ T6152] EXT4-fs (loop5): 1 truncate cleaned up [ 76.717660][ T6152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.734661][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.744072][ T6156] loop1: detected capacity change from 0 to 512 [ 76.770437][ T6156] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.791363][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.808173][ T6156] EXT4-fs (loop1): 1 truncate cleaned up [ 76.830281][ T6156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.911295][ T6163] loop5: detected capacity change from 0 to 512 [ 76.949412][ T6163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.972214][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.982339][ T6163] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.004058][ T6163] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 77.020991][ T6163] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 77.033300][ T6163] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.033300][ T6163] [ 77.043099][ T6163] EXT4-fs (loop5): Total free blocks count 0 [ 77.049108][ T6163] EXT4-fs (loop5): Free/Dirty block details [ 77.055250][ T6163] EXT4-fs (loop5): free_blocks=65280 [ 77.060572][ T6163] EXT4-fs (loop5): dirty_blocks=3 [ 77.065722][ T6163] EXT4-fs (loop5): Block reservation details [ 77.071845][ T6163] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 77.129568][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.255299][ T41] bridge_slave_1: left allmulticast mode [ 77.260987][ T41] bridge_slave_1: left promiscuous mode [ 77.266960][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.297126][ T41] bridge_slave_0: left allmulticast mode [ 77.302895][ T41] bridge_slave_0: left promiscuous mode [ 77.308566][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.392314][ T6184] loop5: detected capacity change from 0 to 512 [ 77.493027][ T6184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.506122][ T6184] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.521882][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.535070][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.565093][ T6189] loop3: detected capacity change from 0 to 4096 [ 77.573538][ T41] bond0 (unregistering): Released all slaves [ 77.591823][ T6189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.615064][ T6189] EXT4-fs (loop3): shut down requested (0) [ 77.644268][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.708908][ T41] hsr_slave_0: left promiscuous mode [ 77.717424][ T41] hsr_slave_1: left promiscuous mode [ 77.724329][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.743754][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.789113][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 77.789130][ T29] audit: type=1400 audit(1747173002.878:749): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.883758][ T41] team0 (unregistering): Port device team_slave_1 removed [ 77.895598][ T29] audit: type=1400 audit(1747173002.918:750): avc: denied { open } for pid=3327 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.920027][ T29] audit: type=1400 audit(1747173002.918:751): avc: denied { ioctl } for pid=3327 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.945688][ T29] audit: type=1400 audit(1747173002.938:752): avc: denied { map_create } for pid=6196 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.965063][ T29] audit: type=1400 audit(1747173002.938:753): avc: denied { bpf } for pid=6196 comm="syz.0.1040" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.986080][ T29] audit: type=1400 audit(1747173002.938:754): avc: denied { map_read map_write } for pid=6196 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.006314][ T29] audit: type=1400 audit(1747173002.948:755): avc: denied { prog_load } for pid=6196 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.025693][ T29] audit: type=1400 audit(1747173002.948:756): avc: denied { perfmon } for pid=6196 comm="syz.0.1040" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.046919][ T29] audit: type=1400 audit(1747173002.948:757): avc: denied { prog_run } for pid=6196 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.128586][ T41] team0 (unregistering): Port device team_slave_0 removed [ 78.246329][ T6214] xt_nat: multiple ranges no longer supported [ 78.275241][ T29] audit: type=1400 audit(1747173003.178:758): avc: denied { wake_alarm } for pid=6201 comm="syz.0.1042" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.517142][ T6229] loop1: detected capacity change from 0 to 1024 [ 78.529529][ T6229] EXT4-fs: Ignoring removed orlov option [ 78.567571][ T6229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.803224][ T6239] xt_hashlimit: max too large, truncated to 1048576 [ 78.816261][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.844648][ T6239] Cannot find set identified by id 0 to match [ 78.867140][ T6172] chnl_net:caif_netlink_parms(): no params data found [ 78.877790][ T6247] __nla_validate_parse: 5 callbacks suppressed [ 78.877829][ T6247] netlink: 87 bytes leftover after parsing attributes in process `syz.5.1058'. [ 78.923429][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1059'. [ 78.968905][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.976205][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.992217][ T6256] xt_connbytes: Forcing CT accounting to be enabled [ 78.999055][ T6172] bridge_slave_0: entered allmulticast mode [ 79.005232][ T6256] Cannot find add_set index 0 as target [ 79.011741][ T6172] bridge_slave_0: entered promiscuous mode [ 79.018969][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.026327][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.039608][ T6172] bridge_slave_1: entered allmulticast mode [ 79.046293][ T6172] bridge_slave_1: entered promiscuous mode [ 79.070919][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.082596][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.104468][ T6172] team0: Port device team_slave_0 added [ 79.111363][ T6172] team0: Port device team_slave_1 added [ 79.129972][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.137190][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.163153][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.197605][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.204889][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.231085][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.297697][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.309460][ T6172] hsr_slave_0: entered promiscuous mode [ 79.320018][ T6172] hsr_slave_1: entered promiscuous mode [ 79.328697][ T6172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.345908][ T6260] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 79.353517][ T6172] Cannot create hsr debugfs directory [ 79.363310][ T6260] SELinux: failed to load policy [ 79.463170][ T6172] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.487537][ T6172] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.586452][ T6172] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.596995][ T6172] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.616152][ T6277] loop1: detected capacity change from 0 to 2048 [ 79.673895][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.685939][ T6172] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.710867][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.718198][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.728206][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.735313][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.757633][ T6172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.768276][ T6172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.808533][ T6290] loop3: detected capacity change from 0 to 512 [ 79.906335][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.919163][ T6290] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.962620][ T6299] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 80.108866][ T6172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.711925][ T6326] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1084'. [ 80.752254][ T6326] netlink: zone id is out of range [ 80.757509][ T6326] netlink: zone id is out of range [ 80.774911][ T6326] netlink: zone id is out of range [ 80.780103][ T6326] netlink: del zone limit has 8 unknown bytes [ 80.806320][ T6172] veth0_vlan: entered promiscuous mode [ 80.833408][ T6172] veth1_vlan: entered promiscuous mode [ 80.879724][ T6172] veth0_macvtap: entered promiscuous mode [ 80.905028][ T6172] veth1_macvtap: entered promiscuous mode [ 80.946716][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.957335][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.014897][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.057147][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.067957][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.109493][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.119298][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 81.132643][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 81.144697][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 81.169253][ T6172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.178319][ T6172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.187363][ T6172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.196167][ T6172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.212555][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 81.324610][ T6350] xt_hashlimit: max too large, truncated to 1048576 [ 81.344266][ T6350] Cannot find set identified by id 0 to match [ 81.519382][ T6363] netlink: 'syz.0.1099': attribute type 21 has an invalid length. [ 81.596268][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.637716][ T6368] SELinux: failed to load policy [ 81.649915][ T6372] syzkaller0: entered allmulticast mode [ 81.655896][ T6372] syzkaller0: entered promiscuous mode [ 81.663690][ T6372] syzkaller0 (unregistering): left promiscuous mode [ 81.670388][ T6372] syzkaller0 (unregistering): left allmulticast mode [ 81.700686][ T6378] loop0: detected capacity change from 0 to 512 [ 81.785852][ T6378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.821809][ T6378] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.952900][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.064669][ T6395] loop0: detected capacity change from 0 to 1024 [ 82.080303][ T6395] EXT4-fs: Ignoring removed orlov option [ 82.105980][ T6395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.156626][ T6406] loop1: detected capacity change from 0 to 1024 [ 82.163749][ T6406] EXT4-fs: Ignoring removed orlov option [ 82.183071][ T6406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.258869][ T6414] loop6: detected capacity change from 0 to 1024 [ 82.265547][ T6414] EXT4-fs: Ignoring removed orlov option [ 82.288673][ T6414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.337127][ T6417] loop3: detected capacity change from 0 to 1024 [ 82.346318][ T6417] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 82.357317][ T6417] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 82.370721][ T6417] JBD2: no valid journal superblock found [ 82.376653][ T6417] EXT4-fs (loop3): Could not load journal inode [ 82.444719][ T6421] loop3: detected capacity change from 0 to 1024 [ 82.458522][ T6421] EXT4-fs: Ignoring removed orlov option [ 82.484597][ T6421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.852432][ T6427] xt_hashlimit: max too large, truncated to 1048576 [ 82.928730][ T6427] Cannot find set identified by id 0 to match [ 83.022413][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.041462][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.054260][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 83.054277][ T29] audit: type=1400 audit(1747173008.148:900): avc: denied { create } for pid=6429 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.093734][ T29] audit: type=1400 audit(1747173008.188:901): avc: denied { write } for pid=6429 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.136200][ T6430] infiniband syz2: set down [ 83.140756][ T6430] infiniband syz2: added ipvlan1 [ 83.168050][ T6172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.179252][ T29] audit: type=1400 audit(1747173008.258:902): avc: denied { cpu } for pid=6431 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.205879][ T6430] RDS/IB: syz2: added [ 83.209959][ T6430] smc: adding ib device syz2 with port count 1 [ 83.216322][ T6430] smc: ib device syz2 port 1 has pnetid [ 83.233734][ T6436] loop0: detected capacity change from 0 to 2048 [ 83.241757][ T6436] EXT4-fs: inline encryption not supported [ 83.248155][ T6436] EXT4-fs: Ignoring removed i_version option [ 83.269492][ T6436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.370625][ T29] audit: type=1400 audit(1747173008.458:903): avc: denied { read write } for pid=6435 comm="syz.0.1124" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.370945][ T6436] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.394970][ T29] audit: type=1400 audit(1747173008.458:904): avc: denied { open } for pid=6435 comm="syz.0.1124" path="/232/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.495653][ T29] audit: type=1400 audit(1747173008.588:905): avc: denied { read write } for pid=6448 comm="syz.3.1129" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.519469][ T29] audit: type=1400 audit(1747173008.588:906): avc: denied { open } for pid=6448 comm="syz.3.1129" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.543348][ T29] audit: type=1400 audit(1747173008.588:907): avc: denied { ioctl } for pid=6448 comm="syz.3.1129" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.620215][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 83.632958][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.632958][ T41] [ 83.642777][ T41] EXT4-fs (loop0): Total free blocks count 0 [ 83.648977][ T41] EXT4-fs (loop0): Free/Dirty block details [ 83.655223][ T41] EXT4-fs (loop0): free_blocks=2415919104 [ 83.661067][ T41] EXT4-fs (loop0): dirty_blocks=16 [ 83.666617][ T41] EXT4-fs (loop0): Block reservation details [ 83.672754][ T41] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 83.680575][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 83.739539][ T6460] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1133'. [ 83.749333][ T6460] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 83.796057][ T29] audit: type=1400 audit(1747173008.888:908): avc: denied { create } for pid=6465 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.828295][ T6470] syz.6.1139 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 83.838889][ T6471] loop0: detected capacity change from 0 to 512 [ 83.856851][ T29] audit: type=1400 audit(1747173008.908:909): avc: denied { write } for pid=6465 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.882355][ T6475] loop1: detected capacity change from 0 to 128 [ 83.889764][ T6471] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.943685][ T6483] loop6: detected capacity change from 0 to 1024 [ 83.974231][ T6483] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.021200][ T41] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 84.024800][ T6490] syzkaller1: entered promiscuous mode [ 84.042501][ T6490] syzkaller1: entered allmulticast mode [ 84.054500][ T41] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 84.067507][ T41] EXT4-fs (loop6): This should not happen!! Data will be lost [ 84.067507][ T41] [ 84.085749][ T6494] netlink: 'syz.5.1149': attribute type 3 has an invalid length. [ 84.190944][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'. [ 84.253825][ T6524] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 84.312382][ T6529] xt_hashlimit: max too large, truncated to 1048576 [ 84.319651][ T6529] Cannot find set identified by id 0 to match [ 84.390739][ T6533] loop1: detected capacity change from 0 to 512 [ 84.465687][ T6533] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.491177][ T6535] loop3: detected capacity change from 0 to 2048 [ 84.499176][ T6535] EXT4-fs: Ignoring removed bh option [ 84.803885][ T6543] loop0: detected capacity change from 0 to 512 [ 84.848841][ T6543] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.914117][ T6543] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1168: bg 0: block 217: padding at end of block bitmap is not set [ 85.282464][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1172'. [ 85.315201][ T6559] loop0: detected capacity change from 0 to 512 [ 85.345037][ T31] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.380335][ T6559] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1170: bg 0: block 131: padding at end of block bitmap is not set [ 85.406490][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 85.418800][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.418800][ T31] [ 85.428797][ T31] EXT4-fs (loop3): Total free blocks count 0 [ 85.434934][ T31] EXT4-fs (loop3): Free/Dirty block details [ 85.441053][ T31] EXT4-fs (loop3): free_blocks=2415919104 [ 85.446946][ T31] EXT4-fs (loop3): dirty_blocks=4800 [ 85.452440][ T31] EXT4-fs (loop3): Block reservation details [ 85.458464][ T31] EXT4-fs (loop3): i_reserved_data_blocks=300 [ 85.475405][ T6559] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 85.499919][ T6559] EXT4-fs (loop0): 1 truncate cleaned up [ 85.745296][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 85.758045][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.758045][ T51] [ 86.070570][ T6570] loop6: detected capacity change from 0 to 512 [ 86.117257][ T6570] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.239186][ T6578] loop0: detected capacity change from 0 to 1024 [ 86.257771][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.272514][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.284909][ T6578] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.303461][ T6578] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #15: block 3: comm syz.0.1181: lblock 3 mapped to illegal pblock 3 (length 1) [ 86.363273][ T6578] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 86.375728][ T6578] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.375728][ T6578] [ 86.386815][ T6583] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #15: block 1: comm syz.0.1181: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.057584][ T6596] loop1: detected capacity change from 0 to 1024 [ 87.108206][ T6596] EXT4-fs: Ignoring removed orlov option [ 87.115352][ T6604] xt_hashlimit: max too large, truncated to 1048576 [ 87.126992][ T6603] loop3: detected capacity change from 0 to 1024 [ 87.176774][ T6604] Cannot find set identified by id 0 to match [ 87.238571][ T6603] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.254941][ T6603] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1189: bg 0: block 393: padding at end of block bitmap is not set [ 87.298557][ T6615] loop6: detected capacity change from 0 to 1024 [ 87.310976][ T6615] EXT4-fs: Ignoring removed bh option [ 87.440572][ T6625] loop3: detected capacity change from 0 to 512 [ 87.448119][ T6625] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.455674][ T6625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.468068][ T6625] EXT4-fs (loop3): 1 truncate cleaned up [ 87.476245][ T6627] loop0: detected capacity change from 0 to 512 [ 87.500926][ T6627] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.525065][ T6627] EXT4-fs (loop0): mount failed [ 87.832797][ T6643] loop0: detected capacity change from 0 to 1024 [ 87.839734][ T6643] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 87.905357][ T6647] SELinux: failed to load policy [ 87.936427][ T6651] loop6: detected capacity change from 0 to 1024 [ 87.971276][ T6651] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.990132][ T6658] loop5: detected capacity change from 0 to 1024 [ 87.997036][ T6658] EXT4-fs: Ignoring removed orlov option [ 88.017410][ T6651] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1207: bg 0: block 393: padding at end of block bitmap is not set [ 88.053834][ T6651] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 88.066657][ T6651] EXT4-fs (loop6): This should not happen!! Data will be lost [ 88.066657][ T6651] [ 88.089670][ T6667] loop0: detected capacity change from 0 to 1024 [ 88.098779][ T6667] EXT4-fs: Ignoring removed orlov option [ 88.112394][ T6671] syzkaller0: entered allmulticast mode [ 88.118330][ T6671] syzkaller0: entered promiscuous mode [ 88.127002][ T6671] syzkaller0 (unregistering): left promiscuous mode [ 88.133861][ T6671] syzkaller0 (unregistering): left allmulticast mode [ 88.295207][ T6679] xt_hashlimit: max too large, truncated to 1048576 [ 88.312542][ T6679] Cannot find set identified by id 0 to match [ 88.376641][ T6681] loop3: detected capacity change from 0 to 1024 [ 88.407332][ T6681] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 88.454257][ T6683] loop1: detected capacity change from 0 to 1024 [ 88.469902][ T6683] EXT4-fs: Ignoring removed orlov option [ 88.487689][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 88.487706][ T29] audit: type=1400 audit(1747173013.578:934): avc: denied { name_bind } for pid=6684 comm="syz.3.1218" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.515893][ T29] audit: type=1400 audit(1747173013.578:935): avc: denied { node_bind } for pid=6684 comm="syz.3.1218" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.559926][ T29] audit: type=1400 audit(1747173013.648:936): avc: denied { setcurrent } for pid=6687 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.579740][ T29] audit: type=1401 audit(1747173013.648:937): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 88.971212][ T6702] loop0: detected capacity change from 0 to 8192 [ 89.136999][ T6712] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.148493][ T6714] loop5: detected capacity change from 0 to 512 [ 89.193968][ T29] audit: type=1400 audit(1747173014.288:938): avc: denied { bind } for pid=6715 comm="syz.6.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.213582][ T29] audit: type=1400 audit(1747173014.288:939): avc: denied { name_bind } for pid=6715 comm="syz.6.1232" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.235374][ T29] audit: type=1400 audit(1747173014.288:940): avc: denied { node_bind } for pid=6715 comm="syz.6.1232" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 89.272746][ T6714] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.278175][ T29] audit: type=1400 audit(1747173014.368:941): avc: denied { write } for pid=6715 comm="syz.6.1232" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.304746][ T29] audit: type=1400 audit(1747173014.368:942): avc: denied { name_connect } for pid=6715 comm="syz.6.1232" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.375120][ T6714] EXT4-fs error (device loop5): ext4_empty_dir:3080: inode #12: comm wg1: Directory hole found for htree leaf block 0 [ 89.375404][ T29] audit: type=1400 audit(1747173014.468:943): avc: denied { create } for pid=6726 comm="syz.0.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.417588][ T6729] syzkaller0: entered allmulticast mode [ 89.423402][ T6727] loop6: detected capacity change from 0 to 1024 [ 89.425804][ T6729] syzkaller0: entered promiscuous mode [ 89.442846][ T6727] EXT4-fs: Ignoring removed orlov option [ 89.444398][ T6734] pim6reg: entered allmulticast mode [ 89.456492][ T6729] syzkaller0 (unregistering): left promiscuous mode [ 89.463201][ T6729] syzkaller0 (unregistering): left allmulticast mode [ 89.522502][ T6734] team0: entered allmulticast mode [ 89.527720][ T6734] team_slave_0: entered allmulticast mode [ 89.533553][ T6734] team_slave_1: entered allmulticast mode [ 89.594252][ T6749] loop1: detected capacity change from 0 to 4096 [ 89.608808][ T6749] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.1244: corrupted inode contents [ 89.632810][ T6749] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #15: comm syz.1.1244: mark_inode_dirty error [ 89.644496][ T6751] loop3: detected capacity change from 0 to 1024 [ 89.652127][ T6751] EXT4-fs: Ignoring removed orlov option [ 89.659850][ T6749] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.1244: corrupted inode contents [ 89.680429][ T6749] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1244: mark_inode_dirty error [ 89.710693][ T6749] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.1244: corrupted inode contents [ 89.758943][ T6749] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1244: mark_inode_dirty error [ 89.784765][ T6749] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.1244: corrupted inode contents [ 89.839910][ T6749] EXT4-fs error (device loop1): ext4_truncate:4255: inode #15: comm syz.1.1244: mark_inode_dirty error [ 89.856232][ T6749] EXT4-fs error (device loop1) in ext4_setattr:5628: Corrupt filesystem [ 89.887336][ T6755] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.1244: corrupted inode contents [ 90.137716][ T6767] loop0: detected capacity change from 0 to 8192 [ 90.212412][ T6774] loop0: detected capacity change from 0 to 512 [ 90.254250][ T6778] loop1: detected capacity change from 0 to 512 [ 90.261053][ T6778] journal_path: Non-blockdev passed as './bus' [ 90.267312][ T6778] EXT4-fs: error: could not find journal device path [ 90.275011][ T6774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 90.286258][ T6774] System zones: 0-2, 18-18, 34-34 [ 90.299580][ T6774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1254: bg 0: block 248: padding at end of block bitmap is not set [ 90.330381][ T6780] syzkaller0: entered allmulticast mode [ 90.336465][ T6780] syzkaller0: entered promiscuous mode [ 90.350972][ T6780] syzkaller0 (unregistering): left promiscuous mode [ 90.357763][ T6780] syzkaller0 (unregistering): left allmulticast mode [ 90.369474][ T6774] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1254: Failed to acquire dquot type 1 [ 90.480642][ T6787] loop5: detected capacity change from 0 to 512 [ 90.565683][ T6789] xt_hashlimit: max too large, truncated to 1048576 [ 90.616521][ T6787] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.638108][ T6789] Cannot find set identified by id 0 to match [ 90.698259][ T6774] EXT4-fs (loop0): 1 truncate cleaned up [ 90.742297][ T6774] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.760714][ T6774] syz.0.1254 (6774) used greatest stack depth: 9360 bytes left [ 91.273702][ T6796] loop1: detected capacity change from 0 to 1024 [ 91.280423][ T6796] EXT4-fs: Ignoring removed orlov option [ 91.505044][ T6805] loop0: detected capacity change from 0 to 1024 [ 91.512917][ T6807] macvtap0: entered promiscuous mode [ 91.536083][ T6807] macvtap0: left promiscuous mode [ 91.552308][ T6805] EXT4-fs: Ignoring removed nobh option [ 91.604155][ T6805] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 91.684727][ T6805] EXT4-fs (loop0): Remounting filesystem read-only [ 91.794221][ T6814] loop6: detected capacity change from 0 to 1024 [ 91.820596][ T6816] capability: warning: `syz.0.1267' uses 32-bit capabilities (legacy support in use) [ 91.843043][ T6814] EXT4-fs: Ignoring removed orlov option [ 91.861969][ T6818] Invalid ELF header magic: != ELF [ 91.891033][ T6816] program syz.0.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.089790][ T6825] loop0: detected capacity change from 0 to 1024 [ 92.142601][ T6825] EXT4-fs: Ignoring removed orlov option [ 92.344871][ T6833] loop1: detected capacity change from 0 to 1024 [ 92.362456][ T6833] EXT4-fs: Ignoring removed orlov option [ 92.558210][ T6846] loop3: detected capacity change from 0 to 512 [ 92.757879][ T6846] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.579043][ T6872] loop0: detected capacity change from 0 to 1024 [ 93.586398][ T6872] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.597654][ T6872] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 93.619632][ T6868] loop5: detected capacity change from 0 to 1024 [ 93.636204][ T6874] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 93.654287][ T6874] SELinux: failed to load policy [ 93.693296][ T6879] loop1: detected capacity change from 0 to 1024 [ 93.700079][ T6879] EXT4-fs: Ignoring removed orlov option [ 93.820149][ T6883] loop6: detected capacity change from 0 to 256 [ 93.833445][ T6872] JBD2: no valid journal superblock found [ 93.839276][ T6872] EXT4-fs (loop0): Could not load journal inode [ 94.566248][ T6868] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.579391][ T6872] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 94.642235][ T6868] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1286: bg 0: block 393: padding at end of block bitmap is not set [ 94.682132][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 94.682157][ T29] audit: type=1326 audit(1747173019.778:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 94.737565][ T6868] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 94.750328][ T6868] EXT4-fs (loop5): This should not happen!! Data will be lost [ 94.750328][ T6868] [ 94.775892][ T6895] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1297'. [ 94.801834][ T29] audit: type=1326 audit(1747173019.808:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 94.825518][ T29] audit: type=1326 audit(1747173019.808:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 94.849265][ T29] audit: type=1326 audit(1747173019.808:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 94.872595][ T29] audit: type=1326 audit(1747173019.808:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 94.895986][ T29] audit: type=1326 audit(1747173019.808:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d24fe969 code=0x7ffc0000 [ 94.919329][ T29] audit: type=1400 audit(1747173019.808:977): avc: denied { create } for pid=6890 comm="syz.6.1296" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.940234][ T29] audit: type=1400 audit(1747173019.858:978): avc: denied { unlink } for pid=6172 comm="syz-executor" name="file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.983893][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1297'. [ 95.035168][ T6903] syzkaller0: entered allmulticast mode [ 95.046137][ T6907] SELinux: Context Ü is not valid (left unmapped). [ 95.060070][ T6905] loop6: detected capacity change from 0 to 1024 [ 95.067005][ T29] audit: type=1400 audit(1747173020.138:979): avc: denied { mac_admin } for pid=6906 comm="syz.1.1301" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.089394][ T6903] syzkaller0: entered promiscuous mode [ 95.096482][ T6905] EXT4-fs: Ignoring removed orlov option [ 95.102579][ T6903] syzkaller0 (unregistering): left promiscuous mode [ 95.109216][ T6903] syzkaller0 (unregistering): left allmulticast mode [ 95.131266][ T6912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1303'. [ 95.157583][ T6912] team0: No ports can be present during mode change [ 95.228979][ T6918] loop0: detected capacity change from 0 to 1024 [ 95.235774][ T6918] EXT4-fs: Ignoring removed orlov option [ 95.254261][ T29] audit: type=1400 audit(1747173020.348:980): avc: denied { create } for pid=6921 comm="syz.3.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.320596][ T6923] xt_hashlimit: max too large, truncated to 1048576 [ 95.344573][ T6923] Cannot find set identified by id 0 to match [ 95.655810][ T6940] loop3: detected capacity change from 0 to 512 [ 95.675160][ T6940] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.366454][ T6953] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1319'. [ 96.563460][ T6968] loop6: detected capacity change from 0 to 256 [ 96.593437][ T6970] loop1: detected capacity change from 0 to 128 [ 96.608256][ T6966] loop0: detected capacity change from 0 to 1024 [ 96.626465][ T6970] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 96.655276][ T6966] EXT4-fs: Ignoring removed orlov option [ 96.684113][ T6966] EXT4-fs mount: 67 callbacks suppressed [ 96.684132][ T6966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.740152][ T6970] FAT-fs (loop1): FAT read failed (blocknr 128) [ 96.964167][ T6982] loop1: detected capacity change from 0 to 128 [ 97.008920][ T6983] xt_hashlimit: max too large, truncated to 1048576 [ 97.106120][ T6985] loop5: detected capacity change from 0 to 1024 [ 97.414551][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.416311][ T6983] Cannot find set identified by id 0 to match [ 97.431753][ T6985] EXT4-fs: Ignoring removed orlov option [ 97.437967][ T6988] loop1: detected capacity change from 0 to 1024 [ 97.453561][ T6988] EXT4-fs: Ignoring removed orlov option [ 97.454454][ T6985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.471660][ T6988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.603905][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.903878][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.930808][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.004605][ T7024] loop0: detected capacity change from 0 to 512 [ 98.995330][ T7026] loop1: detected capacity change from 0 to 256 [ 99.010609][ T7023] xt_hashlimit: max too large, truncated to 1048576 [ 99.093771][ T7023] Cannot find set identified by id 0 to match [ 99.155268][ T7032] loop5: detected capacity change from 0 to 512 [ 99.651889][ T7029] loop6: detected capacity change from 0 to 512 [ 99.664828][ T7024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.677679][ T7024] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.727982][ T7032] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 99.744682][ T7032] EXT4-fs (loop5): 1 truncate cleaned up [ 99.786507][ T7029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.799369][ T7029] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.878058][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.913595][ T7032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.015972][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 100.015990][ T29] audit: type=1400 audit(1747173025.108:1029): avc: denied { setattr } for pid=7031 comm="syz.5.1347" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.071767][ T7032] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 100.091723][ T7032] EXT4-fs (loop5): Remounting filesystem read-only [ 100.098313][ T7032] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -30) [ 100.177453][ T7048] xt_hashlimit: max too large, truncated to 1048576 [ 100.185362][ T7048] Cannot find set identified by id 0 to match [ 100.262321][ T7051] SELinux: failed to load policy [ 100.269137][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.558153][ T7059] loop0: detected capacity change from 0 to 1024 [ 100.567223][ T7059] EXT4-fs: Ignoring removed orlov option [ 100.580253][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.847618][ T29] audit: type=1326 audit(1747173025.938:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 100.871991][ T29] audit: type=1326 audit(1747173025.938:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 100.960581][ T29] audit: type=1326 audit(1747173025.988:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 100.984204][ T29] audit: type=1326 audit(1747173025.988:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 101.007762][ T29] audit: type=1326 audit(1747173025.988:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 101.031608][ T29] audit: type=1326 audit(1747173025.988:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 101.055503][ T29] audit: type=1326 audit(1747173025.988:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 101.060231][ T7069] loop1: detected capacity change from 0 to 512 [ 101.079138][ T29] audit: type=1326 audit(1747173025.988:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 101.099125][ T6172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.109242][ T29] audit: type=1326 audit(1747173025.988:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb271e969 code=0x7ffc0000 [ 101.150844][ T7069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.163584][ T7069] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.178627][ T7074] loop3: detected capacity change from 0 to 164 [ 101.187922][ T7074] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.191735][ T7076] loop6: detected capacity change from 0 to 512 [ 101.206542][ T7074] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.216602][ T7076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.234903][ T7074] Symlink component flag not implemented [ 101.237739][ T7076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.240606][ T7074] Symlink component flag not implemented [ 101.260209][ T7076] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.261615][ T7074] Symlink component flag not implemented (7) [ 101.276839][ T7074] Symlink component flag not implemented (116) [ 101.285103][ T7082] loop5: detected capacity change from 0 to 128 [ 101.303578][ T7082] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 101.314159][ T6172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.351684][ T7084] syzkaller0: entered allmulticast mode [ 101.357508][ T7084] syzkaller0: entered promiscuous mode [ 101.382925][ T7084] syzkaller0 (unregistering): left promiscuous mode [ 101.388367][ T7082] FAT-fs (loop5): FAT read failed (blocknr 128) [ 101.389598][ T7084] syzkaller0 (unregistering): left allmulticast mode [ 101.426451][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.459030][ T7090] loop3: detected capacity change from 0 to 512 [ 101.484985][ T7090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.499811][ T7090] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.518637][ T7090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.638645][ T7105] loop5: detected capacity change from 0 to 1024 [ 101.646715][ T7105] EXT4-fs: Ignoring removed orlov option [ 101.655636][ T7105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.769544][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.862110][ T7117] loop1: detected capacity change from 0 to 1024 [ 101.869111][ T7117] EXT4-fs: Ignoring removed orlov option [ 101.880592][ T7117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.924900][ T7120] syzkaller0: entered allmulticast mode [ 101.930824][ T7120] syzkaller0: entered promiscuous mode [ 101.939843][ T7120] syzkaller0 (unregistering): left promiscuous mode [ 101.946602][ T7120] syzkaller0 (unregistering): left allmulticast mode [ 102.195314][ T7130] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.326984][ T7138] loop6: detected capacity change from 0 to 512 [ 102.344390][ T7138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.366510][ T7146] loop3: detected capacity change from 0 to 512 [ 102.371544][ T7138] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.397485][ T7146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.410110][ T7146] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.483349][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.507808][ T6172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.524101][ T7153] syzkaller0: entered allmulticast mode [ 102.529926][ T7153] syzkaller0: entered promiscuous mode [ 102.537856][ T7153] syzkaller0 (unregistering): left promiscuous mode [ 102.544648][ T7153] syzkaller0 (unregistering): left allmulticast mode [ 102.740154][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.741231][ T7168] loop5: detected capacity change from 0 to 8192 [ 102.772954][ T7168] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.842675][ T7175] loop1: detected capacity change from 0 to 1024 [ 102.849735][ T7175] EXT4-fs: Ignoring removed orlov option [ 102.870770][ T7175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.022063][ T7182] loop5: detected capacity change from 0 to 1024 [ 103.029009][ T7182] EXT4-fs: Ignoring removed orlov option [ 103.037911][ T7182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.102935][ T7175] ================================================================== [ 103.111085][ T7175] BUG: KCSAN: data-race in __filemap_remove_folio / filemap_write_and_wait_range [ 103.120330][ T7175] [ 103.122780][ T7175] read-write to 0xffff8881073e5d90 of 8 bytes by task 7180 on cpu 0: [ 103.130965][ T7175] __filemap_remove_folio+0x1bc/0x2a0 [ 103.136384][ T7175] __remove_mapping+0x338/0x460 [ 103.141286][ T7175] remove_mapping+0x22/0x90 [ 103.145823][ T7175] mapping_try_invalidate+0x26a/0x3f0 [ 103.151460][ T7175] invalidate_mapping_pages+0x27/0x40 [ 103.156875][ T7175] ext4_file_write_iter+0xe70/0xf00 [ 103.162116][ T7175] iter_file_splice_write+0x5ef/0x970 [ 103.167714][ T7175] direct_splice_actor+0x156/0x2a0 [ 103.172859][ T7175] splice_direct_to_actor+0x312/0x680 [ 103.178457][ T7175] do_splice_direct+0xda/0x150 [ 103.183265][ T7175] do_sendfile+0x380/0x640 [ 103.187716][ T7175] __x64_sys_sendfile64+0x105/0x150 [ 103.192961][ T7175] x64_sys_call+0xb39/0x2fb0 [ 103.197612][ T7175] do_syscall_64+0xd0/0x1a0 [ 103.202158][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.208099][ T7175] [ 103.210448][ T7175] read to 0xffff8881073e5d90 of 8 bytes by task 7175 on cpu 1: [ 103.218014][ T7175] filemap_write_and_wait_range+0x59/0x340 [ 103.223940][ T7175] ext4_file_write_iter+0xe04/0xf00 [ 103.229254][ T7175] iter_file_splice_write+0x5ef/0x970 [ 103.234656][ T7175] direct_splice_actor+0x156/0x2a0 [ 103.239807][ T7175] splice_direct_to_actor+0x312/0x680 [ 103.245293][ T7175] do_splice_direct+0xda/0x150 [ 103.250084][ T7175] do_sendfile+0x380/0x640 [ 103.254523][ T7175] __x64_sys_sendfile64+0x105/0x150 [ 103.259850][ T7175] x64_sys_call+0xb39/0x2fb0 [ 103.264466][ T7175] do_syscall_64+0xd0/0x1a0 [ 103.269741][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.275657][ T7175] [ 103.278001][ T7175] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 103.285127][ T7175] [ 103.287481][ T7175] Reported by Kernel Concurrency Sanitizer on: [ 103.293655][ T7175] CPU: 1 UID: 0 PID: 7175 Comm: syz.1.1408 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 103.306103][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 103.316275][ T7175] ================================================================== [ 103.336301][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.422564][ T7192] xt_hashlimit: max too large, truncated to 1048576 [ 103.431161][ T7192] Cannot find set identified by id 0 to match [ 103.684446][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.893493][ T4049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.