last executing test programs: 31.204667602s ago: executing program 3 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f0000000c00)=@sg0, &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 31.152461362s ago: executing program 3 (id=303): mq_open(&(0x7f0000000000)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85b\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\xb3\x14\xf6<\x851}y\"\xec\x81\xa9\xba\xd0\x1b3\x9bH\xe3<\xf2`\xe0m3v\xc7\x81\x9dq\xe4\x17\xd97\xc8\xa4\x94y*\x94\x13>\xe2\x1f\xceoX_\xb7\x15\xc8\xf1[\xc8\xa3\xf0\x9e\x80?3\x10\r\xe1\xc2', 0x2, 0x100, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30.581010371s ago: executing program 3 (id=311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 30.538742061s ago: executing program 3 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 30.455274952s ago: executing program 3 (id=317): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 30.181065746s ago: executing program 3 (id=324): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xa, 0x800}, 0x40000c0) 30.153183467s ago: executing program 32 (id=324): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xa, 0x800}, 0x40000c0) 18.961373877s ago: executing program 0 (id=696): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 18.78046865s ago: executing program 0 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 18.609378722s ago: executing program 0 (id=705): open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',msize=0x0000000000001000']) 18.435940615s ago: executing program 0 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 18.360491246s ago: executing program 0 (id=704): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0xd}, {0x0, 0xf}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x200, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0xd}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.12004521s ago: executing program 0 (id=715): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) 18.06675498s ago: executing program 33 (id=715): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) 10.251215973s ago: executing program 1 (id=924): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 9.967510637s ago: executing program 1 (id=918): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@flush}]}, 0x1, 0x223, &(0x7f00000002c0)="$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") unlink(&(0x7f0000000000)='./file0/file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) 9.930313407s ago: executing program 1 (id=919): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0xd105) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 9.623675652s ago: executing program 1 (id=925): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x9}) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x231a8f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.500683334s ago: executing program 1 (id=927): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/124, 0x7c, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) dup3(r2, r1, 0x0) 9.085085709s ago: executing program 1 (id=933): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 9.06325424s ago: executing program 34 (id=933): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 2.050166741s ago: executing program 6 (id=1135): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r3 = dup(r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.023007431s ago: executing program 6 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 1.836925844s ago: executing program 6 (id=1140): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.712893596s ago: executing program 4 (id=1149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) readv(r2, &(0x7f00000001c0)=[{0x0}], 0x1) 1.559611978s ago: executing program 2 (id=1156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) 1.315658921s ago: executing program 5 (id=1162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb7, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r3, 0x65283e1aaa2ddbb1}, 0x14}}, 0x0) 1.282026462s ago: executing program 5 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 1.229014302s ago: executing program 4 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 1.222297143s ago: executing program 5 (id=1165): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 977.258006ms ago: executing program 5 (id=1170): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r2, 0x5, 0x3) 965.515737ms ago: executing program 6 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 866.625328ms ago: executing program 6 (id=1172): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 691.37036ms ago: executing program 2 (id=1175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 684.5234ms ago: executing program 6 (id=1176): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000002ac0)=[{&(0x7f0000002b40)="1b1f6a", 0x3}, {&(0x7f0000001800)="23b4b45a", 0x4}], 0x2, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001740)='./bus\x00', 0x81) r1 = open(&(0x7f0000000100)='./bus\x00', 0x86602, 0x330269f53da8c4ce) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x50000, 0x0, 0x0) 616.197721ms ago: executing program 7 (id=1177): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 607.508771ms ago: executing program 2 (id=1178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 570.587222ms ago: executing program 2 (id=1179): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x880) 569.188652ms ago: executing program 7 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000) 550.619743ms ago: executing program 2 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0xc2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 415.857504ms ago: executing program 7 (id=1182): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 390.446305ms ago: executing program 5 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r3, &(0x7f0000000100)=""/140, 0xde) tkill(r2, 0x7) 363.181895ms ago: executing program 4 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x158}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) 265.720806ms ago: executing program 7 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 264.707416ms ago: executing program 4 (id=1186): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) close_range(r0, 0xffffffffffffffff, 0x0) 241.948347ms ago: executing program 7 (id=1187): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 222.891207ms ago: executing program 2 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) ioprio_set$pid(0x3, 0x0, 0x0) 172.589478ms ago: executing program 7 (id=1189): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) ftruncate(r0, 0x2000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 172.237808ms ago: executing program 4 (id=1190): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:udev_tbl_t:s0\x00', 0x20, 0x2) 9.85556ms ago: executing program 5 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 0s ago: executing program 4 (id=1192): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) kernel console output (not intermixed with test programs): dv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.802909][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.809897][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.835887][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.847232][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.854217][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.880277][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.892992][ T3327] hsr_slave_0: entered promiscuous mode [ 30.899098][ T3327] hsr_slave_1: entered promiscuous mode [ 30.905170][ T3327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.912760][ T3327] Cannot create hsr debugfs directory [ 30.990454][ T3315] hsr_slave_0: entered promiscuous mode [ 30.996390][ T3315] hsr_slave_1: entered promiscuous mode [ 31.002353][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.009942][ T3315] Cannot create hsr debugfs directory [ 31.023170][ T3325] hsr_slave_0: entered promiscuous mode [ 31.029335][ T3325] hsr_slave_1: entered promiscuous mode [ 31.035292][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.042972][ T3325] Cannot create hsr debugfs directory [ 31.204208][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.219511][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.228395][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.239372][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.255114][ T3327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.266010][ T3327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.274799][ T3327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.283768][ T3327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.317093][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.325865][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.335456][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.351973][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.390939][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.419100][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.428476][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.440903][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.449468][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.466810][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.476884][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.486256][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.499521][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.514720][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.528415][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.540695][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.547897][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.559003][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.570753][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.580511][ T1702] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.587618][ T1702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.611463][ T1702] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.618548][ T1702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.635300][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.648266][ T1702] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.655375][ T1702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.674095][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.681199][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.708871][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.716032][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.755095][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.769198][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.779804][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.814862][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.833732][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.840853][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.849933][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.857019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.868987][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.881339][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.905983][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.923061][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.945378][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.952586][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.971612][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.982216][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.989312][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.040470][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.085198][ T3316] veth0_vlan: entered promiscuous mode [ 32.124046][ T3316] veth1_vlan: entered promiscuous mode [ 32.143935][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.165910][ T3316] veth0_macvtap: entered promiscuous mode [ 32.183052][ T3316] veth1_macvtap: entered promiscuous mode [ 32.200077][ T3320] veth0_vlan: entered promiscuous mode [ 32.207586][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.227432][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.248984][ T3327] veth0_vlan: entered promiscuous mode [ 32.267063][ T3320] veth1_vlan: entered promiscuous mode [ 32.276878][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.286763][ T3327] veth1_vlan: entered promiscuous mode [ 32.310708][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.319668][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.328453][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.337253][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.354636][ T3320] veth0_macvtap: entered promiscuous mode [ 32.369128][ T3327] veth0_macvtap: entered promiscuous mode [ 32.386351][ T3320] veth1_macvtap: entered promiscuous mode [ 32.407665][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.407682][ T29] audit: type=1400 audit(1748693913.332:81): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.bWGB4X/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.412061][ T3327] veth1_macvtap: entered promiscuous mode [ 32.418779][ T29] audit: type=1400 audit(1748693913.342:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.445603][ T3325] veth0_vlan: entered promiscuous mode [ 32.465742][ T29] audit: type=1400 audit(1748693913.342:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.bWGB4X/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.481480][ T3315] veth0_vlan: entered promiscuous mode [ 32.496489][ T29] audit: type=1400 audit(1748693913.342:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.507698][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.523671][ T29] audit: type=1400 audit(1748693913.342:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.bWGB4X/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.533939][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.557442][ T29] audit: type=1400 audit(1748693913.342:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.bWGB4X/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.582738][ T3325] veth1_vlan: entered promiscuous mode [ 32.592246][ T29] audit: type=1400 audit(1748693913.342:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.612339][ T3315] veth1_vlan: entered promiscuous mode [ 32.628209][ T29] audit: type=1400 audit(1748693913.442:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.632898][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.651018][ T29] audit: type=1400 audit(1748693913.442:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=4194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.664036][ T3325] veth0_macvtap: entered promiscuous mode [ 32.691562][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.695817][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.723354][ T3320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.732191][ T3320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.740951][ T3320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.749801][ T3320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.760042][ T29] audit: type=1400 audit(1748693913.652:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.788699][ T3325] veth1_macvtap: entered promiscuous mode [ 32.795481][ T3327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.804301][ T3327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.813055][ T3327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.821858][ T3327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.847660][ T3315] veth0_macvtap: entered promiscuous mode [ 32.861344][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.870306][ T3315] veth1_macvtap: entered promiscuous mode [ 32.887541][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.916528][ T3325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.925751][ T3325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.934588][ T3325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.943401][ T3325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.994545][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.036922][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.050961][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.059833][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.068574][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.077370][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.172385][ T3476] mmap: syz.3.4 (3476) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.273718][ T3486] SELinux: failed to load policy [ 33.354566][ T3495] Invalid ELF header magic: != ELF [ 33.441486][ T3502] loop2: detected capacity change from 0 to 512 [ 33.450050][ T3502] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.483202][ T3502] EXT4-fs (loop2): 1 orphan inode deleted [ 33.489524][ T3502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.503075][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 33.516708][ T3502] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.542974][ T3502] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.565002][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.628741][ T3517] netlink: 'syz.2.25': attribute type 13 has an invalid length. [ 33.681134][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.688490][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.721890][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.732517][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.765709][ T3517] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.775015][ T3517] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.784128][ T3517] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.793262][ T3517] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.857007][ T3525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.915314][ T3517] syz.2.25 (3517) used greatest stack depth: 10824 bytes left [ 33.979811][ T3531] vlan2: entered allmulticast mode [ 34.005596][ T3535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.022016][ T3535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.107025][ T3543] loop4: detected capacity change from 0 to 4096 [ 34.119459][ T3543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.154978][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.235115][ C1] hrtimer: interrupt took 28024 ns [ 34.311868][ T3555] loop4: detected capacity change from 0 to 2048 [ 34.322568][ T3555] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 34.419010][ T3565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.48'. [ 34.460619][ T3570] loop4: detected capacity change from 0 to 164 [ 34.469367][ T3570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.493497][ T3570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.504119][ T3570] Symlink component flag not implemented [ 34.509914][ T3570] Symlink component flag not implemented [ 34.517271][ T3570] Symlink component flag not implemented (7) [ 34.523339][ T3570] Symlink component flag not implemented (116) [ 34.674157][ T3584] loop4: detected capacity change from 0 to 1024 [ 34.697948][ T3584] EXT4-fs: Ignoring removed orlov option [ 34.725976][ T3584] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 34.757510][ T3592] loop1: detected capacity change from 0 to 512 [ 34.766130][ T3592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.777828][ T3584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.791588][ T3592] EXT4-fs (loop1): 1 truncate cleaned up [ 34.804163][ T3592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.818045][ T3584] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.57: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 34.843801][ T3584] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 34.889549][ T3584] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.57: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 34.951001][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.156610][ T3629] netlink: 'syz.3.75': attribute type 3 has an invalid length. [ 35.243115][ T3637] netlink: 96 bytes leftover after parsing attributes in process `syz.0.79'. [ 35.253019][ T3639] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 35.329212][ T3649] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 35.348054][ T3649] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 35.360983][ T3653] netlink: 'syz.4.86': attribute type 1 has an invalid length. [ 35.505699][ T3666] bond0: entered promiscuous mode [ 35.510962][ T3666] bond_slave_0: entered promiscuous mode [ 35.516702][ T3666] bond_slave_1: entered promiscuous mode [ 35.524475][ T3666] batadv0: entered promiscuous mode [ 35.530568][ T3666] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 35.543209][ T3666] bond0: left promiscuous mode [ 35.548034][ T3666] bond_slave_0: left promiscuous mode [ 35.553594][ T3666] bond_slave_1: left promiscuous mode [ 35.559949][ T3666] batadv0: left promiscuous mode [ 35.602782][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.876854][ T3698] loop0: detected capacity change from 0 to 8192 [ 35.890613][ T3698] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.196225][ T3724] loop3: detected capacity change from 0 to 512 [ 36.239419][ T3724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.264268][ T3724] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.508855][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.611934][ T3746] loop3: detected capacity change from 0 to 512 [ 36.641087][ T3736] syz.0.122 (3736) used greatest stack depth: 10680 bytes left [ 36.643355][ T3746] EXT4-fs (loop3): 1 orphan inode deleted [ 36.655850][ T3746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.668634][ T1702] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 36.670036][ T3746] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.734089][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.434918][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 37.434937][ T29] audit: type=1400 audit(1748693918.362:381): avc: denied { sqpoll } for pid=3823 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.479198][ T29] audit: type=1400 audit(1748693918.402:382): avc: denied { create } for pid=3826 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.505795][ T29] audit: type=1400 audit(1748693918.432:383): avc: denied { write } for pid=3826 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.571244][ T3831] loop0: detected capacity change from 0 to 2048 [ 37.592274][ T3306] Alternate GPT is invalid, using primary GPT. [ 37.598778][ T3306] loop0: p2 p3 p7 [ 37.612506][ T3831] Alternate GPT is invalid, using primary GPT. [ 37.618991][ T3831] loop0: p2 p3 p7 [ 37.666525][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 37.667512][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 37.678339][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 37.720947][ T29] audit: type=1400 audit(1748693918.652:384): avc: denied { create } for pid=3834 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.740402][ T29] audit: type=1400 audit(1748693918.652:385): avc: denied { ioctl } for pid=3834 comm="syz.0.160" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.780263][ T29] audit: type=1400 audit(1748693918.712:386): avc: denied { read } for pid=3834 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.860051][ T29] audit: type=1400 audit(1748693918.792:387): avc: denied { create } for pid=3847 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.915401][ T29] audit: type=1400 audit(1748693918.842:388): avc: denied { ioctl } for pid=3847 comm="syz.3.163" path="socket:[4882]" dev="sockfs" ino=4882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.940083][ T29] audit: type=1400 audit(1748693918.842:389): avc: denied { bind } for pid=3847 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.959517][ T29] audit: type=1400 audit(1748693918.842:390): avc: denied { setopt } for pid=3847 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.014656][ T3854] loop2: detected capacity change from 0 to 128 [ 38.067240][ T3858] Driver unsupported XDP return value 0 on prog (id 123) dev N/A, expect packet loss! [ 38.138178][ T3866] netlink: 76 bytes leftover after parsing attributes in process `syz.2.171'. [ 38.158853][ T3868] loop9: detected capacity change from 0 to 7 [ 38.165953][ T3868] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.174597][ T3868] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.182562][ T3868] loop9: unable to read partition table [ 38.188582][ T3868] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 38.188582][ T3868] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 38.193325][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.214144][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.223283][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.232957][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.248092][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.268836][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.277926][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.284821][ T3874] loop2: detected capacity change from 0 to 1024 [ 38.286496][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.294206][ T3874] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 38.309915][ T3874] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 38.320393][ T3874] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 38.331295][ T3874] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.175: unexpected bad inode w/o EXT4_IGET_BAD [ 38.344764][ T3874] EXT4-fs (loop2): no journal found [ 38.350016][ T3874] EXT4-fs (loop2): can't get journal size [ 38.356605][ T3874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.385507][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.540666][ T3887] macvlan1: entered promiscuous mode [ 38.546711][ T3887] ipvlan0: entered promiscuous mode [ 38.552583][ T3887] ipvlan0: left promiscuous mode [ 38.558318][ T3887] macvlan1: left promiscuous mode [ 38.580037][ T3889] 9pnet: p9_errstr2errno: server reported unknown error AC [ 38.649406][ T3893] loop2: detected capacity change from 0 to 2048 [ 38.662480][ T3893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.699800][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.751079][ T3904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 38.761830][ T3904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 38.845588][ T3914] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 38.860155][ T3918] Zero length message leads to an empty skb [ 38.943504][ T3924] loop4: detected capacity change from 0 to 2048 [ 38.994709][ T3924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.010063][ T3933] loop3: detected capacity change from 0 to 512 [ 39.027013][ T3933] EXT4-fs (loop3): filesystem is read-only [ 39.057858][ T3933] EXT4-fs (loop3): filesystem is read-only [ 39.063885][ T3933] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.070952][ T3933] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.201: bad orphan inode 16 [ 39.083709][ T3872] syz.1.174 (3872) used greatest stack depth: 9816 bytes left [ 39.095185][ T3933] ext4_test_bit(bit=15, block=3) = 0 [ 39.131437][ T3933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.245457][ T3951] loop2: detected capacity change from 0 to 512 [ 39.282483][ T3951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.311687][ T3951] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.327159][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.342974][ T3958] loop1: detected capacity change from 0 to 512 [ 39.363105][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.374520][ T3958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.389662][ T3958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.419967][ T3962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.428722][ T3962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.437542][ T3962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.446500][ T3962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.455711][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.466259][ T3962] geneve2: entered promiscuous mode [ 39.474178][ T3958] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 39.514584][ T3971] loop3: detected capacity change from 0 to 128 [ 39.521674][ T3958] EXT4-fs (loop1): 1 truncate cleaned up [ 39.527797][ T3958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.541395][ T3971] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.571063][ T3971] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.689529][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.782876][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.889212][ T3994] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 39.934274][ T3992] SELinux: ebitmap: truncated map [ 39.968535][ T3992] SELinux: failed to load policy [ 40.022294][ T4015] loop1: detected capacity change from 0 to 256 [ 40.058327][ T4015] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.082326][ T4022] loop4: detected capacity change from 0 to 1024 [ 40.091120][ T4022] ======================================================= [ 40.091120][ T4022] WARNING: The mand mount option has been deprecated and [ 40.091120][ T4022] and is ignored by this kernel. Remove the mand [ 40.091120][ T4022] option from the mount to silence this warning. [ 40.091120][ T4022] ======================================================= [ 40.171467][ T4022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.206632][ T4015] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 40.215318][ T4015] FAT-fs (loop1): Filesystem has been set read-only [ 40.224398][ T4022] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.238: Allocating blocks 497-513 which overlap fs metadata [ 40.257599][ T4035] loop3: detected capacity change from 0 to 128 [ 40.292099][ T4022] EXT4-fs (loop4): pa ffff8881064e9070: logic 16, phys. 145, len 23 [ 40.300350][ T4022] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 40.301812][ T4035] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.328261][ T4022] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 40.331538][ T4035] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.340638][ T4022] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.340638][ T4022] [ 40.360522][ T4022] EXT4-fs (loop4): Total free blocks count 0 [ 40.366543][ T4022] EXT4-fs (loop4): Free/Dirty block details [ 40.372523][ T4022] EXT4-fs (loop4): free_blocks=16 [ 40.377577][ T4022] EXT4-fs (loop4): dirty_blocks=0 [ 40.382709][ T4022] EXT4-fs (loop4): Block reservation details [ 40.388703][ T4022] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 40.412367][ T10] IPVS: starting estimator thread 0... [ 40.436086][ T4044] 9p: Unknown access argument 000000000000000000004àøÑmF3["å: -22 [ 40.488014][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.496385][ T4022] syz.4.238 (4022) used greatest stack depth: 9448 bytes left [ 40.509900][ T4042] IPVS: using max 2304 ests per chain, 115200 per kthread [ 40.544214][ T4052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 40.638481][ T4064] loop4: detected capacity change from 0 to 128 [ 40.657255][ T4070] netlink: 404 bytes leftover after parsing attributes in process `syz.1.257'. [ 40.668815][ T4064] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.733856][ T293] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.773662][ T4077] syz.0.261 uses obsolete (PF_INET,SOCK_PACKET) [ 40.777431][ T4078] loop3: detected capacity change from 0 to 1024 [ 40.807136][ T4078] EXT4-fs: Ignoring removed nobh option [ 40.812911][ T4078] EXT4-fs: Ignoring removed nobh option [ 40.828543][ T4078] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 40.846385][ T4078] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.259: inode #4294967295: comm syz.3.259: iget: illegal inode # [ 40.861701][ T4078] EXT4-fs (loop3): no journal found [ 40.861719][ T4078] EXT4-fs (loop3): can't get journal size [ 40.862831][ T4078] EXT4-fs (loop3): failed to initialize system zone (-22) [ 40.882113][ T4078] EXT4-fs (loop3): mount failed [ 40.964092][ T4094] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.267'. [ 41.098290][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 41.737671][ T4215] netlink: 'syz.4.292': attribute type 3 has an invalid length. [ 42.116801][ T4234] loop0: detected capacity change from 0 to 512 [ 42.142569][ T4234] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.169012][ T4234] EXT4-fs (loop0): 1 truncate cleaned up [ 42.186969][ T4234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.226668][ T4234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.292827][ T4242] xt_hashlimit: size too large, truncated to 1048576 [ 42.388848][ T4244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'. [ 42.397844][ T4244] netlink: 'syz.2.305': attribute type 7 has an invalid length. [ 42.405614][ T4244] netlink: 'syz.2.305': attribute type 8 has an invalid length. [ 42.413412][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 42.488012][ T4249] netlink: 'syz.0.304': attribute type 3 has an invalid length. [ 42.502708][ T4251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.519553][ T4251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.576307][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 42.576352][ T29] audit: type=1326 audit(1748693923.502:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.607189][ T29] audit: type=1326 audit(1748693923.502:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.630597][ T29] audit: type=1326 audit(1748693923.502:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.654045][ T29] audit: type=1326 audit(1748693923.502:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.677333][ T29] audit: type=1326 audit(1748693923.502:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.700642][ T29] audit: type=1326 audit(1748693923.502:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.723984][ T29] audit: type=1326 audit(1748693923.502:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.747242][ T29] audit: type=1326 audit(1748693923.502:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.770625][ T29] audit: type=1326 audit(1748693923.502:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.793933][ T29] audit: type=1326 audit(1748693923.512:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c1c88e969 code=0x7ffc0000 [ 42.991162][ T4276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 43.094469][ T4282] loop1: detected capacity change from 0 to 1024 [ 43.128320][ T4282] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.139316][ T4282] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.149558][ T4282] JBD2: no valid journal superblock found [ 43.155452][ T4282] EXT4-fs (loop1): Could not load journal inode [ 43.161973][ T4285] syz.4.322 (4285) used greatest stack depth: 9184 bytes left [ 43.192631][ T4282] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 43.228915][ T4184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.270104][ T4291] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 43.270104][ T4291] program syz.4.325 not setting count and/or reply_len properly [ 43.290215][ T4184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.343802][ T4184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.404521][ T4184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.509134][ T4184] bridge_slave_1: left allmulticast mode [ 43.514870][ T4184] bridge_slave_1: left promiscuous mode [ 43.520653][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.548340][ T4184] bridge_slave_0: left allmulticast mode [ 43.554184][ T4184] bridge_slave_0: left promiscuous mode [ 43.559936][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.702900][ T4184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.741401][ T4184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.765341][ T4184] bond0 (unregistering): Released all slaves [ 43.830397][ T4184] hsr_slave_0: left promiscuous mode [ 43.836165][ T4184] hsr_slave_1: left promiscuous mode [ 43.861559][ T4184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.869047][ T4184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.877549][ T4184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.885133][ T4184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.896254][ T4184] veth1_macvtap: left promiscuous mode [ 43.901888][ T4184] veth0_macvtap: left promiscuous mode [ 43.907498][ T4184] veth1_vlan: left promiscuous mode [ 43.913653][ T4184] veth0_vlan: left promiscuous mode [ 44.001585][ T4325] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 44.210439][ T4184] team0 (unregistering): Port device team_slave_1 removed [ 44.221426][ T4184] team0 (unregistering): Port device team_slave_0 removed [ 44.344549][ T4342] vlan2: entered allmulticast mode [ 44.364173][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 44.373173][ T4345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 44.382262][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 44.391872][ T4345] netlink: 'syz.0.345': attribute type 6 has an invalid length. [ 44.412110][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 44.525711][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.533279][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.544370][ T4298] bridge_slave_0: entered allmulticast mode [ 44.551141][ T4298] bridge_slave_0: entered promiscuous mode [ 44.585786][ T4358] vlan2: entered allmulticast mode [ 44.591113][ T4358] bond0: entered allmulticast mode [ 44.596332][ T4358] bond_slave_0: entered allmulticast mode [ 44.602215][ T4358] bond_slave_1: entered allmulticast mode [ 44.613645][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.621520][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.629412][ T4298] bridge_slave_1: entered allmulticast mode [ 44.636810][ T4298] bridge_slave_1: entered promiscuous mode [ 44.671357][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.687503][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.718370][ T4298] team0: Port device team_slave_0 added [ 44.737045][ T4298] team0: Port device team_slave_1 added [ 44.768968][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.776110][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.802576][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.822795][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.829843][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.856196][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.931086][ T4298] hsr_slave_0: entered promiscuous mode [ 44.937674][ T4298] hsr_slave_1: entered promiscuous mode [ 44.943994][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.952092][ T4298] Cannot create hsr debugfs directory [ 44.962184][ T4379] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 44.962184][ T4379] program syz.1.359 not setting count and/or reply_len properly [ 44.993278][ T4381] loop4: detected capacity change from 0 to 164 [ 45.009850][ T4375] Falling back ldisc for ttyS3. [ 45.027212][ T4381] process 'syz.4.360' launched '/dev/fd/3' with NULL argv: empty string added [ 45.050538][ T4381] syz.4.360: attempt to access beyond end of device [ 45.050538][ T4381] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 45.078351][ T4381] syz.4.360: attempt to access beyond end of device [ 45.078351][ T4381] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 45.172211][ T4298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.182633][ T4298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.210121][ T4298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.242822][ T4298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.269280][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.276400][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.283721][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.290798][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.369965][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.378773][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.426942][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.462497][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.488340][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.495578][ T4154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.536112][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.543992][ T4184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.588085][ T4421] __nla_validate_parse: 1 callbacks suppressed [ 45.588102][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 45.597045][ T4298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.614413][ T4298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.670933][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 45.721900][ T4421] erspan0: entered promiscuous mode [ 45.729982][ T4421] macvtap1: entered promiscuous mode [ 45.735576][ T4421] macvtap1: entered allmulticast mode [ 45.741232][ T4421] erspan0: entered allmulticast mode [ 45.824842][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.998042][ T4298] veth0_vlan: entered promiscuous mode [ 46.013378][ T4298] veth1_vlan: entered promiscuous mode [ 46.042426][ T4298] veth0_macvtap: entered promiscuous mode [ 46.058407][ T4298] veth1_macvtap: entered promiscuous mode [ 46.079068][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.095258][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.105277][ T4472] loop4: detected capacity change from 0 to 164 [ 46.107176][ T4298] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.120655][ T4298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.121067][ T4472] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.129394][ T4298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.146607][ T4298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.190731][ T4472] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.684454][ T4496] netlink: 180 bytes leftover after parsing attributes in process `syz.0.405'. [ 46.743930][ T4500] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.407'. [ 46.770258][ T4504] loop4: detected capacity change from 0 to 128 [ 46.914515][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 47.139521][ T4538] gtp0: entered promiscuous mode [ 47.254973][ T1006] IPVS: starting estimator thread 0... [ 47.351303][ T4551] IPVS: using max 2352 ests per chain, 117600 per kthread [ 47.565332][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.574532][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.624241][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 47.624261][ T29] audit: type=1400 audit(1748693928.542:783): avc: denied { append } for pid=4586 comm="syz.5.446" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.705221][ T29] audit: type=1400 audit(1748693928.602:784): avc: denied { write } for pid=4590 comm="syz.0.448" path="socket:[7134]" dev="sockfs" ino=7134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.779612][ T29] audit: type=1400 audit(1748693928.702:785): avc: denied { kexec_image_load } for pid=4597 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 47.844180][ T29] audit: type=1400 audit(1748693928.772:786): avc: denied { name_connect } for pid=4599 comm="syz.0.452" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 47.867408][ T29] audit: type=1400 audit(1748693928.792:787): avc: denied { listen } for pid=4599 comm="syz.0.452" lport=51646 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.890610][ T29] audit: type=1400 audit(1748693928.792:788): avc: denied { module_request } for pid=4599 comm="syz.0.452" kmod="crypto-hmac(md5)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.918268][ T29] audit: type=1400 audit(1748693928.852:789): avc: denied { accept } for pid=4599 comm="syz.0.452" lport=51646 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.192344][ T4618] loop0: detected capacity change from 0 to 512 [ 48.199318][ T4618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.218397][ T4618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.241857][ T4618] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.247008][ T29] audit: type=1400 audit(1748693929.172:790): avc: denied { mount } for pid=4617 comm="syz.0.458" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.276900][ T29] audit: type=1400 audit(1748693929.212:791): avc: denied { add_name } for pid=4617 comm="syz.0.458" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.297715][ T29] audit: type=1400 audit(1748693929.212:792): avc: denied { create } for pid=4617 comm="syz.0.458" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.419107][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.457060][ T4635] bridge: RTM_NEWNEIGH with invalid ether address [ 48.476146][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 48.529322][ T4645] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 48.535150][ T4647] loop2: detected capacity change from 0 to 512 [ 48.545223][ T4647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.557734][ T4647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.570471][ T4647] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.596191][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.608581][ T4653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 48.725021][ T4670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.725703][ T4666] SELinux: failed to load policy [ 48.766085][ T4672] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.482'. [ 48.875093][ T4688] loop4: detected capacity change from 0 to 128 [ 48.884053][ T4690] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 48.890637][ T4690] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.898327][ T4690] vhci_hcd vhci_hcd.0: Device attached [ 48.915244][ T4691] vhci_hcd: connection closed [ 48.915404][ T4184] vhci_hcd: stop threads [ 48.924458][ T4184] vhci_hcd: release socket [ 48.928074][ T4694] loop2: detected capacity change from 0 to 1024 [ 48.928883][ T4184] vhci_hcd: disconnect device [ 48.940783][ T4694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.949384][ T4694] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 48.960416][ T4694] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 48.971893][ T4694] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.982202][ T4694] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.492: inode #1: comm syz.2.492: iget: illegal inode # [ 48.995917][ T4694] EXT4-fs (loop2): Remounting filesystem read-only [ 49.002689][ T4694] EXT4-fs (loop2): no journal found [ 49.231331][ T1006] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0 [ 49.238821][ T1006] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0 [ 49.246267][ T1006] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0 [ 49.253773][ T1006] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0 [ 49.261287][ T1006] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0 [ 49.268709][ T1006] hid-generic FFFC:0003:0000.0001: unknown main item tag 0x0 [ 49.276803][ T1006] hid-generic FFFC:0003:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.306701][ T4715] bond_slave_1: entered promiscuous mode [ 49.312862][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 49.329861][ T4715] bond0: (slave bond_slave_1): Releasing backup interface [ 49.341757][ T4715] bond_slave_1 (unregistering): left promiscuous mode [ 49.395979][ T4723] loop2: detected capacity change from 0 to 8192 [ 49.446315][ T4725] loop5: detected capacity change from 0 to 8192 [ 49.499070][ T4734] bridge0: entered promiscuous mode [ 49.516662][ T4734] bridge0: port 3(macsec1) entered blocking state [ 49.523326][ T4734] bridge0: port 3(macsec1) entered disabled state [ 49.531381][ T4734] macsec1: entered allmulticast mode [ 49.536723][ T4734] bridge0: entered allmulticast mode [ 49.542786][ T4734] macsec1: left allmulticast mode [ 49.547936][ T4734] bridge0: left allmulticast mode [ 49.553598][ T4734] bridge0: left promiscuous mode [ 49.816547][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881191a6400: rx timeout, send abort [ 49.825001][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881191a6400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 50.388432][ T4756] syz.0.519 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.630053][ T4777] bond1: entered promiscuous mode [ 50.635158][ T4777] bond1: entered allmulticast mode [ 50.641414][ T4777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.651592][ T4777] bond1 (unregistering): Released all slaves [ 50.926548][ T4812] tipc: Started in network mode [ 50.931545][ T4812] tipc: Node identity 4ea7ced6d8a, cluster identity 4711 [ 50.938856][ T4812] tipc: Enabled bearer , priority 0 [ 50.948603][ T4811] tipc: Disabling bearer [ 51.038163][ T4826] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 51.052398][ T4826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.072409][ T4826] bond1: (slave gretap1): making interface the new active one [ 51.080909][ T4826] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 51.193427][ T4837] loop0: detected capacity change from 0 to 256 [ 51.212218][ T4837] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.263766][ T4837] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 51.273846][ T4837] FAT-fs (loop0): Filesystem has been set read-only [ 51.300278][ T4840] tipc: Started in network mode [ 51.305192][ T4840] tipc: Node identity 4, cluster identity 4711 [ 51.311458][ T4840] tipc: Node number set to 4 [ 51.394154][ T4844] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.489434][ T4850] xt_hashlimit: max too large, truncated to 1048576 [ 51.551872][ T4866] netlink: 'syz.1.570': attribute type 4 has an invalid length. [ 51.603899][ T4874] netlink: 36 bytes leftover after parsing attributes in process `syz.5.574'. [ 51.632316][ T4877] loop5: detected capacity change from 0 to 128 [ 51.658095][ T4877] syz.5.576: attempt to access beyond end of device [ 51.658095][ T4877] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 51.708444][ T4889] xt_hashlimit: size too large, truncated to 1048576 [ 51.835280][ T4901] wg2: entered promiscuous mode [ 51.840306][ T4901] wg2: entered allmulticast mode [ 51.976622][ T4917] tipc: Started in network mode [ 51.981612][ T4917] tipc: Node identity 4, cluster identity 4711 [ 51.988059][ T4917] tipc: Node number set to 4 [ 52.011070][ T4919] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 52.056883][ T4922] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 52.077118][ T4922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.089440][ T4922] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 52.127436][ T4933] netlink: 76 bytes leftover after parsing attributes in process `syz.0.601'. [ 52.194192][ T4945] loop5: detected capacity change from 0 to 512 [ 52.250384][ T4945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.257076][ T4945] EXT4-fs: Ignoring removed orlov option [ 52.278232][ T4945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.294526][ T4945] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.441976][ T4298] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.547196][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'. [ 52.557269][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.621'. [ 52.695525][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 52.695544][ T29] audit: type=1400 audit(1748693933.622:1315): avc: denied { execmem } for pid=4998 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.738704][ T4999] loop2: detected capacity change from 0 to 2048 [ 52.751331][ T4999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.766448][ T29] audit: type=1400 audit(1748693933.702:1316): avc: denied { read write open } for pid=4998 comm="syz.2.627" path="/134/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.871636][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.958752][ T5013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.632'. [ 53.029438][ T5017] loop2: detected capacity change from 0 to 512 [ 53.036922][ T5017] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.049776][ T5017] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.644: corrupted xattr entries [ 53.062620][ T5017] EXT4-fs (loop2): Remounting filesystem read-only [ 53.085975][ T5017] EXT4-fs (loop2): 1 truncate cleaned up [ 53.092713][ T5024] loop4: detected capacity change from 0 to 512 [ 53.100356][ T5017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.122954][ T29] audit: type=1400 audit(1748693934.052:1317): avc: denied { connect } for pid=5025 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.148157][ T29] audit: type=1400 audit(1748693934.072:1318): avc: denied { name_bind } for pid=5016 comm="syz.2.644" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.169829][ T29] audit: type=1400 audit(1748693934.072:1319): avc: denied { node_bind } for pid=5016 comm="syz.2.644" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.203148][ T29] audit: type=1400 audit(1748693934.132:1320): avc: denied { mount } for pid=5028 comm="syz.0.638" name="/" dev="autofs" ino=8871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 53.237684][ T5024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.255425][ T29] audit: type=1400 audit(1748693934.182:1321): avc: denied { read } for pid=5025 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.278442][ T5024] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.296606][ T29] audit: type=1400 audit(1748693934.222:1322): avc: denied { map } for pid=5023 comm="syz.4.636" path="/134/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.339735][ T29] audit: type=1400 audit(1748693934.252:1323): avc: denied { create } for pid=5030 comm="syz.5.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.359413][ T29] audit: type=1400 audit(1748693934.252:1324): avc: denied { setopt } for pid=5030 comm="syz.5.639" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.381365][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.392404][ T5037] SELinux: ebitmap: truncated map [ 53.398507][ T5037] SELinux: failed to load policy [ 53.437532][ T5045] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 53.467239][ T5047] netlink: 96 bytes leftover after parsing attributes in process `syz.4.645'. [ 53.525029][ T5057] loop5: detected capacity change from 0 to 128 [ 53.534460][ T5057] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.549219][ T5057] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.581690][ T4298] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.715260][ T5073] loop0: detected capacity change from 0 to 1024 [ 53.780195][ T5073] EXT4-fs: Ignoring removed nobh option [ 53.785824][ T5073] EXT4-fs: Ignoring removed nobh option [ 53.824480][ T5073] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 53.850737][ T5073] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.658: inode #4294967295: comm syz.0.658: iget: illegal inode # [ 53.876923][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.890885][ T5073] EXT4-fs (loop0): no journal found [ 53.896215][ T5073] EXT4-fs (loop0): can't get journal size [ 53.908874][ T5082] netlink: 332 bytes leftover after parsing attributes in process `syz.1.672'. [ 53.913487][ T5073] EXT4-fs (loop0): failed to initialize system zone (-22) [ 53.926439][ T5073] EXT4-fs (loop0): mount failed [ 54.000891][ T5091] IPv4: Oversized IP packet from 127.202.26.0 [ 54.176075][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 54.186096][ T5107] loop0: detected capacity change from 0 to 8192 [ 54.198508][ T5107] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.308695][ T5125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.682'. [ 54.317797][ T5125] netlink: 'syz.4.682': attribute type 7 has an invalid length. [ 54.325563][ T5125] netlink: 'syz.4.682': attribute type 8 has an invalid length. [ 54.333279][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 54.498459][ T5140] netlink: 'syz.5.687': attribute type 13 has an invalid length. [ 54.512842][ T5115] loop1: detected capacity change from 0 to 1024 [ 54.519692][ T5115] EXT4-fs: inline encryption not supported [ 54.525654][ T5115] EXT4-fs: Ignoring removed i_version option [ 54.552478][ T5115] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.566365][ T5115] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.677: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.582392][ T5115] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.677: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.589548][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.603777][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.618461][ T5115] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.677: Failed to acquire dquot type 0 [ 54.642074][ T5152] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 54.648372][ T5115] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 54.668763][ T5115] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.677: mark_inode_dirty error [ 54.680343][ T5115] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 54.691246][ T5115] EXT4-fs (loop1): 1 orphan inode deleted [ 54.697637][ T5115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.710048][ T4178] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.711776][ T5140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.727727][ T4178] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0 [ 54.735577][ T5140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.771693][ T5140] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.781074][ T5140] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.789997][ T5140] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.798956][ T5140] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.812656][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.829362][ T3320] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 54.842791][ T3320] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 54.863276][ T5156] bond2: (slave gretap2): making interface the new active one [ 54.870846][ T3320] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 54.882867][ T5156] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 54.935194][ T5162] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 54.949514][ T5166] netlink: 'syz.4.697': attribute type 3 has an invalid length. [ 54.961490][ T5164] loop1: detected capacity change from 0 to 512 [ 54.968993][ T5164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.016548][ T5164] EXT4-fs (loop1): 1 truncate cleaned up [ 55.037190][ T5164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.062612][ T5164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.087725][ T5180] netlink: 'syz.5.703': attribute type 6 has an invalid length. [ 55.127361][ T5186] loop2: detected capacity change from 0 to 164 [ 55.143587][ T5186] syz.2.707: attempt to access beyond end of device [ 55.143587][ T5186] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.158105][ T5186] syz.2.707: attempt to access beyond end of device [ 55.158105][ T5186] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.284851][ T4180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.312470][ T5205] loop4: detected capacity change from 0 to 512 [ 55.326858][ T5205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.360925][ T5212] bond_slave_1: entered promiscuous mode [ 55.368376][ T5205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.385897][ T5212] bond0: (slave bond_slave_1): Releasing backup interface [ 55.396772][ T5205] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.436503][ T5212] bond_slave_1 (unregistering): left promiscuous mode [ 55.446151][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.473799][ T4180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.556577][ T4180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.591186][ T5226] loop1: detected capacity change from 0 to 128 [ 55.603803][ T5232] loop4: detected capacity change from 0 to 256 [ 55.610009][ T5226] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.627538][ T4180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.641338][ T5226] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.721189][ T4180] bridge_slave_1: left allmulticast mode [ 55.726948][ T4180] bridge_slave_1: left promiscuous mode [ 55.732840][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.740961][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.743863][ T5243] loop4: detected capacity change from 0 to 512 [ 55.758955][ T5243] ext4: Unknown parameter 'permit_directio' [ 55.768682][ T4180] bridge_slave_0: left allmulticast mode [ 55.774507][ T4180] bridge_slave_0: left promiscuous mode [ 55.780315][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.785686][ T5245] loop5: detected capacity change from 0 to 1024 [ 55.834999][ T5245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.872791][ T5245] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 55.892364][ T4180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.898112][ T5244] EXT4-fs (loop5): pa ffff8881065dd770: logic 48, phys. 177, len 21 [ 55.909301][ T5244] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 55.922869][ T4180] bond_slave_0: left allmulticast mode [ 55.933297][ T4180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.944580][ T4298] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.954083][ T4180] bond_slave_1: left allmulticast mode [ 55.960613][ T4180] bond0 (unregistering): Released all slaves [ 56.021653][ T4180] tipc: Left network mode [ 56.033249][ T5262] loop1: detected capacity change from 0 to 164 [ 56.038335][ T4180] hsr_slave_0: left promiscuous mode [ 56.045180][ T5262] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.053616][ T4180] hsr_slave_1: left promiscuous mode [ 56.059457][ T5262] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.069671][ T4180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.077114][ T4180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.091226][ T4180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.098674][ T4180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.126223][ T4180] veth1_macvtap: left promiscuous mode [ 56.131864][ T4180] veth0_macvtap: left promiscuous mode [ 56.137398][ T4180] veth1_vlan: left promiscuous mode [ 56.142728][ T4180] veth0_vlan: left promiscuous mode [ 56.211834][ T4180] team0 (unregistering): Port device team_slave_1 removed [ 56.221341][ T4180] team0 (unregistering): Port device team_slave_0 removed [ 56.265346][ T5264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.275554][ T5265] bond1 (unregistering): Released all slaves [ 56.354448][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 56.398877][ T5286] loop4: detected capacity change from 0 to 512 [ 56.407722][ T5286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.437452][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.444706][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.453602][ T5286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.466408][ T5286] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.477251][ T5216] bridge_slave_0: entered allmulticast mode [ 56.485593][ T5216] bridge_slave_0: entered promiscuous mode [ 56.492483][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.499773][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.507152][ T5216] bridge_slave_1: entered allmulticast mode [ 56.513741][ T5216] bridge_slave_1: entered promiscuous mode [ 56.541143][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.552026][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.587103][ T5216] team0: Port device team_slave_0 added [ 56.595145][ T5216] team0: Port device team_slave_1 added [ 56.615153][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.622297][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.648414][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.704801][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.712008][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.738283][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.765093][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.827324][ T5216] hsr_slave_0: entered promiscuous mode [ 56.847336][ T5216] hsr_slave_1: entered promiscuous mode [ 56.949799][ T5321] __nla_validate_parse: 6 callbacks suppressed [ 56.949819][ T5321] netlink: 68 bytes leftover after parsing attributes in process `syz.2.758'. [ 56.991245][ T5325] pimreg: entered allmulticast mode [ 57.019177][ T5325] pimreg: left allmulticast mode [ 57.036191][ T5329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.051607][ T5216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.061611][ T5216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.071032][ T5216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.082178][ T5216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.114829][ T5329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.153050][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.163710][ T5329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.184185][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.196841][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.204012][ T4180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.229492][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.236790][ T4180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.257110][ T5329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.327934][ T5329] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.355228][ T5342] loop2: detected capacity change from 0 to 512 [ 57.369653][ T5329] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.381353][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.388738][ T5342] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.400353][ T5329] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.427363][ T5342] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.766: bg 0: block 248: padding at end of block bitmap is not set [ 57.449781][ T5329] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.459815][ T5342] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.766: Failed to acquire dquot type 1 [ 57.490495][ T5342] EXT4-fs (loop2): 1 truncate cleaned up [ 57.498882][ T5353] loop5: detected capacity change from 0 to 512 [ 57.508623][ T5342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.523463][ T5353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.547816][ T1006] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 57.555809][ T1006] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 57.564370][ T1006] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 57.572803][ T1006] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 57.586257][ T5353] EXT4-fs (loop5): 1 truncate cleaned up [ 57.598211][ T5353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.618172][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.657574][ T4298] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.716638][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 57.716657][ T29] audit: type=1400 audit(1748693938.642:1449): avc: denied { kexec_image_load } for pid=5373 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 57.748882][ T5216] veth0_vlan: entered promiscuous mode [ 57.762831][ T5376] loop5: detected capacity change from 0 to 1024 [ 57.765292][ T5378] loop2: detected capacity change from 0 to 512 [ 57.776018][ T5216] veth1_vlan: entered promiscuous mode [ 57.792665][ T5378] EXT4-fs: Ignoring removed bh option [ 57.799180][ T5216] veth0_macvtap: entered promiscuous mode [ 57.805871][ T5378] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.815034][ T5378] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 57.825351][ T5376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.840131][ T5216] veth1_macvtap: entered promiscuous mode [ 57.851698][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.868693][ T29] audit: type=1400 audit(1748693938.792:1450): avc: denied { execute } for pid=5381 comm="syz.1.778" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 57.870423][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.903349][ T5216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.912312][ T5216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.919937][ T5378] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 57.921340][ T5216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.939083][ T5216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.957089][ T5378] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 57.976588][ T29] audit: type=1400 audit(1748693938.902:1451): avc: denied { mounton } for pid=5216 comm="syz-executor" path="/root/syzkaller.OAnMwV/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.977415][ T5376] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 58.007820][ T29] audit: type=1400 audit(1748693938.942:1452): avc: denied { mount } for pid=5216 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.014030][ T5376] EXT4-fs (loop5): This should not happen!! Data will be lost [ 58.014030][ T5376] [ 58.035972][ T29] audit: type=1400 audit(1748693938.942:1453): avc: denied { mounton } for pid=5216 comm="syz-executor" path="/root/syzkaller.OAnMwV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.045869][ T5376] EXT4-fs (loop5): Total free blocks count 0 [ 58.072654][ T29] audit: type=1400 audit(1748693938.942:1454): avc: denied { mounton } for pid=5216 comm="syz-executor" path="/root/syzkaller.OAnMwV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.078566][ T5376] EXT4-fs (loop5): Free/Dirty block details [ 58.107255][ T5378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.112150][ T5376] EXT4-fs (loop5): free_blocks=0 [ 58.129877][ T5376] EXT4-fs (loop5): dirty_blocks=0 [ 58.135003][ T5376] EXT4-fs (loop5): Block reservation details [ 58.141038][ T5376] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 58.148290][ T29] audit: type=1400 audit(1748693939.072:1455): avc: denied { mounton } for pid=5216 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.171499][ T29] audit: type=1400 audit(1748693939.072:1456): avc: denied { mount } for pid=5216 comm="syz-executor" name="/" dev="gadgetfs" ino=4194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.216470][ T4298] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.226657][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.270653][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 58.305376][ T29] audit: type=1400 audit(1748693939.232:1457): avc: denied { firmware_load } for pid=5396 comm="syz.6.783" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 58.332788][ T5399] sch_fq: defrate 2048 ignored. [ 58.392387][ T5403] loop4: detected capacity change from 0 to 512 [ 58.399029][ T5403] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.407894][ T5403] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.432351][ T29] audit: type=1400 audit(1748693939.362:1458): avc: denied { read write } for pid=5407 comm="syz.2.788" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.432581][ T5403] EXT4-fs (loop4): 1 truncate cleaned up [ 58.508265][ T5403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.524639][ T5403] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.907361][ T5438] loop1: detected capacity change from 0 to 1024 [ 58.914551][ T5438] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.962782][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 58.974629][ T5447] ipvlan0: entered promiscuous mode [ 58.983572][ T5447] ipvlan0: left promiscuous mode [ 58.999894][ T5446] vlan2: entered allmulticast mode [ 59.005596][ T5438] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.007860][ T5449] loop2: detected capacity change from 0 to 1024 [ 59.021357][ T5449] EXT4-fs: Ignoring removed nobh option [ 59.027326][ T5449] EXT4-fs: Ignoring removed bh option [ 59.033260][ T5438] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.040636][ T5438] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 59.055456][ T5438] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 59.068830][ T5449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.084451][ T5438] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.803: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.098199][ T5438] EXT4-fs (loop1): Remounting filesystem read-only [ 59.106095][ T5438] EXT4-fs (loop1): 1 orphan inode deleted [ 59.113042][ T5438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.149991][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.233145][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.308077][ T5480] loop2: detected capacity change from 0 to 2048 [ 59.350314][ T5480] loop2: p1 < > p4 [ 59.355361][ T5480] loop2: p4 size 8388608 extends beyond EOD, truncated [ 59.414721][ T5496] IPv4: Oversized IP packet from 127.202.26.0 [ 59.442396][ T5500] loop2: detected capacity change from 0 to 512 [ 59.477046][ T5500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.493223][ T5500] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.579355][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.620535][ T5518] loop2: detected capacity change from 0 to 1024 [ 59.633924][ T5518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.651505][ T5518] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.833: Allocating blocks 497-513 which overlap fs metadata [ 59.669227][ T5518] EXT4-fs (loop2): pa ffff8881064e93f0: logic 16, phys. 145, len 23 [ 59.677520][ T5518] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 59.688868][ T5518] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 59.701161][ T5518] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.701161][ T5518] [ 59.710945][ T5518] EXT4-fs (loop2): Total free blocks count 0 [ 59.715768][ T5529] loop4: detected capacity change from 0 to 2048 [ 59.716980][ T5518] EXT4-fs (loop2): Free/Dirty block details [ 59.716997][ T5518] EXT4-fs (loop2): free_blocks=16 [ 59.734540][ T5518] EXT4-fs (loop2): dirty_blocks=0 [ 59.739704][ T5518] EXT4-fs (loop2): Block reservation details [ 59.745802][ T5518] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 59.770628][ T5529] loop4: p1 < > p4 [ 59.775551][ T5529] loop4: p4 size 8388608 extends beyond EOD, truncated [ 59.809704][ T5535] loop6: detected capacity change from 0 to 128 [ 59.819871][ T5535] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.027357][ T5556] loop6: detected capacity change from 0 to 1024 [ 60.057267][ T5556] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.853: Allocating blocks 497-513 which overlap fs metadata [ 60.076996][ T5556] EXT4-fs (loop6): pa ffff8881064e93f0: logic 16, phys. 145, len 23 [ 60.085391][ T5556] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 60.102767][ T5556] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 60.115090][ T5556] EXT4-fs (loop6): This should not happen!! Data will be lost [ 60.115090][ T5556] [ 60.125098][ T5556] EXT4-fs (loop6): Total free blocks count 0 [ 60.126715][ T5563] loop4: detected capacity change from 0 to 2048 [ 60.131209][ T5556] EXT4-fs (loop6): Free/Dirty block details [ 60.143670][ T5556] EXT4-fs (loop6): free_blocks=16 [ 60.148726][ T5556] EXT4-fs (loop6): dirty_blocks=0 [ 60.153820][ T5556] EXT4-fs (loop6): Block reservation details [ 60.160078][ T5556] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 60.311408][ T5569] validate_nla: 1 callbacks suppressed [ 60.311426][ T5569] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 60.332103][ T5569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.350472][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'. [ 60.370886][ T5569] bond3 (unregistering): Released all slaves [ 60.441903][ T5580] loop1: detected capacity change from 0 to 512 [ 60.450447][ T5580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.457232][ T5580] EXT4-fs: Ignoring removed orlov option [ 60.470058][ T5582] xt_hashlimit: size too large, truncated to 1048576 [ 60.566086][ T5580] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.778100][ T5602] loop5: detected capacity change from 0 to 512 [ 60.809732][ T5602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.822462][ T5602] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.037508][ T5609] loop2: detected capacity change from 0 to 2048 [ 61.053544][ T5611] loop1: detected capacity change from 0 to 8192 [ 61.068370][ T5613] loop6: detected capacity change from 0 to 512 [ 61.086660][ T5615] loop5: detected capacity change from 0 to 128 [ 61.098592][ T5609] Alternate GPT is invalid, using primary GPT. [ 61.105013][ T5609] loop2: p2 p3 p7 [ 61.109178][ T5613] EXT4-fs (loop6): 1 orphan inode deleted [ 61.116929][ T5613] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.126547][ T4201] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:55: Failed to release dquot type 1 [ 61.166708][ T5615] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.208012][ T5621] loop4: detected capacity change from 0 to 1024 [ 61.224510][ T5621] EXT4-fs: Ignoring removed nobh option [ 61.230209][ T5621] EXT4-fs: Ignoring removed bh option [ 61.307122][ T5629] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 61.461299][ T5640] xt_hashlimit: size too large, truncated to 1048576 [ 61.645428][ T5644] loop6: detected capacity change from 0 to 164 [ 61.670812][ T5644] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.682231][ T5644] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.727344][ T5646] loop6: detected capacity change from 0 to 512 [ 61.763947][ T5646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.796247][ T5646] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.963930][ T5653] loop5: detected capacity change from 0 to 2048 [ 61.973276][ T5653] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 62.007356][ T5657] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 62.046365][ T5657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.076844][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 62.095125][ T5657] bond1 (unregistering): Released all slaves [ 62.164968][ T5666] loop2: detected capacity change from 0 to 128 [ 62.180903][ T5662] loop6: detected capacity change from 0 to 128 [ 62.193340][ T5664] loop5: detected capacity change from 0 to 2048 [ 62.200977][ T5662] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.211650][ T5666] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.252490][ T5664] Alternate GPT is invalid, using primary GPT. [ 62.258918][ T5664] loop5: p2 p3 p7 [ 62.290251][ T4165] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.327091][ T5679] loop5: detected capacity change from 0 to 164 [ 62.339204][ T5681] loop2: detected capacity change from 0 to 1024 [ 62.347593][ T5681] EXT4-fs: Ignoring removed orlov option [ 62.353876][ T5679] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.364498][ T5679] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.427917][ T5681] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.455199][ T5681] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.893: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 62.479553][ T5681] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.893: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 62.781424][ T5704] loop4: detected capacity change from 0 to 128 [ 62.820467][ T5710] loop4: detected capacity change from 0 to 128 [ 62.829146][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 62.829163][ T29] audit: type=1400 audit(1748693943.752:1577): avc: denied { create } for pid=5707 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.855636][ T5710] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.888361][ T29] audit: type=1400 audit(1748693943.762:1578): avc: denied { bind } for pid=5707 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.907770][ T29] audit: type=1400 audit(1748693943.762:1579): avc: denied { write } for pid=5707 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.935407][ T5713] loop2: detected capacity change from 0 to 512 [ 62.943128][ T5713] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.963402][ T5713] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.992579][ T5717] bond0: entered promiscuous mode [ 62.997700][ T5717] bond_slave_0: entered promiscuous mode [ 63.005889][ T5717] batadv0: entered promiscuous mode [ 63.012274][ T5717] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 63.021333][ T5717] bond0: left promiscuous mode [ 63.026155][ T5717] bond_slave_0: left promiscuous mode [ 63.032178][ T5717] batadv0: left promiscuous mode [ 63.114931][ T5720] loop4: detected capacity change from 0 to 512 [ 63.124864][ T5720] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.140129][ T5720] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.911: corrupted xattr entries [ 63.151866][ T5720] EXT4-fs (loop4): Remounting filesystem read-only [ 63.158547][ T5720] EXT4-fs (loop4): 1 truncate cleaned up [ 63.175850][ T5725] loop2: detected capacity change from 0 to 512 [ 63.184189][ T5725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.199915][ T5725] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.211647][ T5725] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.226844][ T5725] EXT4-fs (loop2): 1 truncate cleaned up [ 63.454540][ T5741] loop1: detected capacity change from 0 to 128 [ 63.462335][ T29] audit: type=1400 audit(1748693944.392:1580): avc: denied { write } for pid=36 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11250 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.502749][ T5745] loop1: detected capacity change from 0 to 128 [ 63.526567][ T5745] +}[@: attempt to access beyond end of device [ 63.526567][ T5745] loop1: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 63.539646][ T5745] buffer_io_error: 2 callbacks suppressed [ 63.539659][ T5745] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 63.556537][ T5745] +}[@: attempt to access beyond end of device [ 63.556537][ T5745] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 63.569535][ T5745] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 63.578414][ T5745] +}[@: attempt to access beyond end of device [ 63.578414][ T5745] loop1: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 63.591355][ T5745] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 63.600082][ T5745] +}[@: attempt to access beyond end of device [ 63.600082][ T5745] loop1: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 63.613120][ T5745] Buffer I/O error on dev loop1, logical block 134, lost async page write [ 63.621794][ T5745] +}[@: attempt to access beyond end of device [ 63.621794][ T5745] loop1: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 63.634783][ T5745] Buffer I/O error on dev loop1, logical block 135, lost async page write [ 63.643600][ T5745] +}[@: attempt to access beyond end of device [ 63.643600][ T5745] loop1: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 63.656621][ T5745] Buffer I/O error on dev loop1, logical block 136, lost async page write [ 63.665375][ T5745] +}[@: attempt to access beyond end of device [ 63.665375][ T5745] loop1: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 63.678417][ T5745] +}[@: attempt to access beyond end of device [ 63.678417][ T5745] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 63.691616][ T5745] +}[@: attempt to access beyond end of device [ 63.691616][ T5745] loop1: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 63.801400][ T29] audit: type=1400 audit(1748693944.732:1581): avc: denied { accept } for pid=5751 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.801515][ T5754] loop1: detected capacity change from 0 to 512 [ 63.830033][ T5754] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #17: comm syz.1.925: iget: bogus i_mode (0) [ 63.843726][ T5754] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.925: couldn't read orphan inode 17 (err -117) [ 63.860475][ T29] audit: type=1400 audit(1748693944.792:1582): avc: denied { remount } for pid=5752 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.880215][ T5754] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 63.880668][ T29] audit: type=1404 audit(1748693944.792:1583): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 63.903389][ T29] audit: type=1400 audit(1748693944.792:1584): avc: denied { lock } for pid=5746 comm="syz.6.920" path="socket:[12299]" dev="sockfs" ino=12299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=0 [ 63.919016][ T3320] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /158/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 63.927254][ T29] audit: type=1400 audit(1748693944.812:1585): avc: denied { prog_load } for pid=5752 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.965778][ T29] audit: type=1400 audit(1748693944.842:1586): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 63.987710][ T3320] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor: bg 0: block 7: invalid block bitmap [ 64.000354][ T3320] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.010484][ T3320] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 64.024182][ T3320] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 64.031009][ T5760] loop5: detected capacity change from 0 to 512 [ 64.052942][ T5762] loop4: detected capacity change from 0 to 512 [ 64.059548][ T5762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.066261][ T5762] EXT4-fs: Ignoring removed orlov option [ 64.074579][ T5760] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.093648][ T5762] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.157235][ T5770] syzkaller1: entered promiscuous mode [ 64.163046][ T5770] syzkaller1: entered allmulticast mode [ 64.419517][ T5777] loop4: detected capacity change from 0 to 8192 [ 64.726701][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 64.762126][ T5806] SELinux: failed to load policy [ 64.786852][ T5809] netlink: 'syz.6.943': attribute type 1 has an invalid length. [ 64.794639][ T5809] netlink: 'syz.6.943': attribute type 4 has an invalid length. [ 64.802337][ T5809] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.943'. [ 64.877956][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.885339][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.910392][ T5783] bridge_slave_0: entered allmulticast mode [ 64.917087][ T5783] bridge_slave_0: entered promiscuous mode [ 64.924259][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.931662][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.939448][ T5783] bridge_slave_1: entered allmulticast mode [ 64.946803][ T5783] bridge_slave_1: entered promiscuous mode [ 64.947476][ T5816] loop2: detected capacity change from 0 to 128 [ 64.981264][ T5816] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.032209][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.043712][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.053093][ T4201] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.069556][ T5783] team0: Port device team_slave_0 added [ 65.077384][ T5783] team0: Port device team_slave_1 added [ 65.094364][ T5821] loop2: detected capacity change from 0 to 512 [ 65.102557][ T5821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.110583][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.117590][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.143702][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.158155][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.159110][ T5821] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.165263][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.165343][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.231038][ T5783] hsr_slave_0: entered promiscuous mode [ 65.237162][ T5783] hsr_slave_1: entered promiscuous mode [ 65.243137][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.259671][ T5783] Cannot create hsr debugfs directory [ 65.364760][ T5829] loop5: detected capacity change from 0 to 128 [ 65.385753][ T5783] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 65.394725][ T5783] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 65.403413][ T5829] +}[@: attempt to access beyond end of device [ 65.403413][ T5829] loop5: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 65.416498][ T5829] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 65.427653][ T5783] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 65.434670][ T5829] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 65.443350][ T5829] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 65.452246][ T5829] Buffer I/O error on dev loop5, logical block 134, lost async page write [ 65.457406][ T5783] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 65.517598][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.532695][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.543844][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.551137][ T4178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.564800][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.571977][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.594053][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.604531][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.672675][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.806208][ T5783] veth0_vlan: entered promiscuous mode [ 65.817118][ T5783] veth1_vlan: entered promiscuous mode [ 65.838361][ T5783] veth0_macvtap: entered promiscuous mode [ 65.840219][ T5864] loop4: detected capacity change from 0 to 1024 [ 65.851720][ T5864] EXT4-fs: Ignoring removed nobh option [ 65.857597][ T5864] EXT4-fs: Ignoring removed nobh option [ 65.861824][ T5783] veth1_macvtap: entered promiscuous mode [ 65.877877][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.890867][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.901916][ T5783] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.902387][ T5864] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 65.910784][ T5783] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.924481][ T5864] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.958: inode #4294967295: comm syz.4.958: iget: illegal inode # [ 65.929002][ T5783] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.949038][ T5864] EXT4-fs (loop4): no journal found [ 65.951608][ T5783] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.956805][ T5864] EXT4-fs (loop4): can't get journal size [ 65.975713][ T5864] EXT4-fs (loop4): failed to initialize system zone (-22) [ 65.983469][ T5864] EXT4-fs (loop4): mount failed [ 66.039553][ T5874] syzkaller1: entered promiscuous mode [ 66.045299][ T5874] syzkaller1: entered allmulticast mode [ 66.087792][ T5876] netlink: 'syz.7.962': attribute type 10 has an invalid length. [ 66.095761][ T5876] netlink: 55 bytes leftover after parsing attributes in process `syz.7.962'. [ 66.522102][ T5907] loop2: detected capacity change from 0 to 1024 [ 66.529296][ T5907] EXT4-fs: Ignoring removed nobh option [ 66.535056][ T5907] EXT4-fs: Ignoring removed bh option [ 66.556097][ T5907] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.976: Allocating blocks 385-513 which overlap fs metadata [ 66.575467][ T5907] EXT4-fs (loop2): pa ffff8881064e94d0: logic 16, phys. 129, len 24 [ 66.583721][ T5907] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 66.684478][ T5922] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 66.692294][ T5922] netlink: 'syz.2.981': attribute type 2 has an invalid length. [ 66.700670][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 66.898601][ T5941] loop6: detected capacity change from 0 to 128 [ 66.913499][ T5941] vfat: Unknown parameter 'ÿÿÿ0xffffffffffffffff01777777777777777777777' [ 67.068385][ T5961] loop6: detected capacity change from 0 to 128 [ 67.238026][ T5970] loop6: detected capacity change from 0 to 256 [ 67.246665][ T5970] FAT-fs (loop6): bogus number of FAT sectors [ 67.252897][ T5970] FAT-fs (loop6): Can't find a valid FAT filesystem [ 67.455315][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1010'. [ 67.470258][ T5989] team0: Port device team_slave_0 removed [ 67.632771][ T6008] loop6: detected capacity change from 0 to 512 [ 67.639356][ T6008] EXT4-fs: Ignoring removed orlov option [ 67.645855][ T6008] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 67.655539][ T6008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 67.664759][ T6008] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.1018: corrupted in-inode xattr: e_value size too large [ 67.682450][ T6008] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1018: couldn't read orphan inode 15 (err -117) [ 67.727445][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1024'. [ 67.744130][ T6022] loop6: detected capacity change from 0 to 512 [ 67.751000][ T6022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.757839][ T6022] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.769471][ T6022] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 67.777981][ T6022] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 67.798875][ T6022] EXT4-fs (loop6): 1 truncate cleaned up [ 67.814944][ T6022] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.907065][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 67.907083][ T29] audit: type=1400 audit(1748693948.832:1880): avc: denied { shutdown } for pid=6049 comm="syz.2.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.963284][ T6054] loop4: detected capacity change from 0 to 1024 [ 67.972799][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1036'. [ 67.982186][ T29] audit: type=1400 audit(1748693948.832:1881): avc: denied { write } for pid=6049 comm="syz.2.1033" lport=46502 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.986303][ T6054] EXT4-fs: Ignoring removed oldalloc option [ 68.006353][ T29] audit: type=1400 audit(1748693948.832:1882): avc: denied { getopt } for pid=6049 comm="syz.2.1033" lport=46502 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 68.006434][ T29] audit: type=1400 audit(1748693948.872:1883): avc: denied { create } for pid=6051 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.041601][ T6054] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 68.056325][ T29] audit: type=1400 audit(1748693948.882:1884): avc: denied { create } for pid=6051 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.085704][ T29] audit: type=1400 audit(1748693948.892:1885): avc: denied { create } for pid=6051 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 68.106286][ T29] audit: type=1400 audit(1748693949.002:1886): avc: denied { mounton } for pid=6058 comm="syz.7.1037" path="/proc/8/task" dev="proc" ino=13004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 68.224838][ T29] audit: type=1400 audit(1748693949.142:1887): avc: denied { mount } for pid=6068 comm="syz.2.1041" name="/" dev="hugetlbfs" ino=13023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 68.262223][ T6074] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 68.322088][ T29] audit: type=1400 audit(1748693949.182:1888): avc: denied { unmount } for pid=6068 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 68.342725][ T29] audit: type=1400 audit(1748693949.192:1889): avc: denied { mac_admin } for pid=6072 comm="syz.7.1043" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.511147][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1051'. [ 68.602258][ T6018] 9pnet_fd: p9_fd_create_tcp (6018): problem connecting socket to 127.0.0.1 [ 68.946561][ T6122] loop5: detected capacity change from 0 to 128 [ 68.957881][ T6122] EXT4-fs mount: 46 callbacks suppressed [ 68.957946][ T6122] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.978749][ T6122] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.062767][ T4298] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.120105][ T6130] loop2: detected capacity change from 0 to 512 [ 69.134706][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1063'. [ 69.153354][ T6130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.166946][ T6130] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.220231][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.241409][ T6144] loop2: detected capacity change from 0 to 256 [ 69.248120][ T6144] FAT-fs (loop2): bogus number of FAT sectors [ 69.254833][ T6144] FAT-fs (loop2): Can't find a valid FAT filesystem [ 69.356560][ T6155] loop6: detected capacity change from 0 to 512 [ 69.364888][ T6159] loop2: detected capacity change from 0 to 128 [ 69.373040][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1076'. [ 69.374176][ T6159] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.386275][ T6155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.394960][ T6159] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.413031][ T6155] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.451675][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.461461][ T5216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.482006][ T6165] capability: warning: `syz.2.1078' uses deprecated v2 capabilities in a way that may be insecure [ 69.581469][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 69.593955][ T6175] ipvlan0: entered promiscuous mode [ 69.599943][ T6175] ipvlan0: left promiscuous mode [ 69.789036][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1086'. [ 69.804352][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1086'. [ 69.848499][ T6191] vlan2: entered allmulticast mode [ 69.854515][ T6191] bridge0: port 3(vlan2) entered blocking state [ 69.860994][ T6191] bridge0: port 3(vlan2) entered disabled state [ 69.868577][ T6191] vlan2: entered promiscuous mode [ 69.874517][ T6191] bridge0: mtu less than device minimum [ 69.886745][ T6197] loop7: detected capacity change from 0 to 512 [ 69.895245][ T6197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.905893][ T6197] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.917070][ T6197] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 69.925447][ T6197] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 69.934645][ T6197] EXT4-fs (loop7): 1 truncate cleaned up [ 69.942237][ T6197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.963321][ T6197] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.984082][ T5783] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.375830][ T6233] loop2: detected capacity change from 0 to 512 [ 70.395188][ T6233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.404155][ T6233] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.412983][ T6233] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 70.424807][ T6233] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 70.433650][ T6233] EXT4-fs (loop2): 1 truncate cleaned up [ 70.441154][ T6233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.463587][ T6233] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 70.487233][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.487416][ T6237] syzkaller1: entered promiscuous mode [ 70.501772][ T6237] syzkaller1: entered allmulticast mode [ 70.571199][ T6241] loop2: detected capacity change from 0 to 164 [ 70.652627][ T6252] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 71.074575][ T6277] loop5: detected capacity change from 0 to 1024 [ 71.084319][ T6277] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.095343][ T6277] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.133703][ T6277] JBD2: no valid journal superblock found [ 71.139483][ T6277] EXT4-fs (loop5): Could not load journal inode [ 71.153135][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'. [ 71.174085][ T6284] loop7: detected capacity change from 0 to 512 [ 71.204083][ T6288] loop5: detected capacity change from 0 to 512 [ 71.214917][ T6284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.220028][ T6288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.249484][ T6293] ALSA: seq fatal error: cannot create timer (-19) [ 71.249788][ T6284] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.274447][ T6288] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.296825][ T5783] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.309853][ T6288] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 71.327312][ T6288] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 71.361091][ T6288] EXT4-fs (loop5): 1 truncate cleaned up [ 71.367545][ T6288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.423335][ T6299] loop4: detected capacity change from 0 to 256 [ 71.474282][ T6288] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 71.505893][ T6306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6306 comm=syz.6.1136 [ 71.528209][ T6308] smc: net device bond0 applied user defined pnetid SYZ2 [ 71.536078][ T4298] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.536606][ T6308] smc: net device bond0 erased user defined pnetid SYZ2 [ 71.607112][ T6314] netlink: 'syz.7.1141': attribute type 12 has an invalid length. [ 71.670357][ T6330] netlink: 'syz.6.1140': attribute type 10 has an invalid length. [ 71.881703][ T6352] loop5: detected capacity change from 0 to 1024 [ 71.891396][ T6352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.904187][ T6352] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.931767][ T6352] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1157: bg 0: block 393: padding at end of block bitmap is not set [ 71.947796][ T6352] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 71.960557][ T6352] EXT4-fs (loop5): This should not happen!! Data will be lost [ 71.960557][ T6352] [ 71.996671][ T4298] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.050127][ T6362] loop7: detected capacity change from 0 to 512 [ 72.061627][ T6362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.074482][ T6362] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.102106][ T5783] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.128778][ T6368] loop7: detected capacity change from 0 to 1024 [ 72.136086][ T6368] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.147117][ T6368] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.158674][ T6368] JBD2: no valid journal superblock found [ 72.164512][ T6368] EXT4-fs (loop7): Could not load journal inode [ 72.171433][ T6370] IPVS: Error connecting to the multicast addr [ 72.361148][ T6380] loop7: detected capacity change from 0 to 512 [ 72.368350][ T6380] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 72.396647][ T6380] EXT4-fs (loop7): 1 truncate cleaned up [ 72.403101][ T6380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.416187][ T6380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.468589][ T6384] loop5: detected capacity change from 0 to 2048 [ 72.475642][ T6384] EXT4-fs: Ignoring removed bh option [ 72.493162][ T6384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.499029][ T6387] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 72.746791][ T6402] loop6: detected capacity change from 0 to 1024 [ 72.792303][ T6402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.806336][ T6402] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.895309][ T6416] loop2: detected capacity change from 0 to 512 [ 72.918652][ T6416] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.965193][ T6416] EXT4-fs (loop2): 1 truncate cleaned up [ 72.974599][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 72.974618][ T29] audit: type=1400 audit(1748693953.912:2118): avc: denied { cpu } for pid=6417 comm="syz.7.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.013215][ T6416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.028528][ T6416] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.038426][ T4165] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.056067][ T4165] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.068538][ T4165] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.068538][ T4165] [ 73.078886][ T4165] EXT4-fs (loop5): Total free blocks count 0 [ 73.085030][ T4165] EXT4-fs (loop5): Free/Dirty block details [ 73.091833][ T4165] EXT4-fs (loop5): free_blocks=2415919104 [ 73.097780][ T4165] EXT4-fs (loop5): dirty_blocks=8224 [ 73.103217][ T4165] EXT4-fs (loop5): Block reservation details [ 73.109385][ T4165] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 73.130480][ T4165] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 73.259493][ T6434] SELinux: Context system_u:object_r:udev_tbl_t:s0 is not valid (left unmapped). [ 73.271322][ T29] audit: type=1400 audit(1748693954.202:2119): avc: denied { relabelto } for pid=6433 comm="syz.4.1190" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_tbl_t:s0" [ 73.291440][ T6436] loop7: detected capacity change from 0 to 8192 [ 73.298617][ T29] audit: type=1400 audit(1748693954.202:2120): avc: denied { associate } for pid=6433 comm="syz.4.1190" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_tbl_t:s0" [ 73.386123][ T29] audit: type=1400 audit(1748693954.312:2121): avc: denied { setopt } for pid=6439 comm="syz.5.1191" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.389219][ T6440] pim6reg: entered allmulticast mode [ 73.434922][ T6440] pim6reg: left allmulticast mode [ 73.476159][ T4201] ================================================================== [ 73.484290][ T4201] BUG: KCSAN: data-race in copy_page_from_iter_atomic / fat16_ent_put [ 73.492465][ T4201] [ 73.494806][ T4201] write to 0xffff888107bf9440 of 2 bytes by task 6436 on cpu 1: [ 73.502456][ T4201] fat16_ent_put+0x28/0x60 [ 73.506912][ T4201] fat_alloc_clusters+0x4ce/0xa80 [ 73.511959][ T4201] fat_get_block+0x258/0x5e0 [ 73.516566][ T4201] __block_write_begin_int+0x400/0xf90 [ 73.522117][ T4201] cont_write_begin+0x5fc/0x970 [ 73.526978][ T4201] fat_write_begin+0x4f/0xe0 [ 73.531699][ T4201] cont_write_begin+0x1b0/0x970 [ 73.536589][ T4201] fat_write_begin+0x4f/0xe0 [ 73.541210][ T4201] generic_cont_expand_simple+0xad/0x150 [ 73.546874][ T4201] fat_cont_expand+0x3e/0x170 [ 73.551585][ T4201] fat_setattr+0x2a5/0x8a0 [ 73.556010][ T4201] notify_change+0x806/0x890 [ 73.560621][ T4201] do_ftruncate+0x34b/0x450 [ 73.565129][ T4201] __x64_sys_ftruncate+0x68/0xc0 [ 73.570083][ T4201] x64_sys_call+0xd65/0x2fb0 [ 73.574691][ T4201] do_syscall_64+0xd2/0x200 [ 73.579391][ T4201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.585327][ T4201] [ 73.587692][ T4201] read to 0xffff888107bf9400 of 512 bytes by task 4201 on cpu 0: [ 73.595414][ T4201] copy_page_from_iter_atomic+0x7af/0x1060 [ 73.601246][ T4201] generic_perform_write+0x2c2/0x490 [ 73.606554][ T4201] shmem_file_write_iter+0xc5/0xf0 [ 73.611674][ T4201] lo_rw_aio+0x5f7/0x7c0 [ 73.615933][ T4201] loop_process_work+0x52d/0xa60 [ 73.620888][ T4201] loop_workfn+0x31/0x40 [ 73.625271][ T4201] process_scheduled_works+0x4cb/0x9d0 [ 73.630772][ T4201] worker_thread+0x582/0x770 [ 73.635386][ T4201] kthread+0x489/0x510 [ 73.639470][ T4201] ret_from_fork+0xda/0x150 [ 73.643989][ T4201] ret_from_fork_asm+0x1a/0x30 [ 73.648768][ T4201] [ 73.651105][ T4201] Reported by Kernel Concurrency Sanitizer on: [ 73.657302][ T4201] CPU: 0 UID: 0 PID: 4201 Comm: kworker/u8:55 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 73.669651][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.679736][ T4201] Workqueue: loop7 loop_workfn [ 73.684627][ T4201] ================================================================== [ 73.724636][ T5216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.